F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, PEM, PSM Security Vulnerabilities

Security Bulletin: IBM Aspera Faspex 5.0.7 has addressed a cross-site scripting vulnerability (CVE-2022-40744)

Summary IBM Aspera Faspex 5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Details **...

Why Bot Management Should Be a Crucial Element of Your Marketing Strategy

Marketing teams need a comprehensive bot management solution to address the challenges posed by bot traffic and protect marketing analytics. Bot management is designed to protect marketing efforts from bot-generated invalid traffic by accurately and efficiently classifying traffic and stopping...

CVE-2024-35838

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential sta-link leak When a station is allocated, links are added but not set to valid yet (e.g. during connection to an AP MLD), we might remove the station without ever marking links valid, and leak them......

Neos Information Disclosure Security Note

Due to reports it has been validated that internal workspaces in Neos are accessible without authentication. Some users assumed this is a planned feature but it is not. A workspace preview should be an additional feature with respective security measures in place. Note that this only allows...

CVE-2024-27411

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: keep DMA buffers required for suspend/resume Nouveau deallocates a few buffers post GPU init which are required for GPU suspend/resume to function correctly. This is likely not as big an issue on systems where the...

CVE-2024-27409

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: HDMA: Add sync read before starting the DMA transfer in remote setup The Linked list element and pointer are not stored in the same memory as the HDMA controller register. If the doorbell register is toggled...

CVE-2024-27408

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: eDMA: Add sync read before starting the DMA transfer in remote setup The Linked list element and pointer are not stored in the same memory as the eDMA controller register. If the doorbell register is toggled...

CVE-2024-27415

In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: confirm multicast packets before passing them up the stack conntrack nf_confirm logic cannot handle cloned skbs referencing the same nf_conn entry, which will happen for multicast (broadcast) frames on bridges......

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: argo-cd, pulumi-kubernetes-operator, flux-notification-controller, melange,...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: prometheus, cri-tools, syft, docker, melange, harbor-scanner-trivy, tekton-pipelines, buf, wolfictl, docker-compose, grype, neuvector-scanner, k3d, helm-push, kaniko, policy-controller,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: kots, eksctl, zarf, chartmuseum, cert-manager, flux-helm-controller, kubescape, cilium-cli, k8sgpt, helm-operator, trivy, flux-source-controller, up, k9s, zot, helm-push,...

GHSA-888H-RM2R-VRC7 vulnerabilities

Vulnerabilities for packages: falco, kind,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: kots, k3s, ingress-nginx-controller, skaffold, zarf, k3d, kubescape, buildkitd, grype, k9s, newrelic-infrastructure-agent, cadvisor, skopeo, syft, docker, nerdctl, zot, nvidia-device-plugin, kaniko, telegraf, runc, datadog-agent, ctop, trivy, kubernetes,...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: kots, cert-manager, helm, tekton-pipelines, kubevela, eksctl, skaffold, kubescape, cilium-cli, grype, up, newrelic-infrastructure-agent, melange, fuse-overlayfs-snapshotter, zot, helm-push, kaniko, telegraf, flux-helm-controller, gitness, ctop, trivy,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: kots, eksctl, zarf, chartmuseum, cert-manager, flux-helm-controller, kubescape, cilium-cli, k8sgpt, helm-operator, trivy, flux-source-controller, up, k9s, zot, helm-push,...

CVE-2023-5043 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, nodetaint, kubernetes-csi-driver-hostpath, calico, kubernetes-dns-node-cache, spark-operator, ip-masq-agent, cluster-autoscaler, kubernetes, local-static-provisioner, kubeflow-pipelines,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, envoy-ratelimit, atlantis, aactl, kyverno, sigstore-scaffolding, bom, opentofu, pulumi-language-yaml, newrelic-infrastructure-agent, haproxy-ingress, nghttp2, thanos, cluster-autoscaler, nri-prometheus, tomcat,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: argo-cd, cloudflared, falco, kots, cert-manager, tekton-pipelines, rekor, slsa-verifier, aactl, kyverno, terragrunt, traefik, argo-workflows, flux-kustomize-controller, kubescape, external-secrets-operator, cilium-envoy, spire-server, cosign, gitsign,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, prometheus-pushgateway, k3s, crossplane-provider-gcp, k8sgpt, envoy-ratelimit, aactl, atlantis, kyverno, kargo, crossplane-provider-aws, grpc-health-probe, newrelic-nri-kube-events, newrelic-infra-operator,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: gatekeeper, prometheus-bind-exporter, prometheus-pushgateway, k3s, k8sgpt, sigstore-scaffolding, aactl, kyverno, crossplane-provider-aws, bom, kube-state-metrics, kube-fluentd-operator, opentofu, vault-k8s, kubernetes-csi-external-provisioner, pulumi-language-yaml,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: falco, kots, cri-tools, cert-manager, helm, k3s, tekton-pipelines, k8sgpt, slsa-verifier, guac, pulumi, aactl, kyverno, kargo, traefik, argo-workflows, filebeat, bom, eksctl, kubevela, skaffold, zarf, kubescape, falcoctl, goreleaser, buildkitd, loki, up, k9s,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, prometheus-pushgateway, k3s, crossplane-provider-gcp, k8sgpt, envoy-ratelimit, aactl, atlantis, kyverno, kargo, crossplane-provider-aws, grpc-health-probe, newrelic-nri-kube-events, newrelic-infra-operator,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: argo-cd, pulumi-kubernetes-operator, flux-notification-controller, melange,...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: prometheus, cri-tools, syft, docker, melange, harbor-scanner-trivy, tekton-pipelines, buf, wolfictl, docker-compose, grype, neuvector-scanner, k3d, helm-push, kaniko, policy-controller,...

