Microsoft Windows 10 1607, 1703, And Windows Server 2016 Security Vulnerabilities

CVE-2024-26306

A timing-based side-channel flaw was found in iperf3. If the iperf3 server is running with the --rsa-private-key-path option, the user authentication API can be attacked. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product.....

CVE-2024-3744

A security issue was discovered in azure-file-csi-driver where an actor with access to the driver logs could observe service account tokens. These tokens could then potentially be exchanged with external cloud providers to access secrets stored in cloud vault solutions. Tokens are only logged when....

remmed.co.nz Cross Site Scripting vulnerability OBB-3927955

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

remueramedical.co.nz Cross Site Scripting vulnerability OBB-3927954

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

elroihealthcare.com.au Cross Site Scripting vulnerability OBB-3927953

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

GHSA-679V-HH23-H5JH vulnerabilities

Vulnerabilities for packages: kind, falco, smarter-device-manager-fips, configmap-reload-fips,...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, istio-operator-fips, istio-pilot-agent, istio-pilot-discovery-fips, istio-cni, minio, vexctl, external-secrets, falco, gitsign, istio-cni-fips, istio-operator, falcoctl, istio-pilot-agent-fips, external-secrets-fips, kubescape, spire-server-fips,...

CVE-2023-39323 vulnerabilities

Vulnerabilities for packages: kind, falco, smarter-device-manager-fips, configmap-reload-fips,...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: syft, docker-compose, dagger, zot, buf, ko, kubescape, grype, ctop, kaniko, datadog-agent, aactl, spire-server, up, loki, trivy, melange, buildkitd, tkn, wolfictl, cadvisor, kargo, conftest, prometheus, crossplane,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: falcoctl-fips, cloudflared, cert-manager-fips, flux-kustomize-controller, istio-pilot-discovery-fips, tkn, sops, oauth2-proxy, keda, argo-cd, cilium-envoy, consul, cosign, flux-source-controller, vexctl, falco, gitsign, dex, slsa-verifier, kots, argo-workflows,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: flux-notification-controller-2.0, cass-operator, goreleaser, istio-operator-fips, argo-cd, cosign, cert-exporter, ctop, kubeflow-katib, dagger, eks-distro-kubernetes-csi-external-attacher, terraform-provider-google, logstash-exporter-fips, k8ssandra-operator,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: zarf, zot, goreleaser, tekton-chains, ko, kubescape, gitsign, skaffold, aactl, spire-server, falcoctl, melange, tkn, wolfictl, slsa-verifier, policy-controller, falco, apko,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: flux-notification-controller-2.0, cass-operator, helm-push, goreleaser, istio-operator-fips, render-template, argo-cd, nri-nagios, cue-fips, docker-cli, nri-nginx, cert-exporter, ctop, yq, kubeflow-katib, dagger, shfmt, eks-distro-kubernetes-csi-external-attacher,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: syft, docker-compose, dagger, zot, buf, ko, kubescape, grype, ctop, kaniko, datadog-agent, aactl, spire-server, up, loki, trivy, melange, buildkitd, tkn, wolfictl, cadvisor, kargo, conftest, prometheus, crossplane,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubeadm-controlplane-controller, clusterctl, vault-k8s, kubernetes-dns-node-cache, src, gitlab-pages, crossplane-provider-azure, gatekeeper, dagger, kube-logging-operator, spark-operator, kyverno, prometheus-bind-exporter, thanos-operator, kubeflow-pipelines,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: kubeadm-controlplane-controller, clusterctl, sbom-scorecard, vault-k8s, kubernetes-dns-node-cache, src, gitlab-logger, crossplane-provider-azure, gatekeeper, dagger, helm-push, kube-logging-operator, spark-operator, prometheus-bind-exporter, thanos-operator,...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: k3s, keda, temporal-server, src, kine, amass, trillian, vault, argo-workflows, kots, ferretdb, telegraf, step-ca, spicedb, caddy,...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: k3s, keda, temporal-server, src, kine, amass, trillian, vault, argo-workflows, kots, ferretdb, telegraf, step-ca, spicedb, caddy,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: flux-notification-controller-2.0, cass-operator, helm-push, goreleaser, istio-operator-fips, render-template, argo-cd, nri-nagios, cue-fips, docker-cli, nri-nginx, cert-exporter, ctop, yq, kubeflow-katib, dagger, shfmt, eks-distro-kubernetes-csi-external-attacher,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: flux-notification-controller-2.0, cass-operator, helm-push, goreleaser, istio-operator-fips, render-template, argo-cd, nri-nagios, cue-fips, docker-cli, nri-nginx, cert-exporter, ctop, yq, kubeflow-katib, dagger, shfmt, eks-distro-kubernetes-csi-external-attacher,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: dex, sops, flux-kustomize-controller, kots, kyverno, terragrunt, tekton-chains, kubescape, gitsign, keda, traefik, istio-pilot-discovery, cilium-envoy, aactl, oauth2-proxy, cert-manager, spire-server, tekton-pipelines, tkn, vault, argo-workflows, slsa-verifier,...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, istio-operator-fips, istio-pilot-agent, istio-pilot-discovery-fips, istio-cni, minio, external-secrets, falco, istio-cni-fips, istio-operator, falcoctl, istio-pilot-agent-fips, external-secrets-fips, istio-fips, spire-server-fips, istio-pilot-discovery,....

