Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cve-2020-8554 vulnerabilities and exploits

(subscribe to this query)

169
VMScore
CVE-2017-8554
The kernel in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an authenticated attacker to obtain memory contents via a specially...
Microsoft Windows 10 -Microsoft Windows 10 1511Microsoft Windows 10 1607Microsoft Windows 10 1703Microsoft Windows 7Microsoft Windows 8.1Microsoft Windows Rt 8.1Microsoft Windows Server 2008Microsoft Windows Server 2008 R2Microsoft Windows Server 2012Microsoft Windows Server 2012 R2Microsoft Windows Server 2016
587
VMScore
CVE-2015-8554
Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and...
Xen Xen
NA
CVE-2020-3147
A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of requests sent to the web interface. An attacker...
Cisco Sg200-50 FirmwareCisco Sg200-50p FirmwareCisco Sg200-50fp FirmwareCisco Sg200-26 FirmwareCisco Sg200-26p FirmwareCisco Sg200-26fp FirmwareCisco Sg200-18 FirmwareCisco Sg200-10fp FirmwareCisco Sg200-08 FirmwareCisco Sg200-08p FirmwareCisco Sg200-24 FirmwareCisco Sg200-24p FirmwareCisco Sg200-24fp FirmwareCisco Sg200-48 FirmwareCisco Sg200-48p FirmwareCisco Sf302-08pp FirmwareCisco Sf302-08mpp FirmwareCisco Sg300-10pp FirmwareCisco Sg300-10mpp FirmwareCisco Sf300-24pp FirmwareCisco Sf300-48pp FirmwareCisco Sg300-28pp FirmwareCisco Sf300-08 FirmwareCisco Sf300-48p FirmwareCisco Sg300-10mp FirmwareCisco Sg300-10p FirmwareCisco Sg300-10 FirmwareCisco Sg300-28p FirmwareCisco Sf300-24p FirmwareCisco Sf302-08mp FirmwareCisco Sg300-28 FirmwareCisco Sf300-48 FirmwareCisco Sg300-20 FirmwareCisco Sf302-08p FirmwareCisco Sg300-52 FirmwareCisco Sf300-24 FirmwareCisco Sf302-08 FirmwareCisco Sf300-24mp FirmwareCisco Sg300-10sfp FirmwareCisco Sg300-28mp FirmwareCisco Sg300-52p FirmwareCisco Sg300-52mp FirmwareCisco Sg500-28mpp FirmwareCisco Sg500-52mp FirmwareCisco Sg500xg-8f8t FirmwareCisco Sf500-24 FirmwareCisco Sf500-24p FirmwareCisco Sf500-48 FirmwareCisco Sf500-48p FirmwareCisco Sg500-28 FirmwareCisco Sg500-28p FirmwareCisco Sg500-52 FirmwareCisco Sg500-52p FirmwareCisco Sg500x-24 FirmwareCisco Sg500x-24p FirmwareCisco Sg500x-48 FirmwareCisco Sg500x-48p Firmware
NA
CVE-2020-3136
A vulnerability in the web-based management interface of Cisco Jabber Guest could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability exists because...
Cisco Jabber Guest
NA
CVE-2020-3142
A vulnerability in Cisco Webex Meetings Suite sites and Cisco Webex Meetings Online sites could allow an unauthenticated, remote attendee to join a password-protected meeting without providing the meeting password. The connection attempt must initiate from a Webex mobile...
Cisco Webex Meetings Online
NA
CVE-2020-26137
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116....
Python Urllib3
NA
CVE-2020-8554
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation...
Kubernetes Kubernetes
383
VMScore
CVE-2019-11840
An issue was discovered in supplementary Go cryptography libraries, aka golang-googlecode-go-crypto, before 2019-03-20. A flaw was found in the amd64 implementation of golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa. If more than 256 GiB of keystream is...
Golang Crypto
445
VMScore
CVE-2013-2020
Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an out-of-bounds read....
Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.04Suse Linux Enterprise Server 11.0Clamav Clamav 0.9Clamav Clamav 0.90Clamav Clamav 0.90.1Clamav Clamav 0.90.1 P0Clamav Clamav 0.90.2Clamav Clamav 0.90.2 P0Clamav Clamav 0.90.3Clamav Clamav 0.90.3 P0Clamav Clamav 0.90.3 P1Clamav Clamav 0.91Clamav Clamav 0.91.1Clamav Clamav 0.91.2Clamav Clamav 0.91.2 P0Clamav Clamav 0.92Clamav Clamav 0.92.1Clamav Clamav 0.92 P0Clamav Clamav 0.93Clamav Clamav 0.93.1Clamav Clamav 0.93.2Clamav Clamav 0.93.3Clamav Clamav 0.94Clamav Clamav 0.94.1Clamav Clamav 0.94.2Clamav Clamav 0.95Clamav Clamav 0.95.1Clamav Clamav 0.95.2Clamav Clamav 0.95.3Clamav Clamav 0.96Clamav Clamav 0.96.1Clamav Clamav 0.96.2Clamav Clamav 0.96.3Clamav Clamav 0.96.4Clamav Clamav 0.96.5Clamav Clamav 0.97Clamav Clamav 0.97.1Clamav Clamav 0.97.2Clamav Clamav 0.97.3Clamav Clamav 0.97.4Clamav Clamav 0.97.5Clamav Clamav
383
VMScore
CVE-2013-2021
pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted length value in an encrypted PDF file....
Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 11.10Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 12.10Canonical Ubuntu Linux 13.04Suse Linux Enterprise Server 11.0Clamav Clamav 0.97.1Clamav Clamav 0.97.2Clamav Clamav 0.97.3Clamav Clamav 0.97.4Clamav Clamav 0.97.5Clamav Clamav 0.97.6Clamav Clamav 0.97.7
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-24686CVE-2021-21298CVE-2021-69420server-side request forgeryCVE-2021-23957microsoftSSTI.netSQLCVE-2021-21273CVE-2021-25281