Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ontainer: References: - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00045.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRHKFVV4MRWNNJOYQOVP64L4UVWYPEO4/ - https://www.openwall.com/lists/oss-security/2020/05/18/2 - https://www.oracle.com/security-alerts/cpujan2021.html - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10726 - https://bugs.dpdk.org/show_bug.cgi?id=271
CVE ID: CVE-2020-10727 State: PUBLISHED Published: 2020-06-26T15:38:13 Last Updated: 2024-08-04T11:14:14.722Z Vendors: Red Hat Products: ActiveMQ Artemis Problem Types: Insufficiently Protected Credentials Description: A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properties file) when executing the `resetUsers` operation. A local attacker can use this flaw to read the contents of the Artemis shadow file. Additional Analyst Notes: - CVE Program Container: References: - https://issues.redhat.com/browse/ENTMQBR-3435 - https://bugzilla.redhat.com/show_
- CVE Program Container: References: - https://issues.redhat.com/browse/ENTMQBR-3435 - https://bugzilla.redhat.com/show_bug.cgi?id=1827200 - https://security.netapp.com/advisory/ntap-20210827-0001/
CVE ID: CVE-2020-10728 State: PUBLISHED Published: 2022-08-16T19:33:57 Last Updated: 2024-08-04T11:14:14.825Z Vendors: n/a Products: automationbroker/apb Problem Types: CWE-266 Description: A flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1. This container grants all users sudoer permissions allowing an unauthorized user with access to the running container the ability to escalate their own privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1829674
CVE ID: CVE-2020-10729 State: PUBLISHED Published: 2021-05-27T18:46:12 Last Updated: 2024-08-04T11:14:14.897Z Vendors: n/a Products: Ansible Problem Types: CWE-330 Description: A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords are exposed at once for the file. This flaw affects Ansible Engine versions before 2.9.6. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1831089 - https://github.com
t Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1831089 - https://github.com/ansible/ansible/issues/34144 - https://www.debian.org/security/2021/dsa-4950
CVE ID: CVE-2020-10730 State: PUBLISHED Published: 2020-07-07T13:38:04 Last Updated: 2024-08-04T11:14:14.217Z Vendors: n/a Products: Samba Problem Types: Use After Free Description: A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CV
ointer dereference. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1849489%3B - https://www.samba.org/samba/security/CVE-2020-10730.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YLNQ5GRXUKYRUAOFZ4DUBVN4SMTL6Q2/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html - https://security.gentoo.org/glsa/202007-15 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00000.html - http://lists.opensus
o.org/glsa/202007-15 - http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00000.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html - https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html - https://www.debian.org/security/2021/dsa-4884
CVE ID: CVE-2020-10731 State: PUBLISHED Published: 2020-07-31T12:38:45 Last Updated: 2024-08-04T11:14:14.177Z Vendors: n/a Products: nova_libvirt container provided by the Red Hat OpenStack Platform Problem Types: CWE-284 Description: A flaw was found in the nova_libvirt container provided by the Red Hat OpenStack Platform 16, where it does not have SELinux enabled. This flaw causes sVirt, an important isolation mechanism, to be disabled for all running virtual machines. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1831544
CVE ID: CVE-2020-10732 State: PUBLISHED Published: 2020-06-12T00:00:00 Last Updated: 2024-08-04T11:14:14.998Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Linux kernel Products: kernel Problem Types: CWE-908 Description: A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html - https://usn.ubuntu.com/4411-1/ - h
