4th Gen AMD EPYC™ Processors Security Vulnerabilities

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, vault-csi-provider, kor, calico-fips, rqlite, kaf, aws-efs-csi-driver, cortex, vt-cli, flux-kustomize-controller-0.37, prometheus-operator, kubeflow-katib, grpcurl, nri-apache, traefik-fips, influx, gitlab-runner,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, vault-csi-provider, kor, calico-fips, rqlite, kaf, aws-efs-csi-driver, cortex, vt-cli, flux-kustomize-controller-0.37, prometheus-operator, kubeflow-katib, grpcurl, nri-apache, traefik-fips, influx, gitlab-runner,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: dex, rekor, temporal-server, terraform, melange, influx, slsa-verifier, certificate-transparency, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, gitsign, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-prometheus, grype,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, vault-csi-provider, kor, calico-fips, rqlite, kaf, aws-efs-csi-driver, cortex, vt-cli, flux-kustomize-controller-0.37, prometheus-operator, kubeflow-katib, grpcurl, nri-apache, traefik-fips, influx, gitlab-runner,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: dex, go-bindata, temporal-server, terraform, influx, slsa-verifier, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-mysql, grype, nri-prometheus, stakater-reloader, filebeat,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, kube-fluentd-operator, vault-csi-provider, kor, calico-fips, rqlite, kaf, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, rclone, cortex, flux-kustomize-controller-0.37, prometheus-operator, rekor-fips, kubeflow-katib, grpcurl,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: calico-fips, render-template, tigera-operator, vertical-pod-autoscaler, k3d, docker-credential-ecr-login, cortex, scorecard, newrelic-nri-kube-events, wait-for-port, cilium-envoy, prometheus-statsd-exporter-fips, local-path-provisioner, grpcurl, influx, kyverno,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, kube-fluentd-operator, vault-csi-provider, kor, calico-fips, rqlite, kaf, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, rclone, cortex, flux-kustomize-controller-0.37, prometheus-operator, rekor-fips, kubeflow-katib, grpcurl,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: aactl, go-bindata, aws-flb-kinesis, cilium-envoy, cass-operator, influx, slsa-verifier, oras, sbom-scorecard, amass, sonobuoy, dgraph, flannel-cni-plugin, petname, vertical-pod-autoscaler, go-licenses, nri-discovery-kubernetes, prometheus-bind-exporter, falco,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, vault-csi-provider, kor, calico-fips, rqlite, kaf, aws-efs-csi-driver, cortex, vt-cli, flux-kustomize-controller-0.37, prometheus-operator, kubeflow-katib, grpcurl, nri-apache, traefik-fips, influx, gitlab-runner,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: dex, rekor, temporal-server, terraform, melange, influx, slsa-verifier, certificate-transparency, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, gitsign, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-prometheus, grype,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: calico-fips, render-template, tigera-operator, vertical-pod-autoscaler, k3d, docker-credential-ecr-login, cortex, scorecard, newrelic-nri-kube-events, wait-for-port, cilium-envoy, prometheus-statsd-exporter-fips, local-path-provisioner, grpcurl, influx, kyverno,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: dex, go-bindata, temporal-server, terraform, influx, slsa-verifier, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-mysql, grype, nri-prometheus, stakater-reloader, filebeat,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: dex, go-bindata, temporal-server, terraform, influx, slsa-verifier, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-mysql, grype, nri-prometheus, stakater-reloader, filebeat,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, kube-fluentd-operator, kor, calico-fips, velero-plugin-for-csi, rqlite, neuvector-scanner, velero-plugin-for-aws, kaf, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, rclone, cortex, vt-cli, prometheus-operator, rekor-fips, ko-fips,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: temporal-server, melange, gitleaks, aws-efs-csi-driver, crossplane-provider-azure, nri-prometheus, kyverno-policy-reporter, stakater-reloader, rclone, grpc-health-probe, helm-operator, thanos, secrets-store-csi-driver-provider-gcp, cert-manager-webhook-pdns,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, vault-csi-provider, kor, calico-fips, rqlite, kaf, aws-efs-csi-driver, cortex, vt-cli, flux-kustomize-controller-0.37, prometheus-operator, kubeflow-katib, grpcurl, nri-apache, traefik-fips, influx, gitlab-runner,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, vault-csi-provider, kor, calico-fips, rqlite, kaf, aws-efs-csi-driver, cortex, vt-cli, flux-kustomize-controller-0.37, prometheus-operator, kubeflow-katib, grpcurl, nri-apache, traefik