|
200251
|
8.8 |
HIGH
Local
|
xen debian fedoraproject
|
xen debian_linux fedora
|
An issue was discovered in Xen through 4.14.x. In the Ocaml xenstored implementation, the internal representation of the tree has special cases for the root node, because this node has no parent. Unf…
|
CWE-862
Missing Authorization
|
CVE-2020-29479
|
2024-11-21 14:24 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200252
|
6.2 |
MEDIUM
Local
|
xen debian fedoraproject
|
xen debian_linux fedora
|
An issue was discovered in Xen through 4.14.x. A bounds check common to most operation time functions specific to FIFO event channels depends on the CPU observing consistent state. While the producer…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-29571
|
2024-11-21 14:24 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200253
|
8.8 |
HIGH
Local
|
xen linux netapp debian
|
xen linux_kernel hci_compute_node_bios solidfire_\&_hci_management_node solidfire_\&_hci_storage_node debian_linux
|
An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when st…
|
CWE-416
Use After Free
|
CVE-2020-29569
|
2024-11-21 14:24 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200254
|
6.2 |
MEDIUM
Local
|
xen fedoraproject
|
xen fedora
|
An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2020-29567
|
2024-11-21 14:24 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200255
|
5.5 |
MEDIUM
Local
|
xen debian fedoraproject
|
xen debian_linux fedora
|
An issue was discovered in Xen through 4.14.x. When they require assistance from the device model, x86 HVM guests must be temporarily de-scheduled. The device model will signal Xen when it has comple…
|
CWE-674
Uncontrolled Recursion
|
CVE-2020-29566
|
2024-11-21 14:24 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200256
|
5.6 |
MEDIUM
Network
|
golang netapp
|
go trident
|
The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that be…
|
NVD-CWE-Other
|
CVE-2020-29511
|
2024-11-21 14:24 |
2020-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200257
|
5.6 |
MEDIUM
Network
|
golang netapp
|
go trident
|
The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave …
|
NVD-CWE-Other
|
CVE-2020-29510
|
2024-11-21 14:24 |
2020-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200258
|
5.6 |
MEDIUM
Network
|
golang netapp
|
go trident
|
The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that …
|
NVD-CWE-Other
|
CVE-2020-29509
|
2024-11-21 14:24 |
2020-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200259
|
8.8 |
HIGH
Network
|
macally
|
wifisd2-2a82_firmware
|
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator acco…
|
CWE-287
Improper Authentication
|
CVE-2020-29669
|
2024-11-21 14:24 |
2020-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
200260
|
7.8 |
HIGH
Local
|
westerndigital
|
dashboard
|
Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the SYSTEM account.
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2020-29654
|
2024-11-21 14:24 |
2020-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|