CVE-2022-3162 affecting package kube-vip-cloud-provider 0.0.2-16
CVE-2022-3162 affecting package kube-vip-cloud-provider 0.0.2-16. No patch is available...
6.5CVSS
7AI Score
0.001EPSS
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: terraform-provider-google, tkn, stakater-reloader, kwok, istio-cni, scorecard, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, gcsfuse, cloudflared, fuse-overlayfs-snapshotter, gitsign, slsa-verifier,...
7.5AI Score
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...
7.8AI Score
0.0004EPSS
CVE-2023-45288 vulnerabilities
Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, aws-network-policy-agent, src-fingerprint, k8ssandra-operator, kubevela, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, gomplate, skopeo,...
6.8AI Score
0.0004EPSS
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...
6.7AI Score
0.0004EPSS
Vulnerabilities for packages: tkn, stakater-reloader, minio, prometheus-bind-exporter, fuse-overlayfs-snapshotter, nodetaint, skaffold, timoni, kubevela, coredns, prometheus-mysqld-exporter, pulumi-language-yaml, goreleaser, crossplane-provider-azure, git-lfs, prometheus,...
6.1CVSS
7.2AI Score
0.001EPSS
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: terraform-provider-google, tkn, stakater-reloader, kwok, istio-cni, scorecard, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, gcsfuse, cloudflared, fuse-overlayfs-snapshotter, gitsign, slsa-verifier,...
6.6AI Score
0.0004EPSS
CVE-2024-24784 vulnerabilities
Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...
7.8AI Score
0.0004EPSS
GHSA-RR6R-CFGF-GC6H vulnerabilities
Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...
7.5AI Score
CVE-2023-48795 vulnerabilities
Vulnerabilities for packages: tkn, nri-mssql, scorecard, istio-cni, up, temporal-server, prometheus-bind-exporter, gitsign, cloudflared, mongo-tools, src-fingerprint, docker-credential-acr-env, slsa-verifier, prometheus-nats-exporter, amass, temporal-ui-server, grafana, coredns,...
5.9CVSS
7.1AI Score
0.962EPSS
GHSA-4V7X-PQXF-CX7M vulnerabilities
Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, aws-network-policy-agent, src-fingerprint, k8ssandra-operator, kubevela, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, gomplate, skopeo,...
7.5AI Score
CVE-2024-24790 vulnerabilities
Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...
6.7AI Score
0.0004EPSS
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: tkn, kubernetes-ingress-defaultbackend, stakater-reloader, istio-cni, up, minio, prometheus-bind-exporter, fuse-overlayfs-snapshotter, slsa-verifier, nodetaint, amass, skaffold, timoni, kubevela, coredns, prometheus-mysqld-exporter, pulumi-language-yaml, goreleaser,...
7.5CVSS
8.4AI Score
0.002EPSS
GHSA-3Q2C-PVP5-3CQP vulnerabilities
Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...
7.5AI Score
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...
7.5AI Score
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...
7.5AI Score
GHSA-49GW-VXVF-FC2G vulnerabilities
Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...
7.5AI Score
GHSA-2WRH-6PVC-2JM9 vulnerabilities
Vulnerabilities for packages: tkn, stakater-reloader, minio, prometheus-bind-exporter, fuse-overlayfs-snapshotter, nodetaint, skaffold, timoni, kubevela, coredns, prometheus-mysqld-exporter, pulumi-language-yaml, goreleaser, crossplane-provider-azure, git-lfs, prometheus,...
7.5AI Score
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: tkn, kubernetes-ingress-defaultbackend, stakater-reloader, istio-cni, up, minio, prometheus-bind-exporter, fuse-overlayfs-snapshotter, slsa-verifier, nodetaint, amass, skaffold, timoni, kubevela, coredns, prometheus-mysqld-exporter, pulumi-language-yaml, goreleaser,...
7.5AI Score
GHSA-45X7-PX36-X8W8 vulnerabilities
Vulnerabilities for packages: tkn, nri-mssql, scorecard, istio-cni, up, temporal-server, prometheus-bind-exporter, gitsign, cloudflared, mongo-tools, src-fingerprint, docker-credential-acr-env, slsa-verifier, prometheus-nats-exporter, amass, temporal-ui-server, grafana, coredns,...
7.5AI Score
CVE-2024-24783 vulnerabilities
Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...
7.8AI Score
0.0004EPSS
GHSA-32CH-6X54-Q4H9 vulnerabilities
Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...
7.5AI Score
CVE-2024-24785 vulnerabilities
Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...
7.8AI Score
0.0004EPSS
GHSA-236W-P7WF-5PH8 vulnerabilities
Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...
7.5AI Score
CVE-2023-45290 vulnerabilities
Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...
7.8AI Score
0.0004EPSS
CVE-2023-0215 affecting package cloud-hypervisor 22.0-2
CVE-2023-0215 affecting package cloud-hypervisor 22.0-2. This CVE either no longer is or was never...
7.5CVSS
8.4AI Score
0.004EPSS
CVE-2023-0286 affecting package cloud-hypervisor 22.0-2
CVE-2023-0286 affecting package cloud-hypervisor 22.0-2. This CVE either no longer is or was never...
7.4CVSS
8.4AI Score
0.003EPSS
CVE-2022-4304 affecting package cloud-hypervisor 22.0-2
CVE-2022-4304 affecting package cloud-hypervisor 22.0-2. This CVE either no longer is or was never...
5.9CVSS
8.4AI Score
0.002EPSS
CVE-2022-4450 affecting package cloud-hypervisor 22.0-2
CVE-2022-4450 affecting package cloud-hypervisor 22.0-2. This CVE either no longer is or was never...
7.5CVSS
9AI Score
0.001EPSS
CVE-2023-44487 affecting package kube-vip-cloud-provider for versions less than 0.0.2-12
CVE-2023-44487 affecting package kube-vip-cloud-provider for versions less than 0.0.2-12. A patched version of the package is...
7.5CVSS
8.2AI Score
0.732EPSS
CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2
CVE-2023-45853 affecting package cloud-hypervisor for versions less than 32.0-2. A patched version of the package is...
9.8CVSS
9.7AI Score
0.001EPSS
This issue was addressed with improved environment sanitization. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user...
EPSS
This issue was addressed through improved state management. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. A maliciously crafted webpage may be able to fingerprint the...
EPSS
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing maliciously crafted web content may lead to arbitrary code...
EPSS
This issue was addressed through improved state management. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. A maliciously crafted webpage may be able to fingerprint the...
EPSS
This issue was addressed with improved environment sanitization. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user...
EPSS
The issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing maliciously crafted web content may lead to arbitrary code...
EPSS
The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate...
EPSS
The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate...
EPSS
The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and iPadOS 16.7.8. An app may be able to circumvent App Privacy Report...
EPSS
The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and iPadOS 16.7.8. An app may be able to circumvent App Privacy Report...
EPSS
This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to fingerprint the...
EPSS
This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to fingerprint the...
EPSS
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. A remote attacker may be able to cause unexpected app termination or arbitrary code...
EPSS
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing a maliciously crafted message may lead to a...
EPSS
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. A remote attacker may be able to cause unexpected app termination or arbitrary code...
EPSS
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing a maliciously crafted message may lead to a...
EPSS
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. Processing a file may lead to unexpected app...
EPSS
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. Processing a file may lead to unexpected app...
EPSS
The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, iOS 16.7.8 and iPadOS 16.7.8, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing web content may lead to arbitrary code...
EPSS