2.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html - https://usn.ubuntu.com/4411-1/ - https://usn.ubuntu.com/4427-1/ - https://usn.ubuntu.com/4439-1/ - https://usn.ubuntu.com/4440-1/ - https://usn.ubuntu.com/4485-1/ - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10732 - https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=aca969cacf07f41070d788ce2b8ca71f09d5207d - https://github.com/ruscur/linux/commit/a95cdec9fa0c08e6eeb410d461c03af8fd1fef0a - https://github.com/google/kmsan/issues/76 - https://twitter.com/grsecurity/status/1252558055629299712 - https://lore.kernel.org/lkml/CAG_fn=VZZ7yUxtOGzuTLkr7wmfXWtKK9BHHYawj=rt9XWnCYvg
grsecurity/status/1252558055629299712 - https://lore.kernel.org/lkml/CAG_fn=VZZ7yUxtOGzuTLkr7wmfXWtKK9BHHYawj=rt9XWnCYvg%40mail.gmail.com/ - https://security.netapp.com/advisory/ntap-20210129-0005/
CVE ID: CVE-2020-10733 State: PUBLISHED Published: 2020-09-16T14:55:56 Last Updated: 2024-08-04T11:14:14.790Z Vendors: n/a Products: PostgreSQL Problem Types: CWE-426 Description: The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where the installer loads or the current working directory take precedence over the intended executables. An attacker having permission to add files into one of those directories can use this to execute arbitrary code with the installer's administrative rights. Additional Analyst Notes: - CVE Program Container: References: - https://www.postgresql.org/support/securit
tive rights. Additional Analyst Notes: - CVE Program Container: References: - https://www.postgresql.org/support/security/11/ - https://www.postgresql.org/about/news/2038/ - https://security.netapp.com/advisory/ntap-20201001-0006/
CVE ID: CVE-2020-10734 State: PUBLISHED Published: 2021-02-11T15:29:45 Last Updated: 2024-08-04T11:14:14.684Z Vendors: n/a Products: keycloak Problem Types: CWE-352 Description: A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1831662 - https://issues.redhat.com/browse/KEYCLOAK-13653
CVE ID: CVE-2020-10735 State: PUBLISHED Published: 2022-09-09T00:00:00.000Z Last Updated: 2025-11-03T21:44:16.139Z Vendors: n/a Products: python Problem Types: DoS Description: A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2020-10735 - https://github
yst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/CVE-2020-10735 - https://github.com/python/cpython/issues/95778 - https://docs.google.com/document/d/1KjuF_aXlzPUxTK4BMgezGJ2Pn7uevfX7g0_mvgHlL7Y - https://bugzilla.redhat.com/show_bug.cgi?id=1834423 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EWKR2SPX3JORLWCXFY3KN2U5B5CIUQQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2VCU6EVQDIXNCEDJUCTFIER2WVNNDTYZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V7ZUJDHK7KNG6SLIFXW7MNZ6O2PUJYK6/ - https://li
ject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V7ZUJDHK7KNG6SLIFXW7MNZ6O2PUJYK6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSRPVJZL6DJFWKYRHMNJB7VCEUCBKRF5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XL6E5A3I36TRR73VNBOXNIQP4AMZDFZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/32AAQKABEKFCB5DDV5OONRZK6BS23HPW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U4ZZV4CDFRMTPDBI7C5L43RFL3XLIGUY/ - https://lists.fedoraproject.org/archives/list/package-anno
fedoraproject.org/message/U4ZZV4CDFRMTPDBI7C5L43RFL3XLIGUY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZYJSGLSCQOKXXFVJVJQAXLEOJBIWGEL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OT5WQB7Z3CXOWVBD2AFAHYPA5ONYFFZ4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBPDVCDIUCEBE7C4NAGNA2KQJYOTPBAZ/ - http://www.openwall.com/lists/oss-security/2022/09/21/1 - http://www.openwall.com/lists/oss-security/2022/09/21/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKYE2DOI2X7WZXAWTQJZAXYIWM
ps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKYE2DOI2X7WZXAWTQJZAXYIWM37HDCY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OT5U223OE5ZOUHZAZYSYSWVJQIKDE73E/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PD7FTLJOIGMUSCDR3JAN6WRFHJEE4PH5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/76YE7AM37MRU76XJV4M27CWDAMUGNRYK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZEOAJWGGY55QU35UM2OVZATBW5MX2OZD/ - https://lists.fedoraproject.org/archiv
ge-announce%40lists.fedoraproject.org/message/ZEOAJWGGY55QU35UM2OVZATBW5MX2OZD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NHC6IUU7CLRQ3QLPWUXLONSG3SXFTR47/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TD7JDDKJXK6D26XAN3YRFNM2LAJHT5UO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXF6MQ74HVIDDSR5AE2UDR24I6D4FEPC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFGV7P2PYFBMK32OKHCAC2ZPJQV5AUDF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.o
