Skip to contentLinuxfoundation vulnerabilities
Products
Show 5 moreShow less
Newest
- hyperledger indy node, linuxfoundation indy-node +1 moreUncontrolled Resource Consumption in Indy NodeCVE-2020-11090Fix available7.5 High
- red hat containernetworking/plugins, fedoraproject fedora, linuxfoundation cni network plugins +2 more +4 morecontainernetworking/plugins vulnerable to MitM attacksCVE-2020-10749Public exploitFix available6.0 Medium
- linuxfoundation free range routing** DISPUTED ** An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1....CVE-2020-12831Fix availableDisputed5.3 Medium
- linuxfoundation ceph, canonical ubuntu linux +1 moreAn issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can...CVE-2020-12059Fix available7.5 High
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user...CVE-2020-1760Fix available5.8 Medium
- ceph, redhat ceph storage, openshift +2 more +4 moreA vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2...CVE-2020-1759Fix available6.4 Medium
- linuxfoundation harbor, pivotal vmware harbor registry +1 morePrivilege Escalation in Cloud Native Computing Foundation HarborCVE-2019-19023Fix available8.8 High
- linuxfoundation harbor, pivotal vmware harbor registry +1 moreSQL Injection in Cloud Native Computing Foundation HarborCVE-2019-19029Fix available7.2 High
- linuxfoundation harbor, pivotal vmware harbor registry +1 moreSQL Injection in Cloud Native Computing Foundation HarborCVE-2019-19026Fix available4.9 Medium
- linuxfoundation harbor, pivotal vmware harbor registry +1 moreCross-site Request Forgery (CSRF) in Cloud Native Computing Foundation HarborCVE-2019-19025Fix available8.8 High
- facebook osqueryIncorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.CVE-2020-18879.1 Critical
- dojo, debian linux, oracle communications application session controller +7 more +9 morePrototype pollution in dojoCVE-2020-5258Fix available7.7 High
- dojo dojoxPrototype Pollution in DojoxCVE-2020-5259Fix available7.7 High
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN...CVE-2019-163027.5 High
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant...CVE-2019-163017.5 High
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control...CVE-2019-163007.5 High
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application...CVE-2019-162997.5 High
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband...CVE-2019-162987.5 High
- linuxfoundation open network operating systemAn issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial...CVE-2019-162977.5 High
- dojo dojox, debian linux +1 moreXSS in dojox due to insufficient escape in dojox.xmpp.util.xmlEncodeCVE-2019-10785Fix available6.1 Medium
- debian linux, linuxfoundation runc, canonical ubuntu linux +2 more +4 moreopencontainers runc contains procfs race condition with a shared volume mountCVE-2019-19921Fix available7.0 High
- linuxfoundation the update frameworkIncorrect threshold signature computation in TUFCVE-2020-6174Fix available9.8 Critical
- ceph, redhat ceph storage +1 moreA path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5,...CVE-2020-1699Fix available7.5 High
- linuxfoundation the update frameworkClient Denial of Service on TUFCVE-2020-6173Fix available5.3 Medium
- harborA User Enumeration flaw exists in Harbor. The issue is present in the "/users" API endpoint. This endpoint is supposed to be restricted to administrators. This restriction is able to be bypassed and i…CVE-2019-39904.3 Medium
- debian linux, fedoraproject fedora, foomatic-filters +2 morefoomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of...CVE-2011-2924Fix available5.5 Medium
- debian linux, foomatic-filters +1 morefoomatic-rip filter, all versions, used insecurely creates temporary files for storage of...CVE-2011-29235.5 Medium
- linuxfoundation harbor, vmware cloud foundation, harbor container registry +2 moreHarbor API has a Broken Access Control vulnerability. The vulnerability allows project...CVE-2019-169197.5 High
- docker, linuxfoundation runc, canonical ubuntu linux +7 more +9 moreIncorrect Authorization in runcCVE-2019-16884Fix available7.5 High
- linuxfoundation harborMissing Authorization in HarborCVE-2019-16097Public exploitFix availableEPSS 22.4%6.5 Medium
- linuxfoundation nats-serverInteger Overflow or Wraparound in NATS ServerCVE-2019-13126Fix available7.5 High
- the linux foundation onos, linuxfoundation open network operating system +1 moreThe Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact...CVE-2019-10102349.8 Critical
- the linux foundation onos sdn controller, linuxfoundation open network operating system +1 moreThe Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input...CVE-2019-10102459.8 Critical
- the linux foundation onos, linuxfoundation open network operating system +1 moreThe Linux Foundation ONOS 2.0.0 and earlier is affected by: Integer Overflow. The impact is: A...CVE-2019-10102494.9 Medium
- the linux foundation onos, linuxfoundation open network operating system +1 moreThe Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is:...CVE-2019-10102504.9 Medium
- the linux foundation onos, linuxfoundation open network operating system +1 moreThe Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is:...CVE-2019-10102524.9 Medium
- facebook osqueryIn some configurations an attacker can inject a new executable path into the extensions.load file...CVE-2019-35678.1 High
- docker, linuxfoundation runc, apache mesos +15 more +17 morerunc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to...CVE-2019-5736Public exploitFix availableEPSS 98.5%8.6 High
- facebook osqueryAn issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third...CVE-2018-63367.8 High
- linuxfoundation opendaylightThe odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive...CVE-2015-18575.3 Medium
- linuxfoundation harborThe Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint...CVE-2017-176978.6 High
- docker, linuxfoundation runc, opensuse +2 morePrivilege Elevation in runcCVE-2016-3697Fix available7.8 High
- linuxfoundation foomatic-filters, oracle linux, redhat enterprise linux +5 more +7 moreHeap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4...CVE-2010-5325Fix available9.8 Critical
- linuxfoundation cups-filters, foomatic-filters, canonical ubuntu linux +1 more +3 moreIncomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0...CVE-2015-8560Fix available7.3 High
- linuxfoundation cups-filters, foomatic-filters, canonical ubuntu linux +6 more +8 moreIncomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0...CVE-2015-8327Fix availableEPSS 10.6%7.5 High
- linuxfoundation cups-filters, canonical ubuntu linux, debian linux +2 moreInteger overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote...CVE-2015-3279Fix available7.5 High
- linuxfoundation cups-filters, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups...CVE-2015-3258Fix available7.5 High
- linuxfoundation cups-filters, canonical ubuntu linux +1 moreThe remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote...CVE-2015-2265Fix available7.5 High
- linuxfoundation cups-filterscups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access...CVE-2014-4338Fix available4.0 Medium
- linuxfoundation cups-filtersThe process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1...CVE-2014-4337Fix available4.3 Medium
- Show moreLoading…