GHSA-RXX3-4978-3CC9 vulnerabilities

Vulnerabilities for packages: falco, kind,...

GHSA-F2CJ-5636-4J38 vulnerabilities

Vulnerabilities for packages: falco, kind,...

CVE-2023-29403 vulnerabilities

Vulnerabilities for packages: falco, kind,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: prometheus-bind-exporter, oras, crossplane-provider-gcp, k8sgpt, atlantis, aactl, crossplane-provider-aws, neuvector-scanner, newrelic-infra-operator, bom, eksctl, hubble-ui, vault-k8s, confluent-common-docker, capslock, kubernetes-csi-external-provisioner,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: prometheus-bind-exporter, oras, crossplane-provider-gcp, k8sgpt, atlantis, aactl, crossplane-provider-aws, neuvector-scanner, newrelic-infra-operator, bom, eksctl, hubble-ui, vault-k8s, confluent-common-docker, capslock, kubernetes-csi-external-provisioner,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: falco, prometheus-stackdriver-exporter, prometheus-bind-exporter, oras, smarter-device-manager, sbom-scorecard, cni-plugins, kind, slsa-verifier, aactl, amass, protoc-gen-go-grpc, influx, go-md2man, nri-discovery-kubernetes, aws-flb-cloudwatch, nats, grpcurl,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, k3s, sigstore-scaffolding, aactl, atlantis, kyverno, crossplane-provider-aws, grpc-health-probe, bom, eksctl, istio-cni, kube-fluentd-operator, opentofu, vault-k8s, spire-server, fq, haproxy-ingress,...

CVE-2024-26147 vulnerabilities

Vulnerabilities for packages: kots, eksctl, zarf, chartmuseum, cert-manager, flux-helm-controller, kubescape, cilium-cli, k8sgpt, helm-operator, trivy, flux-source-controller, up, k9s, zot, helm-push,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: prometheus-bind-exporter, oras, crossplane-provider-gcp, k8sgpt, atlantis, aactl, crossplane-provider-aws, neuvector-scanner, newrelic-infra-operator, bom, eksctl, hubble-ui, vault-k8s, confluent-common-docker, capslock, kubernetes-csi-external-provisioner,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, prometheus-pushgateway, k3s, k8sgpt, sigstore-scaffolding, atlantis, aactl, kyverno, crossplane-provider-aws, bom, istio-cni, kube-state-metrics, kube-fluentd-operator, opentofu, vault-k8s,...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: falco, tekton-chains, skaffold, apko, ko, melange, kubescape, tkn, slsa-verifier, aactl, spire-server, cosign,...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: falco, tekton-chains, skaffold, apko, ko, melange, kubescape, tkn, slsa-verifier, aactl, spire-server, cosign,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: argo-cd, cloudflared, falco, kots, rook, step-ca, cert-manager, weaviate, tekton-pipelines, rekor, slsa-verifier, guac, sigstore-scaffolding, aactl, kyverno, kargo, grpc-health-probe, terragrunt, traefik, argo-workflows, istio-operator, istio-cni, skaffold, zarf,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: argo-cd, falco, pulumi-language-java, slsa-verifier, pulumi, aactl, crossplane-provider-aws, terragrunt, crossplane, kubevela, skaffold, pulumi-language-dotnet, boring-registry, flux-kustomize-controller, terraform-provider-google, zarf, kubescape, goreleaser,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: falco, gatekeeper, prometheus-bind-exporter, oras, k3s, prometheus-pushgateway, cni-plugins, k8sgpt, envoy-ratelimit, nri-redis, newrelic-infra-operator, bom, eksctl, hubble-ui, esbuild, opentofu, vault-k8s, capslock, kubernetes-csi-external-provisioner,...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: nodetaint, prometheus-adapter, calico, kubernetes-dns-node-cache, spark-operator, ip-masq-agent, aws-efs-csi-driver, cluster-autoscaler,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: nodetaint, prometheus-adapter, calico, kubernetes-dns-node-cache, spark-operator, ip-masq-agent, aws-efs-csi-driver, cluster-autoscaler,...

CVE-2023-29405 vulnerabilities

Vulnerabilities for packages: falco, kind,...

GHSA-622H-H2P8-743X vulnerabilities

Vulnerabilities for packages:...

CVE-2023-29404 vulnerabilities

Vulnerabilities for packages: falco, kind,...