Archive
2 April 2020
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
High 7.6
ABB eSOMS: SQL injection vulnerability
Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database.
-
High 7.0
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/apb-base, affecting…
-
High 7.0
An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affect…
-
High 7.8CVE-2020-8835 Public exploit
Linux kernel bpf verifier vulnerability
In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable …
-
High 7.4
In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use …
-
High 8.4
Local privilege escalation in exim package from user mail to root
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1.