GV7P2PYFBMK32OKHCAC2ZPJQV5AUDF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMWPRAAJS7I6U3U45V7GZVXWNSECI22M/ - https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html
CVE ID: CVE-2020-10736 State: PUBLISHED Published: 2020-06-22T17:49:38 Last Updated: 2024-08-04T11:14:14.781Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: ceph Problem Types: CWE-285 Description: An authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the ceph-mon and ceph-mgr daemons do not properly restrict access, resulting in gaining access to unauthorized resources. This flaw allows an authenticated client to modify the configuration and possibly conduct further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10736 - htt
l Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10736 - https://ceph.io/releases/v15-2-2-octopus-released/
CVE ID: CVE-2020-10737 State: PUBLISHED Published: 2020-05-27T00:00:00 Last Updated: 2024-08-04T11:14:14.865Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: oddjob Problem Types: CWE-362 Description: A race condition was found in the mkhomedir tool shipped with the oddjob package in versions before 0.34.5 and 0.34.6 wherein, during the home creation, mkhomedir copies the /etc/skel directory into the newly created home and changes its ownership to the home's user without properly checking the homedir path. This flaw allows an attacker to leverage this issue by creating a symlink point to a target folder, which then has its ownership transfe
an attacker to leverage this issue by creating a symlink point to a target folder, which then has its ownership transferred to the new home directory's unprivileged user. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10737 - https://pagure.io/oddjob/c/10b8aaa1564b723a005b53acc069df71313f4cac?branch
CVE ID: CVE-2020-10738 State: PUBLISHED Published: 2020-05-21T15:09:20 Last Updated: 2024-08-04T11:14:14.722Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: moodle Problem Types: CWE-20 Description: A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported versions. It was possible to create a SCORM package in such a way that when added to a course, it could be interacted with via web services in order to achieve remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10738 - https:
nalyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10738 - https://moodle.org/mod/forum/discuss.php?d=403513 - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-68410
CVE ID: CVE-2020-10739 State: PUBLISHED Published: 2020-06-02T12:22:15 Last Updated: 2024-08-04T11:14:14.693Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: istio.io Products: istio/envoy Problem Types: CWE-476 Description: Istio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contain the following vulnerability when telemetry v2 is enabled: by sending a specially crafted packet, an attacker could trigger a Null Pointer Exception resulting in a Denial of Service. This could be sent to the ingress gateway or a sidecar, triggering a null pointer exception which results in a denial of service. This also affects servicemesh-proxy where a null pointer exception fl
er exception which results in a denial of service. This also affects servicemesh-proxy where a null pointer exception flaw was found in servicemesh-proxy. When running Telemetry v2 (not on by default in version 1.4.x), an attacker could send a specially crafted packet to the ingress gateway or proxy sidecar, triggering a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10739 - https://istio.io/news/security/istio-security-2020-005/ - https://github.com/istio/envoy/commit/8788a3cf255b647fd14e6b5e2585abaaedb28153#diff-fcf2cf5dd389b5285f882ba4a8708633
CVE ID: CVE-2020-10740 State: PUBLISHED Published: 2020-06-22T17:39:58 Last Updated: 2024-08-04T11:14:14.944Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: [UNKNOWN] Products: wildfly Problem Types: CWE-502 Description: A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10740
CVE ID: CVE-2020-10741 State: REJECTED Published: 2020-05-12T13:46:46 Last Updated: 2020-05-13T06:29:08 Description: No description available.
