Archive
5 August 2020
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
High 7.5
Total Protection (MTP) - Unexpected behavior violation
Unexpected behavior violation in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to turn off real time scanning via a specially crafted object making a specific function call.
-
High 7.5
Denial of service in Contour
In Contour ( Ingress controller for Kubernetes) before version 1.7.0, a bad actor can shut down all instances of Envoy, essentially killing the entire ingress data plane. GET requests to /shutdown on port 8090 of the Envoy pod initiate Envoy's shutdown proced…
-
High 8.1
PgHero gem allows CSRF
The PgHero gem through 2.6.0 for Ruby allows CSRF.
-
High 8.2
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML External Entity Injection (XX…