|
211551
|
9.8 |
CRITICAL
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 when processing a DNSSL option, rtsold(8) decodes domain …
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-25583
|
2024-11-21 14:18 |
2021-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211552
|
9.8 |
CRITICAL
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 rtsold(8) does not verify that the RDNSS option does not …
|
CWE-120
Classic Buffer Overflow
|
CVE-2020-25577
|
2024-11-21 14:18 |
2021-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211553
|
8.7 |
HIGH
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8) or killall(1), calls jail_attach(2) to enter a ja…
|
CWE-362
Race Condition
|
CVE-2020-25582
|
2024-11-21 14:18 |
2021-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211554
|
7.5 |
HIGH
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill …
|
CWE-362
Race Condition
|
CVE-2020-25581
|
2024-11-21 14:18 |
2021-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211555
|
5.3 |
MEDIUM
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.2-STABLE before r369346, 11.4-STABLE before r369345, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 a regression in the login.access(5) rule processor has the effect of causing rules…
|
CWE-697
Incorrect Comparison
|
CVE-2020-25580
|
2024-11-21 14:18 |
2021-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211556
|
5.3 |
MEDIUM
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 msdosfs(5) was failing to zero-fill a pair of padding fie…
|
CWE-909
Missing Initialization of Resource
|
CVE-2020-25579
|
2024-11-21 14:18 |
2021-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211557
|
5.3 |
MEDIUM
Network
|
freebsd
|
freebsd
|
In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not properly initializing the d…
|
CWE-665
Improper Initialization
|
CVE-2020-25578
|
2024-11-21 14:18 |
2021-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211558
|
6.1 |
MEDIUM
Network
|
microfocus
|
access_manager
|
Cross-Site scripting vulnerability in Micro Focus Access Manager product, affects all version prior to version 5.0. The vulnerability could cause configuration destruction.
|
CWE-79
Cross-site Scripting
|
CVE-2020-25840
|
2024-11-21 14:18 |
2021-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211559
|
4.4 |
MEDIUM
Local
|
linux fedoraproject redhat
|
linux_kernel fedora enterprise_linux messaging_realtime_grid openshift_container_platform
|
A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This fl…
|
-
|
CVE-2020-25639
|
2024-11-21 14:18 |
2021-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
211560
|
7.6 |
HIGH
Physics
|
gnu redhat fedoraproject netapp
|
grub2 enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux enterprise_linux_server_tus enterprise_linux_server_eus fedora ontap_select_deploy_administration_…
|
A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If pr…
|
CWE-787
Out-of-bounds Write
|
CVE-2020-25647
|
2024-11-21 14:18 |
2021-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|