2021-01-21 - CVE Archive

CVE-2020-8554 Jan 21, 17:15 MEDIUM POC PATCH THREAT This Month

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 25.3%.

Information Disclosure Kubernetes Oracle Communications Cloud Native Core Network Slice Selection Function Communications Cloud Native Core Service Communication Proxy +1

NVD GitHub VulDB

CVSS 3.1

6.3

EPSS

25.3%

CVE-2021-21239 Jan 21, 15:15 MEDIUM POC PATCH This Month

PySAML2 is a pure python implementation of SAML Version 2 Standard. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Python Information Disclosure Debian Jwt Attack Debian Linux +2

NVD GitHub

CVSS 3.1

6.5

EPSS

1.2%

CVE-2021-21238 Jan 21, 15:15 MEDIUM PATCH This Month

PySAML2 is a pure python implementation of SAML Version 2 Standard. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Python Information Disclosure Jwt Attack Pysaml2 Pysaml2 Project

NVD GitHub

CVSS 3.1

6.5

EPSS

1.1%

CVE-2021-21253 Jan 21, 15:15 MEDIUM PATCH This Month

OnlineVotingSystem is an open source project hosted on GitHub. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Onlinevotingsystem

NVD GitHub

CVSS 3.1

5.3

EPSS

0.7%