| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-1983 | 2.1 | A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of service. | 2023-11-07 03:19:00 | 2020-04-22 20:15:00 |
| CVE-2020-1699 | 5.0 | A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions 14.2.7 and 15.1.0. An unauthenticated attacker could use this flaw to cause information di | 2023-11-07 03:19:00 | 2020-04-21 17:15:00 |
| CVE-2020-1967 | 5.0 | Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occur | 2023-11-07 03:19:00 | 2020-04-21 14:15:00 |
| CVE-2020-1751 | 5.9 | An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of ser | 2023-11-07 03:19:00 | 2020-04-17 19:15:00 |
| CVE-2020-1964 | 7.5 | It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerabilities (C | 2023-11-07 03:19:00 | 2020-04-16 19:15:00 |
| CVE-2020-1730 | 5.0 | A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup th | 2023-11-07 03:19:00 | 2020-04-13 19:15:00 |
| CVE-2020-1759 | 5.8 | A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and pote | 2023-11-07 03:19:00 | 2020-04-13 13:15:00 |
| CVE-2020-1728 | 5.8 | A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses. This does not directly lead to a security issue, yet it might | 2023-11-07 03:19:00 | 2020-04-06 14:15:00 |
| CVE-2020-1927 | 5.8 | In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL. | 2023-11-07 03:19:00 | 2020-04-02 00:15:00 |
| CVE-2020-1958 | 3.5 | When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the credentialsValidator.userSearch filter barrier that determines if a valid LDAP user is allowed to authenticate with | 2023-11-07 03:19:00 | 2020-04-01 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: