CVE-2020-29661
- EPSS 0.22%
- Veröffentlicht 09.12.2020 17:15:31
- Zuletzt bearbeitet 21.11.2024 05:24:23
A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.
CVE-2020-1971
- EPSS 0.34%
- Veröffentlicht 08.12.2020 16:15:11
- Zuletzt bearbeitet 21.11.2024 05:11:45
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they...
CVE-2020-25711
- EPSS 0.18%
- Veröffentlicht 03.12.2020 17:15:12
- Zuletzt bearbeitet 21.11.2024 05:18:32
A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server w...
CVE-2020-13956
- EPSS 0.51%
- Veröffentlicht 02.12.2020 17:15:14
- Zuletzt bearbeitet 21.11.2024 05:02:13
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
CVE-2020-28196
- EPSS 0.38%
- Veröffentlicht 06.11.2020 08:15:13
- Zuletzt bearbeitet 21.11.2024 05:22:27
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
CVE-2020-25689
- EPSS 0.24%
- Veröffentlicht 02.11.2020 21:15:27
- Zuletzt bearbeitet 21.11.2024 05:18:28
A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows ...
CVE-2020-14866
- EPSS 0.2%
- Veröffentlicht 21.10.2020 15:15:24
- Zuletzt bearbeitet 21.11.2024 05:04:21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro...
CVE-2020-14867
- EPSS 0.21%
- Veröffentlicht 21.10.2020 15:15:24
- Zuletzt bearbeitet 21.11.2024 05:04:21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Difficult to exploit vulnerability allows high privileged attacker w...
CVE-2020-14868
- EPSS 0.2%
- Veröffentlicht 21.10.2020 15:15:24
- Zuletzt bearbeitet 21.11.2024 05:04:21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro...
CVE-2020-14869
- EPSS 0.21%
- Veröffentlicht 21.10.2020 15:15:24
- Zuletzt bearbeitet 21.11.2024 05:04:22
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with ...