|
209591
|
6.6 |
MEDIUM
Network
|
spice_project redhat canonical debian opensuse
|
spice enterprise_linux ubuntu_linux debian_linux enterprise_linux_eus leap enterprise_linux_aus openstack enterprise_linux_tus enterprise_linux_update_services_for_sap_solu…
|
Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Both the SPICE client (spice-gtk) and server are affe…
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-14355
|
2024-11-21 14:03 |
2020-10-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209592
|
8.8 |
HIGH
Local
|
dpdk opensuse canonical
|
data_plane_development_kit leap ubuntu_linux
|
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A flawed bounds checking in the copy_data function leads to a buffer overflow allowing an attacker in a virtual machine to wri…
|
-
|
CVE-2020-14374
|
2024-11-21 14:03 |
2020-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209593
|
3.3 |
LOW
Local
|
dpdk opensuse canonical
|
data_plane_development_kit leap ubuntu_linux
|
An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the `move_desc` function can lead to large amounts of CPU cycles being eaten up in a long running loop. An attacker could c…
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2020-14378
|
2024-11-21 14:03 |
2020-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209594
|
7.1 |
HIGH
Local
|
dpdk canonical opensuse
|
data_plane_development_kit ubuntu_linux leap
|
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A complete lack of validation of attacker-controlled parameters can lead to a buffer over read. The results of the over read a…
|
-
|
CVE-2020-14377
|
2024-11-21 14:03 |
2020-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209595
|
7.8 |
HIGH
Local
|
dpdk opensuse canonical
|
data_plane_development_kit leap ubuntu_linux
|
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. A lack of bounds checking when copying iv_data from the VM guest memory into host memory can lead to a large buffer overflow. …
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-14376
|
2024-11-21 14:03 |
2020-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209596
|
7.8 |
HIGH
Local
|
dpdk opensuse canonical
|
data_plane_development_kit leap ubuntu_linux
|
A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. Virtio ring descriptors, and the data they describe are in a region of memory accessible by from both the virtual machine and …
|
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
|
CVE-2020-14375
|
2024-11-21 14:03 |
2020-10-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209597
|
5.3 |
MEDIUM
Network
|
podman_project redhat fedoraproject
|
podman enterprise_linux openshift_container_platform fedora
|
An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible REST API, if multiple containers are cr…
|
CWE-212
Improper Removal of Sensitive Information Before Storage or Transfer
|
CVE-2020-14370
|
2024-11-21 14:03 |
2020-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209598
|
7.1 |
HIGH
Local
|
redhat debian
|
ansible_tower ansible_engine ceph_storage openstack_platform debian_linux
|
A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, when installing packages using the dnf module. GPG signatures are ignored during …
|
-
|
CVE-2020-14365
|
2024-11-21 14:03 |
2020-09-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209599
|
3.5 |
LOW
Adjacent
|
philips
|
clinical_collaboration_platform
|
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage…
|
NVD-CWE-Other
|
CVE-2020-14525
|
2024-11-21 14:03 |
2020-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209600
|
4.3 |
MEDIUM
Network
|
philips
|
clinical_collaboration_platform
|
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to…
|
-
|
CVE-2020-14506
|
2024-11-21 14:03 |
2020-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|