2021-01-21 - CVE Archive

CVE-2020-8554 MEDIUM POC PATCH THREAT This Month

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 25.3%.

Information Disclosure Kubernetes Communications Cloud Native Core Network Slice Selection Function Communications Cloud Native Core Policy Communications Cloud Native Core Service Communication Proxy

NVD GitHub VulDB

CVSS 3.1

6.3

EPSS

25.3%

CVE-2021-21239 MEDIUM POC PATCH This Month

PySAML2 is a pure python implementation of SAML Version 2 Standard. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Python Information Disclosure Jwt Attack Pysaml2 Debian Linux

NVD GitHub

CVSS 3.1

6.5

EPSS

1.2%

CVE-2021-21238 MEDIUM PATCH This Month

PySAML2 is a pure python implementation of SAML Version 2 Standard. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Python Information Disclosure Jwt Attack Pysaml2

NVD GitHub

CVSS 3.1

6.5

EPSS

1.1%

CVE-2021-21253 MEDIUM PATCH This Month

OnlineVotingSystem is an open source project hosted on GitHub. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Onlinevotingsystem

NVD GitHub

CVSS 3.1

5.3

EPSS

0.7%