CC
Product
Communications Cloud Native Core Policy
On CISA KEVExploited in the wild
123
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 66Medium 46Low 4
Watch
Add Communications Cloud Native Core Policy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8284 | 3.7 | Dec 14 | A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract… Affected: 1.14.0 |
| CVE-2021-45486 | 3.5 | Dec 25 | In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small Affected: 22.2.0 |
| CVE-2021-21781 | 3.3 | Aug 18 | An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54 Affected: 22.2.0 |
| CVE-2021-3200 | 3.3 | May 18 | Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp… Affected: 1.15.0 |
Showing 4