Skip to contentLinuxfoundation vulnerabilities
Products
Show 5 moreShow less
Newest
- linuxfoundation longhornHost operations allowed in privileged Longhorn managed podsCVE-2021-367799.6 Critical
- hyperledger besuSHL, SHR, and SAR operations trigger native exception at key values in besuCVE-2021-412727.5 High
- debian linux, linuxfoundation runc +1 moreOverflow in netlink bytemsg length field allows attacker to override netlink-based container configurationCVE-2021-43784Fix available6.0 Medium
- backstagePath Traversal in @backstage/plugin-scaffolder-backendCVE-2021-43783Fix available8.5 High
- backstage, linuxfoundation auth backend +1 moreXSS vulnerability in @backstage/plugin-auth-backendCVE-2021-43776Fix available7.4 High
- linuxfoundation fabricHTTP Request Smuggling in github.com/hyperledger/fabricCVE-2021-43669Fix available7.5 High
- linuxfoundation fabricNULL Pointer Dereference in HyperLedger FabricCVE-2021-43667Fix available7.5 High
- fedoraproject fedora, linuxfoundation open container initiative distribution specification, open container initiative image format specification +1 more +3 moreClarify Content-Type handling in OCI specCVE-2021-41190Fix available3.0 Low
- linuxfoundation the update framework, theupdateframework python-tuf +1 moreClient metadata path-traversal in python-tufCVE-2021-41131Fix available7.5 High
- backstagePath Traversal in @backstage/plugin-scaffolder-backendCVE-2021-41151Fix available6.8 Medium
- containerd, debian linux, fedoraproject fedora +2 moreInsufficiently restricted permissions on plugin directoriesCVE-2021-41103Fix available5.9 Medium
- linuxfoundation tremor, tremor-rs tremor-runtime +1 moreMemory Safety Issue when using patch or merge on state and assign the result back to stateCVE-2021-39228Fix available6.5 Medium
- linuxfoundation tremor-scriptMemory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`CVE-2021-45702Fix available7.5 High
- linuxfoundation tremor-scriptMemory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`CVE-2021-45701Fix available9.8 Critical
- linuxfoundation cortexPath traversal in Grafana CortexCVE-2021-361575.3 Medium
- containerd, fedoraproject fedora +1 moreArchive package allows chmod of file outside of unpack target directoryCVE-2021-32760Fix available5.0 Medium
- linuxfoundation grpc swiftIncomplete Internal State Distinction in GRPCWebToHTTP2ServerCodecCVE-2021-36153Fix available7.5 High
- linuxfoundation grpc swiftUncontrolled Resource Consumption in LengthPrefixedMessageReaderCVE-2021-36155Fix available7.5 High
- linuxfoundation grpc swiftUncontrolled Recursion in HTTP2ToRawGRPCServerCodecCVE-2021-36154Fix available7.5 High
- backstageTechDocs mkdocs.yml path traversalCVE-2021-32662Fix available6.5 Medium
- backstage, linuxfoundation \@backstage\/plugin-techdocs +1 moreTechDocs object element script injectionCVE-2021-32661Fix available6.8 Medium
- backstage, linuxfoundation \@backstage\/techdocs-common +1 moreTechDocs content sanitization bypassCVE-2021-32660Fix available6.8 Medium
- linuxfoundation runc, fedoraproject fedora +1 moremount destinations can be swapped via symlink-exchange to cause mounts outside the rootfsCVE-2021-30465Fix availableEPSS 10.2%8.5 High
- linuxfoundation cortexImproper input validation in CNCF CortexCVE-2021-31232Fix available5.5 Medium
- ceph, debian linux, fedoraproject fedora +1 more +3 moreAn authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles...CVE-2021-20288Fix available7.2 High
- linuxfoundation umoci, sylabs singularity +1 moreImproper input validation in umociCVE-2021-29136Fix available5.5 Medium
- linuxfoundation container network interfacecontainernetworking/cni improper limitation of path nameCVE-2021-20206Fix available7.2 High
- nats jwt library, linuxfoundation nats-server +1 morenats-io/jwt not enforcing checking of Import token permissionsCVE-2021-3127Fix available7.5 High
- hyperledger besuPotential DoS in Besu HTTP JSON-RPC APICVE-2021-213696.5 Medium
- linuxfoundation nats-serverDenial of Service (DoS)CVE-2020-28466Fix available7.5 High
- containerd, fedoraproject fedora +1 moreenvironment variable leakCVE-2021-21334Fix available6.3 Medium
- linuxfoundation harbor"catalog's registry v2 api exposed on unauthenticated path in Harbor"CVE-2020-29662Fix available5.3 Medium
- linuxfoundation dexAuthentication Bypass in dexCVE-2020-27847Fix available9.8 Critical
- dexidp dexCritical security issues in XML encoding in DexCVE-2020-26290Fix available9.3 Critical
- hyperledger indy-nodeAuthorization bypass in Hyperledger IndyCVE-2020-11093Fix available7.5 High
- linuxfoundation osquerysqlite ATTACH allows some filesystem accessCVE-2020-262735.2 Medium
- linuxfoundation spinnakerNolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all...CVE-2020-93018.8 High
- containerd, debian linux, fedoraproject fedora +2 morecontainerd-shim API Exposed to Host Network ContainersCVE-2020-15257Public exploitFix available5.2 Medium
- linuxfoundation nats-server, fedoraproject fedora +1 moreIncorrect handling of credential expiry by /nats-io/nats-serverCVE-2020-26892Fix available9.8 Critical
- linuxfoundation nats-server, fedoraproject fedora +1 moreNil dereference in NATS JWT, DoS of nats-serverCVE-2020-26521Fix available7.5 High
- containerd, canonical ubuntu linux, debian linux +2 morecontainerd can be coerced into leaking credentials during image pullCVE-2020-15157Fix available6.1 Medium
- linuxfoundation nats.deno, nats.js, nats.ws +2 moreSensitive data exposure in NATSCVE-2020-26149Fix available7.5 High
- linuxfoundation harborAuthenticated users can exploit an enumeration vulnerability in HarborCVE-2020-13794Fix available4.3 Medium
- linuxfoundation the update framework, theupdateframework tuf +1 moreInvalid root may become trusted root in The Update Framework (TUF)CVE-2020-15163Fix available8.7 High
- linuxfoundation acrnMissing access control restrictions in the Hypervisor component of the ACRN Project (v2.0 and v1...CVE-2020-156877.5 High
- linuxfoundation harborHarbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788)CVE-2020-13788Fix available4.3 Medium
- linuxfoundation osqueryosquery susceptible to DLL search order hijacking of zlib1.dllCVE-2020-110815.3 Medium
- linuxfoundation ceph, red hat ceph storage, canonical ubuntu linux +3 more +5 moreA flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is...CVE-2020-10753Fix available5.4 Medium
- [unknown] cephAn authorization bypass vulnerability was found in Ceph versions 15.2.0 before 15.2.2, where the...CVE-2020-10736Fix available8.0 High
- linuxfoundation jaeger, the jager project jaegertracing/jaeger +1 moreInformation Exposure in jaegerCVE-2020-10750Fix available7.1 High
- Show moreLoading…