"Avira Security" – For Windows Security Vulnerabilities

CVE-2024-23653 affecting package moby-buildx for versions less than 0.7.1-18

CVE-2024-23653 affecting package moby-buildx for versions less than 0.7.1-18. A patched version of the package is...

CVE-2023-45853 affecting package rubygem-mini_portile2 for versions less than 2.8.0-1

CVE-2023-45853 affecting package rubygem-mini_portile2 for versions less than 2.8.0-1. A patched version of the package is...

CVE-2023-48795 affecting package nmap for versions less than 7.93-2

CVE-2023-48795 affecting package nmap for versions less than 7.93-2. A patched version of the package is...

CVE-2023-39325 affecting package multus for versions less than 3.8-12

CVE-2023-39325 affecting package multus for versions less than 3.8-12. A patched version of the package is...

CVE-2023-39325 affecting package cri-tools for versions less than 1.28.0-2

CVE-2023-39325 affecting package cri-tools for versions less than 1.28.0-2. An upgraded version of the package is available that resolves this...

CVE-2023-44487 affecting package nghttp2 for versions less than 1.57.0-1

CVE-2023-44487 affecting package nghttp2 for versions less than 1.57.0-1. This CVE either no longer is or was never...

CVE-2023-44487 affecting package influxdb for versions less than 2.6.1-11

CVE-2023-44487 affecting package influxdb for versions less than 2.6.1-11. A patched version of the package is...

CVE-2023-25665 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25665 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is...

CVE-2023-25672 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25672 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is...

CVE-2023-25662 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25662 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is...

CVE-2023-25676 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25676 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is...

CVE-2023-25668 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25668 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is...

CVE-2023-39323 affecting package golang for versions less than 1.20.10-1

CVE-2023-39323 affecting package golang for versions less than 1.20.10-1. A patched version of the package is...

CVE-2023-39319 affecting package msft-golang for versions less than 1.20.10-1

CVE-2023-39319 affecting package msft-golang for versions less than 1.20.10-1. A patched version of the package is...

CVE-2023-39318 affecting package golang for versions less than 1.20.10-1

CVE-2023-39318 affecting package golang for versions less than 1.20.10-1. A patched version of the package is...

CVE-2023-39533 affecting package golang for versions less than 1.19.12-1

CVE-2023-39533 affecting package golang for versions less than 1.19.12-1. A patched version of the package is...

CVE-2023-29409 affecting package golang for versions less than 1.20.7-1

CVE-2023-29409 affecting package golang for versions less than 1.20.7-1. A patched version of the package is...

CVE-2024-24785 affecting package golang for versions less than 1.21.6-1

CVE-2024-24785 affecting package golang for versions less than 1.21.6-1. A patched version of the package is...

CVE-2023-45290 affecting package golang for versions less than 1.21.6-1

CVE-2023-45290 affecting package golang for versions less than 1.21.6-1. A patched version of the package is...

CVE-2023-24540 affecting package golang for versions less than 1.21.6-1

CVE-2023-24540 affecting package golang for versions less than 1.21.6-1. A patched version of the package is...

CVE-2023-49292 affecting package golang for versions less than 1.21.6-1

CVE-2023-49292 affecting package golang for versions less than 1.21.6-1. A patched version of the package is...

CVE-2024-24783 affecting package golang for versions less than 1.21.6-1

CVE-2024-24783 affecting package golang for versions less than 1.21.6-1. A patched version of the package is...

CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3

CVE-2024-23653 affecting package moby-engine for versions less than 20.10.27-3. A patched version of the package is...

CVE-2020-27545 affecting package libdwarf for versions less than 0.9.0

CVE-2020-27545 affecting package libdwarf for versions less than 0.9.0. A patched version of the package is...

CVE-2023-5678 affecting package openssl for versions less than 1.1.1k-28

CVE-2023-5678 affecting package openssl for versions less than 1.1.1k-28. A patched version of the package is...

CVE-2023-44487 affecting package kubernetes for versions less than 1.28.3-1

CVE-2023-44487 affecting package kubernetes for versions less than 1.28.3-1. A patched version of the package is...

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is...

CVE-2023-44487 affecting package prometheus-adapter for versions less than 0.10.0-2

CVE-2023-44487 affecting package prometheus-adapter for versions less than 0.10.0-2. A patched version of the package is...

CVE-2023-39325 affecting package golang for versions less than 1.20.7-2

CVE-2023-39325 affecting package golang for versions less than 1.20.7-2. A patched version of the package is...