-fips, influx, gitlab-runner,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, vault-csi-provider, kor, calico-fips, rqlite, kaf, aws-efs-csi-driver, cortex, vt-cli, flux-kustomize-controller-0.37, prometheus-operator, kubeflow-katib, grpcurl, nri-apache, traefik-fips, influx, gitlab-runner,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, vault-csi-provider, kor, calico-fips, rqlite, kaf, aws-efs-csi-driver, cortex, vt-cli, flux-kustomize-controller-0.37, prometheus-operator, kubeflow-katib, grpcurl, nri-apache, traefik-fips, influx, gitlab-runner,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, vault-csi-provider, kor, calico-fips, rqlite, kaf, aws-efs-csi-driver, cortex, vt-cli, flux-kustomize-controller-0.37, prometheus-operator, kubeflow-katib, grpcurl, nri-apache, traefik-fips, influx, gitlab-runner,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: calico-fips, render-template, tigera-operator, vertical-pod-autoscaler, k3d, docker-credential-ecr-login, cortex, scorecard, newrelic-nri-kube-events, wait-for-port, cilium-envoy, prometheus-statsd-exporter-fips, local-path-provisioner, grpcurl, influx, kyverno,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: dex, go-bindata, temporal-server, terraform, influx, slsa-verifier, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-mysql, grype, nri-prometheus, stakater-reloader, filebeat,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: dex, go-bindata, temporal-server, terraform, influx, slsa-verifier, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-mysql, grype, nri-prometheus, stakater-reloader, filebeat,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: dex, go-bindata, temporal-server, terraform, influx, slsa-verifier, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-mysql, grype, nri-prometheus, stakater-reloader, filebeat,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, kube-fluentd-operator, kor, calico-fips, velero-plugin-for-csi, rqlite, neuvector-scanner, velero-plugin-for-aws, kaf, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, rclone, cortex, vt-cli, prometheus-operator, rekor-fips, ko-fips,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: temporal-server, melange, gitleaks, aws-efs-csi-driver, crossplane-provider-azure, nri-prometheus, kyverno-policy-reporter, stakater-reloader, rclone, grpc-health-probe, helm-operator, thanos, secrets-store-csi-driver-provider-gcp, cert-manager-webhook-pdns,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: dex, go-bindata, temporal-server, terraform, influx, slsa-verifier, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-mysql, grype, nri-prometheus, stakater-reloader, filebeat,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: dex, go-bindata, temporal-server, terraform, influx, slsa-verifier, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-mysql, grype, nri-prometheus, stakater-reloader, filebeat,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: dex, go-bindata, temporal-server, terraform, influx, slsa-verifier, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-mysql, grype, nri-prometheus, stakater-reloader, filebeat,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: aactl, go-bindata, aws-flb-kinesis, cilium-envoy, cass-operator, influx, slsa-verifier, oras, sbom-scorecard, amass, sonobuoy, dgraph, flannel-cni-plugin, petname, vertical-pod-autoscaler, go-licenses, nri-discovery-kubernetes, prometheus-bind-exporter, falco,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: aactl, go-bindata, aws-flb-kinesis, cilium-envoy, cass-operator, influx, slsa-verifier, oras, sbom-scorecard, amass, sonobuoy, dgraph, flannel-cni-plugin, petname, vertical-pod-autoscaler, go-licenses, nri-discovery-kubernetes, prometheus-bind-exporter, falco,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: aactl, go-bindata, aws-flb-kinesis, cilium-envoy, cass-operator, influx, slsa-verifier, oras, sbom-scorecard, amass, sonobuoy, dgraph, flannel-cni-plugin, petname, vertical-pod-autoscaler, go-licenses, nri-discovery-kubernetes, prometheus-bind-exporter, falco,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: prometheus-redis-exporter, vault-csi-provider, kor, calico-fips, rqlite, kaf, aws-efs-csi-driver, cortex, vt-cli, flux-kustomize-controller-0.37, prometheus-operator, kubeflow-katib, grpcurl, nri-apache, traefik-fips, influx, gitlab-runner,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: calico-fips, render-template, tigera-operator, vertical-pod-autoscaler, k3d, docker-credential-ecr-login, cortex, scorecard, newrelic-nri-kube-events, wait-for-port, cilium-envoy, prometheus-statsd-exporter-fips, local-path-provisioner, grpcurl, influx, kyverno,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: dex, go-bindata, temporal-server, terraform, influx, slsa-verifier, volume-modifier-for-k8s, aws-efs-csi-driver, crossplane-provider-azure, prometheus-mongodb-exporter, amass, kyverno-policy-reporter, nri-mysql, grype, nri-prometheus, stakater-reloader, filebeat,...

Enhancing Security with AI: Revolutionizing Protection in the Digital Era

In the ever-evolving landscape of cybersecurity, the integration of Artificial Intelligence (AI) and Machine Learning (ML) has emerged as a transformative force. AI, with its ability to mimic human cognition and problem-solving capabilities, combined with ML's capacity to iteratively learn from...

Exploit for CVE-2024-26026

CVE-2024-26026 BIG-IP Next...

Security Bulletin: A vulnerability exists in IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Configuration Manager.

Summary Java on z/OS properties files not read correctly under certain locales / codepages vulnerability exists in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Configuration Manager IP Edition v6.4.2 Vulnerability Details ** IBM X-Force ID: PSIRT-ADV0103951 ...

Rapid7 Recognized in the 2024 Gartner® Magic Quadrant™ for SIEM

Command Your Attack Surface with a next-gen SIEM built for the Cloud First Era Rapid7 is excited to share that we are named a Challenger for InsightIDR in the 2024 Gartner Magic Quadrant for SIEM. In a crowded and constantly changing space, this is our sixth time to be recognized in the report....

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and IBM WebSphere Application Server Liberty due to April 2024 CPU

Summary There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty. The CVE(s) listed in this document might affect some configurations of IBM WebSphere Application Server...

Security Bulletin: Multiple vulnerabilities exists in IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Configuration Manager.

Summary Multiple vulnerabilities exists in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Configuration Manager IP Edition v6.4.2. CVE-2024-20952, CVE-2024-20918, CVE-2024-20921, CVE-2024-20919, CVE-2024-20926, CVE-2024-20945, CVE-2023-33850 Vulnerability Details....

RHEL 7 : hw (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. hw: cpu: intel: Intra-Mode BTI (CVE-2022-0002) hw: Intel: Improper restriction in memory buffer in...

RHEL 5 : hw (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. hw: TSX Transaction Asynchronous Abort (TAA) (CVE-2019-11135) hw: Fast forward store predictor...

RHEL 7 : kernel (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. kernel: out of bounds read in drivers/media/usb/dvb-usb/technisat-usb2.c (CVE-2019-15505) kernel: lack...

RHEL 7 : openssl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. openssl: the c_rehash script allows command injection (CVE-2022-2068) Integer overflow in the...

RHEL 7 : hw_amd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569) Note that Nessus...

RHEL 5 : xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. xen: missing descriptor table limit checking in x86 PV emulation leading to privilege escalation ...

RHEL 8 : openssl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. openssl: the c_rehash script allows command injection (CVE-2022-2068) The OpenSSL DSA signature...

RHEL 6 : openssl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. openssl: the c_rehash script allows command injection (CVE-2022-2068) Integer overflow in the...