CVE ID: CVE-2020-10742 State: PUBLISHED Published: 2021-06-02T10:42:32 Last Updated: 2024-08-04T11:14:14.961Z Vendors: n/a Products: Kernel Problem Types: Buffer Overflow Description: A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmalloc will cause a kernel panic. The highest threat from this vulnerability is to data confidentiality and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1835127
CVE ID: CVE-2020-10743 State: PUBLISHED Published: 2021-06-02T10:54:17 Last Updated: 2024-08-04T11:14:14.983Z Vendors: n/a Products: Kibana Problem Types: CWE-358 Description: It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker to trick a user into performing arbitrary actions in OCP's distribution of Kibana, such as clickjacking. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1834550
CVE ID: CVE-2020-10744 State: PUBLISHED Published: 2020-05-15T13:44:33 Last Updated: 2024-08-04T11:14:15.623Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Red Hat Products: ansible Problem Types: CWE-377 Description: An incomplete fix was found for the fix of the flaw CVE-2020-1733 ansible: insecure temporary directory when running become_user from become directive. The provided fix is insufficient to prevent the race condition on systems using ACLs and FUSE filesystems. Ansible Engine 2.7.18, 2.8.12, and 2.9.9 as well as previous versions are affected and Ansible Tower 3.4.5, 3.5.6 and 3.6.4 as well as previous versions are affected. Additional Analyst Not
are affected and Ansible Tower 3.4.5, 3.5.6 and 3.6.4 as well as previous versions are affected. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10744
CVE ID: CVE-2020-10745 State: PUBLISHED Published: 2020-07-07T13:33:08 Last Updated: 2024-08-04T11:14:14.729Z Vendors: n/a Products: Samba Problem Types: Uncontrolled Resource Consumption Description: A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1849491%3B - https://www.samba.org/samba/security/CVE-2
ainer: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1849491%3B - https://www.samba.org/samba/security/CVE-2020-10745.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YLNQ5GRXUKYRUAOFZ4DUBVN4SMTL6Q2/ - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html - https://security.gentoo.org/glsa/202007-15 - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html - https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html
CVE ID: CVE-2020-10746 State: PUBLISHED Published: 2020-10-19T20:42:17 Last Updated: 2024-08-04T11:14:14.720Z Vendors: n/a Products: Infinispan Problem Types: CWE-862 Description: A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both REST and HotRod APIs. This flaw allows a user authenticated to the local machine to perform all operations on the caches, including the creation, update, deletion, and shutdown of the entire server. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1835922
CVE ID: CVE-2020-10747 State: REJECTED Published: 2020-06-17T14:00:25 Last Updated: 2020-06-17T14:00:25 Description: No description available.
CVE ID: CVE-2020-10748 State: PUBLISHED Published: 2020-09-16T17:56:07 Last Updated: 2024-08-04T11:14:14.917Z Vendors: n/a Products: keycloak Problem Types: CWE-79 Description: A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. This flaw allows an attacker to conduct cross-site scripting or further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1836786
CVE ID: CVE-2020-10749 State: PUBLISHED Published: 2020-06-03T13:45:39 Last Updated: 2024-08-04T11:14:15.590Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Red Hat Products: containernetworking/plugins Problem Types: CWE-300 Description: A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container. Additional Analyst Notes: - CVE Program Container: References:
tainers, to redirect traffic to the malicious container. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10749 - https://groups.google.com/forum/#%21topic/kubernetes-security-announce/BMb_6ICCfp8 - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00063.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00065.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DV3HCDZYUTPPVDUMTZXDKK6IUO3JMGJC/
CVE ID: CVE-2020-10750 State: PUBLISHED Published: 2020-06-19T19:23:04 Last Updated: 2024-08-04T11:14:15.575Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: the Jager project Products: jaegertracing/jaeger Problem Types: CWE-532, CWE-200 Description: Sensitive information written to a log file vulnerability was found in jaegertracing/jaeger before version 1.18.1 when the Kafka data store is used. This flaw allows an attacker with access to the container's log file to discover the Kafka credentials. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10750 - https://github.com/jaegertracing/jaeg