İçeriğe atla
Noroxi

ClusterLabs kayıtları

clusterlabs üreticisine ait 27 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

27 kayıt
  • CVE-2020-35458
    41Planlayın

    An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x.

    KritikCVSS 9,8İstismar yokEPSS %6

    clusterlabs · hawk12 Oca 2021

  • CVE-2023-39976
    39İzleyin

    log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.

    KritikCVSS 9,8İstismar yokEPSS %1

    clusterlabs · libqb8 Ağu 2023

  • CVE-2023-2319
    39İzleyin

    It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to includ

    KritikCVSS 9,8İstismar yokEPSS %1

    clusterlabs · pcs17 May 2023

  • CVE-2022-1049
    36İzleyin

    A flaw was found in the Pacemaker configuration tool (pcs).

    YüksekCVSS 8,8İstismar yokEPSS %2

    clusterlabs · pcs25 Mar 2022

  • CVE-2016-0720
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149.

    YüksekCVSS 8,8İstismar yokEPSS %1

    clusterlabs · pcs21 Nis 2017

  • CVE-2021-3020
    35İzleyin

    An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15.

    YüksekCVSS 8,8İstismar yokEPSS %1

    clusterlabs · hawk25 Ağu 2022

  • CVE-2016-0721
    33İzleyin

    Session fixation vulnerability in pcsd in pcs before 0.9.157.

    YüksekCVSS 8,1İstismar yokEPSS %2

    clusterlabs · pcs21 Nis 2017

  • CVE-2016-7797
    31İzleyin

    Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an

    YüksekCVSS 7,5İstismar yokEPSS %3

    clusterlabs · pacemaker24 Mar 2017

  • CVE-2015-1867
    31İzleyin

    Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.

    YüksekCVSS 7,5İstismar yokEPSS %3

    redhat · enterprise linux high availability12 Ağu 2015

  • CVE-2018-1086
    31İzleyin

    pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass.

    YüksekCVSS 7,5İstismar yokEPSS %2

    clusterlabs · pacemaker command line interface12 Nis 2018

  • CVE-2019-3885
    31İzleyin

    A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be lea

    YüksekCVSS 7,5İstismar yokEPSS %2

    clusterlabs · pacemaker18 Nis 2019

  • CVE-2020-35459
    31İzleyin

    An issue was discovered in ClusterLabs crmsh through 4.2.1.

    YüksekCVSS 7,8İstismar yokEPSS %1

    clusterlabs · crmsh12 Oca 2021

  • CVE-2016-7035
    31İzleyin

    An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface.

    YüksekCVSS 7,8İstismar yokEPSS %0

    clusterlabs · pacemaker10 Eyl 2018

  • CVE-2018-16877
    31İzleyin

    A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0.

    YüksekCVSS 7,8İstismar yokEPSS %0

    clusterlabs · pacemaker18 Nis 2019

  • CVE-2022-2735
    31İzleyin

    A vulnerability was found in the PCS project.

    YüksekCVSS 7,8İstismar yokEPSS %0

    clusterlabs · pcs6 Eyl 2022

  • CVE-2020-25654
    29İzleyin

    An ACL bypass flaw was found in pacemaker.

    YüksekCVSS 7,2İstismar yokEPSS %2

    clusterlabs · pacemaker24 Kas 2020

  • CVE-2019-12779
    28İzleyin

    libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/s

    YüksekCVSS 7,1İstismar yokEPSS %1

    clusterlabs · libqb7 Haz 2019

  • CVE-2022-2553
    26İzleyin

    The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node.

    OrtaCVSS 6,5İstismar yokEPSS %1

    clusterlabs · booth28 Tem 2022

  • CVE-2018-1079
    26İzleyin

    pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call.

    OrtaCVSS 6,5İstismar yokEPSS %1

    clusterlabs · pacemaker command line interface12 Nis 2018

  • CVE-2017-2661
    24İzleyin

    ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field w

    OrtaCVSS 6,1İstismar yokEPSS %1

    clusterlabs · pcs12 Mar 2018

  • CVE-2014-0104
    23İzleyin

    In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potentially allow for man-i

    OrtaCVSS 5,9İstismar yokEPSS %1

    clusterlabs · fence-agents2 Oca 2020

  • CVE-2024-3049
    23İzleyin

    Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

    OrtaCVSS 5,9İstismar yokEPSS %1

    clusterlabs · booth6 Haz 2024

  • CVE-2011-5271
    22İzleyin

    Pacemaker before 1.1.6 configure script creates temporary files insecurely

    OrtaCVSS 5,5İstismar yokEPSS %0

    clusterlabs · pacemaker12 Kas 2019

  • CVE-2018-16878
    22İzleyin

    A flaw was found in pacemaker up to and including version 2.0.1.

    OrtaCVSS 5,5İstismar yokEPSS %0

    clusterlabs · pacemaker18 Nis 2019

  • CVE-2010-2496
    22İzleyin

    stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access t

    OrtaCVSS 5,5İstismar yokEPSS %0

    clusterlabs · cluster glue18 Eki 2021