CVE-2023-44487 affecting package cri-tools for versions less than 1.28.0-2

CVE-2023-44487 affecting package cri-tools for versions less than 1.28.0-2. An upgraded version of the package is available that resolves this...

CVE-2023-25675 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25675 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is...

CVE-2023-25669 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25669 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is...

CVE-2023-25667 affecting package tensorflow for versions less than 2.11.1-1

CVE-2023-25667 affecting package tensorflow for versions less than 2.11.1-1. A patched version of the package is...

CVE-2017-12613 affecting package apr for versions less than 1.6.3-1

CVE-2017-12613 affecting package apr for versions less than 1.6.3-1. A patched version of the package is...

CVE-2018-25032 affecting package grpc for versions less than 1.35.0-4

CVE-2018-25032 affecting package grpc for versions less than 1.35.0-4. A patched version of the package is...

CVE-2018-25032 affecting package python2 for versions less than 2.7.18-13

CVE-2018-25032 affecting package python2 for versions less than 2.7.18-13. This CVE either no longer is or was never...

CVE-2018-25032 affecting package ccache for versions less than 3.6-3

CVE-2018-25032 affecting package ccache for versions less than 3.6-3. A patched version of the package is...

CVE-2018-25032 affecting package openjdk8 for versions less than 1.8.0.332-2

CVE-2018-25032 affecting package openjdk8 for versions less than 1.8.0.332-2. A patched version of the package is...

CVE-2023-42282 vulnerabilities

Vulnerabilities for packages: lerna, node-gyp, sqlpad, renovate,...

CVE-2024-32004 vulnerabilities

Vulnerabilities for packages:...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: skaffold, goreleaser, tkn, aactl, flux-source-controller, zot, spire-server, melange, policy-controller, tekton-chains, zarf, wolfictl, apko, gitsign, ko, vexctl, falco, falcoctl, slsa-verifier,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: skaffold, secrets-store-csi-driver-provider-gcp, kpt, kaf, haproxy-ingress, flux-source-controller, metrics-server, influxd, minio, up, prometheus-bind-exporter, wireguard-go, ollama, external-dns, nats, dotnet, coredns, grype, nghttp2, hey, gitlab-pages, gatekeeper,.....

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: goreleaser, tkn, trivy, conftest, dagger, aactl, zot, up, spire-server, melange, crossplane, docker-compose, kaniko, telegraf, kargo, wolfictl, grype, syft, ko, buf, loki, buildkitd, datadog-agent, cadvisor, ctop, prometheus,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: tkn, terragrunt, sops, keda, cloudflared, cosign, aactl, argo-cd, flux-source-controller, spire-server, kots, vault, rekor, tekton-chains, cilium-envoy, kyverno, cert-manager, external-secrets-operator, gitsign, fulcio, argo-workflows, istio-pilot-discovery, vexctl,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: skaffold, goreleaser, kpt, scorecard, k3s, aactl, up, tekton-chains, chartmuseum, bom, cert-manager, loki, tekton-pipelines, paranoia, falco, ctop, slsa-verifier, prometheus, kubescape,...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: goreleaser, tkn, trivy, conftest, dagger, aactl, zot, up, spire-server, melange, crossplane, docker-compose, kaniko, telegraf, kargo, wolfictl, grype, syft, ko, buf, loki, buildkitd, datadog-agent, cadvisor, ctop, prometheus,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: skaffold, eksctl, clusterctl, secrets-store-csi-driver-provider-gcp, kpt, cri-tools, logstash-exporter, terraform-docs, thanos-operator, kaf, ferretdb, k3s, kubernetes-dashboard, prometheus-mongodb-exporter, sonobuoy, istio-operator, capslock, haproxy-ingress,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: skaffold, eksctl, nri-couchbase, clusterctl, nri-mssql, secrets-store-csi-driver-provider-gcp, kpt, task, q, cri-tools, logstash-exporter, terraform-docs, thanos-operator, kaf, ferretdb, k3s, kubernetes-dashboard, mage, prometheus-mongodb-exporter, sonobuoy, capslock,....

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: amass, trillian, kots, caddy, temporal-server, vault, kine, src, step-ca, spicedb, telegraf, argo-workflows, keda, ferretdb, k3s,...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: amass, trillian, kots, caddy, temporal-server, vault, kine, src, step-ca, spicedb, telegraf, argo-workflows, keda, ferretdb, k3s,...