Export limit exceeded: 425829 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,139

Export CSV
CVE-2020-7692

Improper Authorization

PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an authorization server is not enough to guarantee that the client that issued the initial authorization request is the one that will be authorized. An attacker is able to obtain the authorization code using a malicious app on the client-side and use it to gain authorization to the protected resource. This affects the package com.google.oauth-client:google-oauth-client before 1.31.0.

CVSS 3.1 · 7.4 High EPSS 1.5% KEV · Not listed
Vendors
Google Redhat
Products
Oauth Client Library For Java Ocp Tools Openshift
CVE-2020-7662

npmjs-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser

websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other character. This could be abused by an attacker to conduct Regex Denial Of Service (ReDoS) on a single-threaded server by providing a malicious payload with the Sec-WebSocket-Extensions header.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Redhat Websocket-extensions Project
Products
Openshift Service Mesh Websocket-extensions
CVE-2020-7238

netty: HTTP Request Smuggling due to Transfer-Encoding whitespace mishandling

Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Debian Fedoraproject Netty and 1 more
Products
Debian Linux Fedora Netty and 17 more
CVE-2020-7211

QEMU: Slirp: potential directory traversal using relative paths via tftp server on Windows host

tftp.c in libslirp 4.1.0, as used in QEMU 4.2.0, does not prevent ..\ directory traversal on Windows.

CVSS 3.1 · 7.5 High EPSS 4.2% KEV · Not listed
Vendors
Libslirp Project Microsoft Qemu and 1 more
Products
Libslirp Windows Qemu and 1 more
CVE-2020-7039

QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()

tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds access which can lead to a DoS or potential execute arbitrary code.

CVSS 3.1 · 5.6 Medium EPSS 3.6% KEV · Not listed
Vendors
Debian Libslirp Project Opensuse and 2 more
Products
Debian Linux Libslirp Leap and 9 more
CVE-2020-7015

kibana: XSS in TSVB visualization (ESA-2020-08)

Kibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization. An attacker who is able to edit or create a TSVB visualization could allow the attacker to obtain sensitive information from, or perform destructive actions, on behalf of Kibana users who edit the TSVB visualization.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Elastic Redhat
Products
Kibana Openshift
CVE-2020-7013

kibana: Prototype pollution in TSVB could result in arbitrary code execution (ESA-2020-06)

Kibana versions before 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB. An authenticated attacker with privileges to create TSVB visualizations could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker executing code with the permissions of the Kibana process on the host system.

CVSS 3.1 · 7.2 High EPSS 2.1% KEV · Not listed
Vendors
Elastic Redhat
Products
Kibana Openshift Openshift Container Platform
CVE-2020-35514

openshift/machine-config-operator: /etc/kubernetes/kubeconfig is given incorrect privileges

An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running container which mounts /etc/kubernetes or has local access to the node, to copy this kubeconfig file and attempt to add their own node to the OpenShift cluster. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. This flaw affects versions before openshift4/ose-machine-config-operator v4.7.0-202105111858.p0.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2020-2309

jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows enumerating credentials IDs

A missing/An incorrect permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Kubernetes Openshift
CVE-2020-2308

jenkins-2-plugins/kubernetes: Missing permission check in Kubernetes Plugin allows listing pod templates

A missing permission check in Jenkins Kubernetes Plugin 1.27.3 and earlier allows attackers with Overall/Read permission to list global pod template names.

CVSS 3.1 · 4.3 Medium EPSS 1.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Kubernetes Openshift
CVE-2020-2307

jenkins-2-plugins/kubernetes: Jenkins controller environment variables are accessible in Kubernetes Plugin

Jenkins Kubernetes Plugin 1.27.3 and earlier allows low-privilege users to access possibly sensitive Jenkins controller environment variables.

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Kubernetes Openshift
CVE-2020-2306

jenkins-2-plugins/mercurial: Missing permission check in an HTTP endpoint could result in information disclosure

A missing permission check in Jenkins Mercurial Plugin 2.11 and earlier allows attackers with Overall/Read permission to obtain a list of names of configured Mercurial installations.

CVSS 3.1 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Mercurial Openshift
CVE-2020-2305

jenkins-2-plugins/mercurial: XML parser is not preventing XML external entity (XXE) attacks

Jenkins Mercurial Plugin 2.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Jenkins Redhat
Products
Mercurial Openshift
CVE-2020-2304

jenkins-2-plugins/subversion: XML parser is not preventing XML external entity (XXE) attacks

Jenkins Subversion Plugin 2.13.1 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Jenkins Redhat
Products
Subversion Openshift
CVE-2020-2255

jenkins-2-plugins/blueocean: Blue Ocean Plugin does not perform permission checks in several HTTP endpoints implementing connection tests.

A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Blue Ocean Openshift
CVE-2020-2254

jenkins-2-plugins/blueocean: Path traversal vulnerability in Blue Ocean Plugin could allow to read arbitrary files

Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create permission to read arbitrary files on the Jenkins controller file system.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Blue Ocean Openshift
CVE-2020-2252

jenkins-2-plugins/mailer: Missing hostname validation in Mailer Plugin could result in MITM

Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Mailer Openshift