|
197181
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was not validated against the requrested size.…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8942
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197182
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker controlled klinux_addr_buffer parameter. …
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8941
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197183
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker controlled result parameter. The parameter …
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8940
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197184
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An out of bounds read on the enc_untrusted_inet_ntop function allows an attack to extend the result size that is used by memcpy() to read memory from within the enclave heap. We recommend upgrading p…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8939
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197185
|
3.3 |
LOW
Local
|
google
|
asylo
|
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to FromkLinuxSockAddr with attacker controlled content and size of klinux_addr which a…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-8938
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197186
|
3.3 |
LOW
Local
|
google
|
asylo
|
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to enc_untrusted_create_wait_queue that uses a pointer queue that relies on UntrustedL…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-8937
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197187
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to validate the buffer range within sgx_params …
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8936
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197188
|
7.8 |
HIGH
Local
|
google
|
asylo
|
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allow an attacker to make an Ecall_restore function call to reallocate untrusted code and overwrite sections of the Enclave m…
|
CWE-119 CWE-787
Incorrect Access of Indexable Resource ('Range Error') Out-of-bounds Write
|
CVE-2020-8935
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197189
|
3.3 |
LOW
Local
|
google quarkus oracle netapp
|
guava quarkus peoplesoft_enterprise_peopletools data_integrator weblogic_server nosql_database commerce_guided_search communications_cloud_native_core_network_slice_selection_fun…
|
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API c…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2020-8908
|
2024-11-21 14:39 |
2020-12-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197190
|
3.5 |
LOW
Adjacent
|
google
|
gerrit
|
An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verificat…
|
NVD-CWE-Other
|
CVE-2020-8920
|
2024-11-21 14:39 |
2020-12-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|