|
197171
|
6.5 |
MEDIUM
Network
|
kubernetes
|
container_storage_interface_snapshotter
|
Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resource when: - The VolumeSnapshot referenced a non-existing PersistentVolumeClaim a…
|
CWE-476
NULL Pointer Dereference
|
CVE-2020-8569
|
2024-11-21 14:39 |
2021-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197172
|
6.5 |
MEDIUM
Network
|
kubernetes
|
secrets_store_csi_driver
|
Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem an…
|
CWE-22
Path Traversal
|
CVE-2020-8568
|
2024-11-21 14:39 |
2021-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197173
|
6.5 |
MEDIUM
Network
|
google hashicorp microsoft
|
secret_manager_provider_for_secret_store_csi_driver vault_provider_for_secrets_store_csi_driver azure_key_vault_provider_for_secrets_store_csi_driver
|
Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass …
|
CWE-22
Path Traversal
|
CVE-2020-8567
|
2024-11-21 14:39 |
2021-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197174
|
5.0 |
MEDIUM
Network
|
kubernetes oracle
|
kubernetes communications_cloud_native_core_network_slice_selection_function communications_cloud_native_core_service_communication_proxy communications_cloud_native_core_policy
|
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacke…
|
NVD-CWE-noinfo
|
CVE-2020-8554
|
2024-11-21 14:39 |
2021-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197175
|
6.5 |
MEDIUM
Network
|
netapp
|
clustered_data_ontap
|
Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage …
|
NVD-CWE-noinfo
|
CVE-2020-8581
|
2024-11-21 14:39 |
2021-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197176
|
9.8 |
CRITICAL
Network
|
netapp
|
solidfire hci_management_node hci_storage_node element_os
|
Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.
|
NVD-CWE-noinfo
|
CVE-2020-8584
|
2024-11-21 14:39 |
2021-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197177
|
8.8 |
HIGH
Network
|
proofpoint
|
insider_threat_management
|
rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated users to execute arbitrary code as SYSTEM because of imprope…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2020-8884
|
2024-11-21 14:39 |
2021-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197178
|
9.8 |
CRITICAL
Network
|
bilanc
|
bilanc
|
Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastr…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2020-8995
|
2024-11-21 14:39 |
2020-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197179
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output which fails to check the range of a point…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-8944
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197180
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size was not validated against the requested si…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8943
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|