Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 184

Export CSV
CVE-2020-14333

ovirt-engine: Reflected cross site scripting vulnerability

A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable parameters completely, resulting in a reflected cross-site scripting attack. This flaw allows an attacker to leverage a phishing attack, steal an unsuspecting user's cookies or other confidential information, or impersonate them within the application's context.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt-engine Rhev Manager
CVE-2020-10775

ovirt-engine: Redirect to arbitrary URL allows for phishing

An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the target has opened the malicious URL in their browser, the critical part of the URL is no longer visible. The highest threat from this vulnerability is on confidentiality.

CVSS 3.1 · 5.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Virtualization Ovirt-engine Rhev Manager
CVE-2020-10723

dpdk: librte_vhost Integer truncation in vhost_user_check_and_alloc_queue_pair()

A memory corruption issue was found in DPDK versions 17.05 and above. This flaw is caused by an integer truncation on the index of a payload. Under certain circumstances, the index (a UInt) is copied and truncated into a uint16, which can lead to out of bound indexing and possible memory corruption.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Dpdk Fedoraproject and 3 more
Products
Ubuntu Linux Data Plane Development Kit Fedora and 7 more
CVE-2020-10722

dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhost_user_set_log_base() could result in a smaller memory map than requested, possibly allowing memory corruption.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Dpdk Fedoraproject and 3 more
Products
Ubuntu Linux Data Plane Development Kit Fedora and 7 more
CVE-2019-9824

QEMU: slirp: information leakage in tcp_emu() due to uninitialized stack variables

tcp_emu in slirp/tcp_subr.c (aka slirp/src/tcp_subr.c) in QEMU 3.0.0 uses uninitialized data in an snprintf call, leading to Information disclosure.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Qemu Redhat
Products
Qemu Enterprise Linux Openstack and 1 more
CVE-2019-6501

QEMU: scsi-generic: possible OOB access while handling inquiry request

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Qemu Redhat
Products
Fedora Qemu Enterprise Linux and 2 more
CVE-2019-3879

ovirt-engine: Missing permissions check in web ui allows a user with basic privileges to delete disks

It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggered as an internal command, meaning the permission validation that should be performed against the calling user is skipped. A user with low privileges (eg Basic Operations) could exploit this flaw to delete disks attached to guests.

CVSS 3.1 · 8.1 High EPSS 1.8% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt Rhev Manager Virtualization
CVE-2019-20922

nodejs-handlebars: an endless loop while processing specially-crafted templates leads to DoS

Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow attackers to exhaust system resources.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Handlebarsjs Redhat
Products
Handlebars Jboss Enterprise Bpms Platform Openshift and 2 more
CVE-2019-20382

QEMU: vnc: memory leakage upon disconnect

QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect operation because libz is misused, resulting in a situation where memory allocated in deflateInit2 is not freed in deflateEnd.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Opensuse and 2 more
Products
Ubuntu Linux Debian Linux Leap and 4 more
CVE-2019-19336

ovirt-engine: response_type parameter allows reflected XSS

A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user's oVirt session.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt-engine Rhev Manager Virtualization
CVE-2019-17195

nimbus-jose-jwt: Uncaught exceptions while parsing a JWT

Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.

CVSS 3.1 · 9.8 Critical EPSS 11.1% KEV · Not listed
Vendors
Apache Connect2id Oracle and 1 more
Products
Hadoop Nimbus Jose\+jwt Communications Cloud Native Core Security Edge Protection Proxy and 14 more
CVE-2019-11358

jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

CVSS 3.1 · 6.1 Medium EPSS 86.8% KEV · Not listed
Vendors
Backdropcms Debian Drupal and 8 more
Products
Backdrop Debian Linux Drupal and 111 more
CVE-2019-10744

nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties

Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.

CVSS 3.1 · 9.1 Critical EPSS 5.0% KEV · Not listed
Vendors
F5 Lodash Netapp and 2 more
Products
Big-ip Access Policy Manager Big-ip Advanced Firewall Manager Big-ip Analytics and 23 more
CVE-2019-10194

ovirt-engine-metrics: disclosure of sensitive passwords in log files and ansible playbooks

Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt Rhev Manager Virtualization Manager
CVE-2018-7750

python-paramiko: Authentication bypass in transport.py

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

CVSS 3.1 · 9.8 Critical EPSS 27.1% KEV · Not listed
Vendors
Debian Paramiko Redhat
Products
Debian Linux Paramiko Ansible Engine and 15 more