|
209571
|
7.3 |
HIGH
Network
|
redhat
|
louketo_proxy
|
A vulnerability was found in all versions of Keycloak Gatekeeper, where on using lower case HTTP headers (via cURL) an attacker can bypass our Gatekeeper. Lower case headers are also accepted by some…
|
-
|
CVE-2020-14359
|
2024-11-21 14:03 |
2021-02-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209572
|
9.8 |
CRITICAL
Network
|
pyyaml
oracle
|
pyyaml
communications_cloud_native_core_network_function_cloud_native_environment
|
A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or…
|
CWE-20
Improper Input Validation
|
CVE-2020-14343
|
2024-11-21 14:03 |
2021-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209573
|
5.5 |
MEDIUM
Local
|
gnome
|
control_center
|
A flaw was found in the GNOME Control Center in Red Hat Enterprise Linux 8 versions prior to 8.2, where it improperly uses Red Hat Customer Portal credentials when a user registers a system through t…
|
-
|
CVE-2020-14391
|
2024-11-21 14:03 |
2021-02-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209574
|
7.0 |
HIGH
Local
|
morphisec
madshi
cisco
|
unified_threat_prevention_platform
madcodehook
advanced_malware_protection
|
A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving …
|
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
|
CVE-2020-14418
|
2024-11-21 14:03 |
2021-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209575
|
7.8 |
HIGH
Local
|
x.org
|
x_server
|
A flaw was found in the X.Org Server before version 1.20.10. An out-of-bounds access in the XkbSetMap function may lead to a privilege escalation vulnerability. The highest threat from this vulnerabi…
|
-
|
CVE-2020-14360
|
2024-11-21 14:03 |
2021-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209576
|
5.4 |
MEDIUM
Network
|
libsdl
debian
fedoraproject
|
simple_directmedia_layer
debian_linux
fedora
|
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
|
CWE-125
Out-of-bounds Read
|
CVE-2020-14410
|
2024-11-21 14:03 |
2021-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209577
|
7.8 |
HIGH
Local
|
libsdl
fedoraproject
debian
starwindsoftware
|
simple_directmedia_layer
fedora
debian_linux
starwind_virtual_san
|
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
|
CWE-787
CWE-190
Out-of-bounds Write
Integer Overflow or Wraparound
|
CVE-2020-14409
|
2024-11-21 14:03 |
2021-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209578
|
2.7 |
LOW
Network
|
redhat
|
single_sign-on
|
The "Test Connection" available in v7.x of the Red Hat Single Sign On application console can permit an authorized user to cause SMTP connections to be attempted to arbitrary hosts and ports of the u…
|
-
|
CVE-2020-14341
|
2024-11-21 14:03 |
2021-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209579
|
7.1 |
HIGH
Network
|
eclipse
|
che
|
A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. When configured with cookies authentication, Theia IDE doesn't properly set the SameSite value, allowing…
|
-
|
CVE-2020-14368
|
2024-11-21 14:03 |
2020-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209580
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is abou…
|
CWE-416
Use After Free
|
CVE-2020-14381
|
2024-11-21 14:03 |
2020-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
