Vulnerabilities > Linuxfoundation

DATE CVE VULNERABILITY TITLE RISK
2020-03-20 CVE-2019-19025 Cross-Site Request Forgery (CSRF) vulnerability in multiple products
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows CSRF in the VMware Harbor Container Registry for the Pivotal Platform.
6.8
2020-03-20 CVE-2019-19023 Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform.
network
low complexity
linuxfoundation pivotal
6.5
2020-03-13 CVE-2020-1887 Improper Certificate Validation vulnerability in Linuxfoundation Osquery
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.
5.8
2020-03-10 CVE-2020-5259 Injection vulnerability in Linuxfoundation Dojox
In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution.
network
low complexity
linuxfoundation CWE-74
5.0
2020-03-10 CVE-2020-5258 Code Injection vulnerability in multiple products
In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution.
network
high complexity
linuxfoundation debian oracle CWE-94
7.7
2020-02-20 CVE-2019-16302 Improper Handling of Exceptional Conditions vulnerability in Linuxfoundation Open Network Operating System 1.14.0
An issue was discovered in Open Network Operating System (ONOS) 1.14.
network
low complexity
linuxfoundation CWE-755
5.0
2020-02-20 CVE-2019-16301 Improper Handling of Exceptional Conditions vulnerability in Linuxfoundation Open Network Operating System 1.14.0
An issue was discovered in Open Network Operating System (ONOS) 1.14.
network
low complexity
linuxfoundation CWE-755
5.0
2020-02-20 CVE-2019-16300 Improper Handling of Exceptional Conditions vulnerability in Linuxfoundation Open Network Operating System 1.14.0
An issue was discovered in Open Network Operating System (ONOS) 1.14.
network
low complexity
linuxfoundation CWE-755
5.0
2020-02-20 CVE-2019-16299 Improper Handling of Exceptional Conditions vulnerability in Linuxfoundation Open Network Operating System 1.14.0
An issue was discovered in Open Network Operating System (ONOS) 1.14.
network
low complexity
linuxfoundation CWE-755
5.0
2020-02-20 CVE-2019-16298 Improper Handling of Exceptional Conditions vulnerability in Linuxfoundation Open Network Operating System 1.14.0
An issue was discovered in Open Network Operating System (ONOS) 1.14.
network
low complexity
linuxfoundation CWE-755
5.0