Archive
27 July 2020
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Medium 5.4CVE-2020-8558 Public exploit
Kubernetes node setting allows for neighboring hosts to bypass localhost boundary
The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network …
-
Medium 5.4
Grafana stored XSS
Grafana through 6.7.1 allows stored XSS due to insufficient input protection in the originalUrl field, which allows an attacker to inject JavaScript code that will be executed after clicking on Open Original Dashboard after visiting the snapshot.