Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2019-11249 5.8 The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s ma 2020-10-02 16:45:00
CVE-2019-11247 6.5 The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings w 2020-10-02 16:21:00
CVE-2020-26523 4.3 Froala Editor before 3.2.2 allows XSS via pasted content. 2020-10-02 16:04:00
CVE-2020-13326 3.5 A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github project import could be bypassed. 2020-10-02 16:00:00
CVE-2019-11064 5.0 A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password in plain text via cgibin/Expo 2020-10-02 15:27:00
CVE-2019-11060 7.8 The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associ 2020-10-02 15:26:00
CVE-2014-9557 4.3 Multiple cross-site scripting (XSS) vulnerabilities in SmartCMS v.2. 2020-10-02 14:56:00
CVE-2015-8839 1.9 Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized h 2020-10-02 14:56:00
CVE-2018-7515 4.6 In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets. 2020-10-02 14:55:00
CVE-2018-7513 4.6 In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow. 2020-10-02 14:55:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39927
Zapisa po stranici: