Lucene search

K

Endpoint Protection Small Business Edition Cloud, And Endpoint Protection Cloud Client Security Vulnerabilities

cbl_mariner
cbl_mariner

CVE-2022-3162 affecting package kube-vip-cloud-provider 0.0.2-16

CVE-2022-3162 affecting package kube-vip-cloud-provider 0.0.2-16. No patch is available...

6.5CVSS

7AI Score

0.001EPSS

2024-06-10 09:08 PM
2
wolfi
wolfi

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: terraform-provider-google, tkn, stakater-reloader, kwok, istio-cni, scorecard, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, gcsfuse, cloudflared, fuse-overlayfs-snapshotter, gitsign, slsa-verifier,...

7.5AI Score

2024-06-10 09:08 PM
146
wolfi
wolfi

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

7.8AI Score

0.0004EPSS

2024-06-10 09:08 PM
167
wolfi
wolfi

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, aws-network-policy-agent, src-fingerprint, k8ssandra-operator, kubevela, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, gomplate, skopeo,...

6.8AI Score

0.0004EPSS

2024-06-10 09:08 PM
48
wolfi
wolfi

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...

6.7AI Score

0.0004EPSS

2024-06-10 09:08 PM
4
wolfi
wolfi

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: tkn, stakater-reloader, minio, prometheus-bind-exporter, fuse-overlayfs-snapshotter, nodetaint, skaffold, timoni, kubevela, coredns, prometheus-mysqld-exporter, pulumi-language-yaml, goreleaser, crossplane-provider-azure, git-lfs, prometheus,...

6.1CVSS

7.2AI Score

0.001EPSS

2024-06-10 09:08 PM
89
wolfi
wolfi

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: terraform-provider-google, tkn, stakater-reloader, kwok, istio-cni, scorecard, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, gcsfuse, cloudflared, fuse-overlayfs-snapshotter, gitsign, slsa-verifier,...

6.6AI Score

0.0004EPSS

2024-06-10 09:08 PM
26
wolfi
wolfi

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

7.8AI Score

0.0004EPSS

2024-06-10 09:08 PM
36
wolfi
wolfi

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

7.5AI Score

2024-06-10 09:08 PM
25
wolfi
wolfi

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: tkn, nri-mssql, scorecard, istio-cni, up, temporal-server, prometheus-bind-exporter, gitsign, cloudflared, mongo-tools, src-fingerprint, docker-credential-acr-env, slsa-verifier, prometheus-nats-exporter, amass, temporal-ui-server, grafana, coredns,...

5.9CVSS

7.1AI Score

0.962EPSS

2024-06-10 09:08 PM
124
wolfi
wolfi

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, aws-network-policy-agent, src-fingerprint, k8ssandra-operator, kubevela, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, gomplate, skopeo,...

7.5AI Score

2024-06-10 09:08 PM
18
wolfi
wolfi

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...

6.7AI Score

0.0004EPSS

2024-06-10 09:08 PM
3
wolfi
wolfi

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: tkn, kubernetes-ingress-defaultbackend, stakater-reloader, istio-cni, up, minio, prometheus-bind-exporter, fuse-overlayfs-snapshotter, slsa-verifier, nodetaint, amass, skaffold, timoni, kubevela, coredns, prometheus-mysqld-exporter, pulumi-language-yaml, goreleaser,...

7.5CVSS

8.4AI Score

0.002EPSS

2024-06-10 09:08 PM
46
wolfi
wolfi

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

7.5AI Score

2024-06-10 09:08 PM
20
wolfi
wolfi

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

7.5AI Score

2024-06-10 09:08 PM
21
wolfi
wolfi

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

7.5AI Score

2024-06-10 09:08 PM
19
wolfi
wolfi

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...

7.5AI Score

2024-06-10 09:08 PM
1
wolfi
wolfi

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: tkn, stakater-reloader, minio, prometheus-bind-exporter, fuse-overlayfs-snapshotter, nodetaint, skaffold, timoni, kubevela, coredns, prometheus-mysqld-exporter, pulumi-language-yaml, goreleaser, crossplane-provider-azure, git-lfs, prometheus,...

7.5AI Score

2024-06-10 09:08 PM
23
wolfi
wolfi

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: tkn, kubernetes-ingress-defaultbackend, stakater-reloader, istio-cni, up, minio, prometheus-bind-exporter, fuse-overlayfs-snapshotter, slsa-verifier, nodetaint, amass, skaffold, timoni, kubevela, coredns, prometheus-mysqld-exporter, pulumi-language-yaml, goreleaser,...

7.5AI Score

2024-06-10 09:08 PM
15
wolfi
wolfi

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: tkn, nri-mssql, scorecard, istio-cni, up, temporal-server, prometheus-bind-exporter, gitsign, cloudflared, mongo-tools, src-fingerprint, docker-credential-acr-env, slsa-verifier, prometheus-nats-exporter, amass, temporal-ui-server, grafana, coredns,...

7.5AI Score

2024-06-10 09:08 PM
40
wolfi
wolfi

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

7.8AI Score

0.0004EPSS

2024-06-10 09:08 PM
16
wolfi
wolfi

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

7.5AI Score

2024-06-10 09:08 PM
19
wolfi
wolfi

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

7.8AI Score

0.0004EPSS

2024-06-10 09:08 PM
16
wolfi
wolfi

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...

7.5AI Score

2024-06-10 09:08 PM
1
wolfi
wolfi

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

7.8AI Score

0.0004EPSS

2024-06-10 09:08 PM
17
cbl_mariner
cbl_mariner

CVE-2023-0215 affecting package cloud-hypervisor 22.0-2

CVE-2023-0215 affecting package cloud-hypervisor 22.0-2. This CVE either no longer is or was never...

7.5CVSS

8.4AI Score

0.004EPSS

2024-06-10 09:07 PM
1
cbl_mariner
cbl_mariner

CVE-2023-0286 affecting package cloud-hypervisor 22.0-2

CVE-2023-0286 affecting package cloud-hypervisor 22.0-2. This CVE either no longer is or was never...

7.4CVSS

8.4AI Score

0.003EPSS

2024-06-10 09:07 PM
1
cbl_mariner
cbl_mariner

CVE-2022-4304 affecting package cloud-hypervisor 22.0-2

CVE-2022-4304 affecting package cloud-hypervisor 22.0-2. This CVE either no longer is or was never...

5.9CVSS

8.4AI Score

0.002EPSS

2024-06-10 09:07 PM
cbl_mariner
cbl_mariner

CVE-2022-4450 affecting package cloud-hypervisor 22.0-2

CVE-2022-4450 affecting package cloud-hypervisor 22.0-2. This CVE either no longer is or was never...

7.5CVSS

9AI Score

0.001EPSS

2024-06-10 09:07 PM
1
cbl_mariner
cbl_mariner

CVE-2023-44487 affecting package kube-vip-cloud-provider for versions less than 0.0.2-12

CVE-2023-44487 affecting package kube-vip-cloud-provider for versions less than 0.0.2-12. A patched version of the package is...

7.5CVSS

8.2AI Score

0.732EPSS

2024-06-10 09:07 PM
cbl_mariner
cbl_mariner

CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2

CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2. A patched version of the package is...

9.8CVSS

9.7AI Score

0.001EPSS

2024-06-10 09:07 PM
2
cvelist
cvelist

CVE-2024-27806

This issue was addressed with improved environment sanitization. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user...

EPSS

2024-06-10 08:56 PM
cve
cve

CVE-2024-27830

This issue was addressed through improved state management. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. A maliciously crafted webpage may be able to fingerprint the...

EPSS

2024-06-10 08:56 PM
cve
cve

CVE-2024-27851

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing maliciously crafted web content may lead to arbitrary code...

EPSS

2024-06-10 08:56 PM
cvelist
cvelist

CVE-2024-27830

This issue was addressed through improved state management. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. A maliciously crafted webpage may be able to fingerprint the...

EPSS

2024-06-10 08:56 PM
cve
cve

CVE-2024-27806

This issue was addressed with improved environment sanitization. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user...

EPSS

2024-06-10 08:56 PM
cvelist
cvelist

CVE-2024-27851

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing maliciously crafted web content may lead to arbitrary code...

EPSS

2024-06-10 08:56 PM
cve
cve

CVE-2024-27811

The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate...

EPSS

2024-06-10 08:56 PM
cvelist
cvelist

CVE-2024-27811

The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate...

EPSS

2024-06-10 08:56 PM
cve
cve

CVE-2024-27807

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and iPadOS 16.7.8. An app may be able to circumvent App Privacy Report...

EPSS

2024-06-10 08:56 PM
cvelist
cvelist

CVE-2024-27807

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and iPadOS 16.7.8. An app may be able to circumvent App Privacy Report...

EPSS

2024-06-10 08:56 PM
cve
cve

CVE-2024-27850

This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to fingerprint the...

EPSS

2024-06-10 08:56 PM
cvelist
cvelist

CVE-2024-27850

This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to fingerprint the...

EPSS

2024-06-10 08:56 PM
cvelist
cvelist

CVE-2024-27857

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. A remote attacker may be able to cause unexpected app termination or arbitrary code...

EPSS

2024-06-10 08:56 PM
cve
cve

CVE-2024-27800

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing a maliciously crafted message may lead to a...

EPSS

2024-06-10 08:56 PM
cve
cve

CVE-2024-27857

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. A remote attacker may be able to cause unexpected app termination or arbitrary code...

EPSS

2024-06-10 08:56 PM
cvelist
cvelist

CVE-2024-27800

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing a maliciously crafted message may lead to a...

EPSS

2024-06-10 08:56 PM
cve
cve

CVE-2024-27831

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. Processing a file may lead to unexpected app...

EPSS

2024-06-10 08:56 PM
cvelist
cvelist

CVE-2024-27831

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. Processing a file may lead to unexpected app...

EPSS

2024-06-10 08:56 PM
cvelist
cvelist

CVE-2024-27820

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, iOS 16.7.8 and iPadOS 16.7.8, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing web content may lead to arbitrary code...

EPSS

2024-06-10 08:56 PM
Total number of security vulnerabilities2683020