Skip to content
OpenAdvisories

Archive

5 August 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.5

    Total Protection (MTP) - Unexpected behavior violation

    Unexpected behavior violation in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific function call.

  • High 7.5

    Denial of service in Contour

    In Contour ( Ingress controller for Kubernetes) before version 1.7.0, a bad actor can shut down all instances of Envoy, essentially killing the entire ingress data plane. GET requests to /shutdown on port 8090 of the Envoy pod initiate Envoy's shutdown proced…

  • High 8.1

    PgHero gem allows CSRF

    The PgHero gem through 2.6.0 for Ruby allows CSRF.

  • High 8.2

    IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML External Entity Injection (XX…