|
197261
|
5.0 |
MEDIUM
Network
|
kubernetes oracle
|
kubernetes communications_cloud_native_core_network_slice_selection_function communications_cloud_native_core_service_communication_proxy communications_cloud_native_core_policy
|
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacke…
|
NVD-CWE-noinfo
|
CVE-2020-8554
|
2024-11-21 14:39 |
2021-01-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197262
|
6.5 |
MEDIUM
Network
|
netapp
|
clustered_data_ontap
|
Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage …
|
NVD-CWE-noinfo
|
CVE-2020-8581
|
2024-11-21 14:39 |
2021-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197263
|
9.8 |
CRITICAL
Network
|
netapp
|
solidfire hci_management_node hci_storage_node element_os
|
Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.
|
NVD-CWE-noinfo
|
CVE-2020-8584
|
2024-11-21 14:39 |
2021-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197264
|
8.8 |
HIGH
Network
|
proofpoint
|
insider_threat_management
|
rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated users to execute arbitrary code as SYSTEM because of imprope…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2020-8884
|
2024-11-21 14:39 |
2021-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197265
|
9.8 |
CRITICAL
Network
|
bilanc
|
bilanc
|
Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastr…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2020-8995
|
2024-11-21 14:39 |
2020-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197266
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output which fails to check the range of a point…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-8944
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197267
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size was not validated against the requested si…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8943
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197268
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was not validated against the requrested size.…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8942
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197269
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker controlled klinux_addr_buffer parameter. …
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8941
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197270
|
5.5 |
MEDIUM
Local
|
google
|
asylo
|
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvmsg using an attacker controlled result parameter. The parameter …
|
CWE-125
Out-of-bounds Read
|
CVE-2020-8940
|
2024-11-21 14:39 |
2020-12-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|