Security Vulnerabilities - CVEs Published In November 2019
UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.
CVSS Score
5.3
EPSS Score
0.002
Published
2019-11-25
UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a crafted HTML page.
CVSS Score
4.3
EPSS Score
0.002
Published
2019-11-25
OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been modified in an operator by a privileged user.
CVSS Score
5.3
EPSS Score
0.005
Published
2019-11-25
thttpd has a local DoS vulnerability via specially-crafted .htpasswd files
CVSS Score
5.5
EPSS Score
0.001
Published
2019-11-25
libuser has information disclosure when moving user's home directory
CVSS Score
5.5
EPSS Score
0.001
Published
2019-11-25
ipa 3.0 does not properly check server identity before sending credential containing cookies
CVSS Score
8.8
EPSS Score
0.005
Published
2019-11-25
The Linux kernel through 5.3.13 has a start_offset+size Integer Overflow in cpia2_remap_buffer in drivers/media/usb/cpia2/cpia2_core.c because cpia2 has its own mmap implementation. This allows local users (with /dev/video0 access) to obtain read and write permissions on kernel physical pages, which can possibly result in a privilege escalation.
CVSS Score
7.8
EPSS Score
0.001
Published
2019-11-25
vdsm: certificate generation upon node creation allowing vdsm to start and serve requests from anyone who has a matching key (and certificate)
CVSS Score
7.5
EPSS Score
0.002
Published
2019-11-25
quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal
CVSS Score
6.5
EPSS Score
0.003
Published
2019-11-25
Claws Mail vCalendar plugin: credentials exposed on interface
CVSS Score
5.5
EPSS Score
0.027
Published
2019-11-25