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: src, gitlab-pages, flux-kustomize-controller, gatekeeper, spark-operator, kyverno, prometheus-bind-exporter, ko, node-problem-detector, gitlab-runner, aws-efs-csi-driver, scorecard, skaffold, ip-masq-agent, stakater-reloader, fuse-overlayfs-snapshotter, nginx-stable,.....

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: amass, prometheus-blackbox-exporter, istio-pilot-agent, kubernetes-dashboard, prometheus-redis-exporter-fips, memcached-exporter, argo-cd, git-lfs, calico-fips, consul, cosign, node-problem-detector, kube-logging-operator, kube-oidc-proxy, external-secrets,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: cert-manager-fips, temporal, kubernetes, aws-ebs-csi-driver, argo-cd, keda, temporal-server-fips, kube-oidc-proxy, metrics-server-fips, kubernetes-fips, temporal-fips, cert-manager, kubevela, containerd, kubescape, k3s, cri-tools, kubernetes-csi-external-resizer,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: gops, cass-operator, helm-push, goreleaser, amass, gosu, petname, render-template, prometheus-redis-exporter-fips, sops, aws-flb-cloudwatch, calico-fips, docker-cli, sbom-scorecard, go-licenses, ctop, slsa-verifier, go-bindata, stakater-reloader, grpcurl, aactl,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: amass, prometheus-blackbox-exporter, memcached-exporter, prometheus-redis-exporter-fips, argo-cd, git-lfs, calico-fips, cosign, node-problem-detector, kube-oidc-proxy, external-secrets, conftest, gitlab-runner, kubeflow-katib, prometheus,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: flux-notification-controller-2.0, cass-operator, goreleaser, istio-operator-fips, argo-cd, cosign, cert-exporter, ctop, kubeflow-katib, dagger, eks-distro-kubernetes-csi-external-attacher, terraform-provider-google, logstash-exporter-fips, k8ssandra-operator,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: vault-k8s, kubernetes-dns-node-cache, helm-push, spark-operator, kyverno, hcloud, gitlab-runner, nri-mongodb, aws-efs-csi-driver, croc, bazelisk, gostatsd, dataplaneapi, docker-credential-acr-env, kube-rbac-proxy, nri-rabbitmq, eksctl, docker-credential-gcr, skopeo,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: flux-notification-controller-2.0, cass-operator, helm-push, goreleaser, istio-operator-fips, render-template, argo-cd, nri-nagios, cue-fips, docker-cli, nri-nginx, cert-exporter, ctop, yq, kubeflow-katib, dagger, shfmt, eks-distro-kubernetes-csi-external-attacher,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: sbom-scorecard, gitlab-logger, cass-operator, sops, helm-push, cortex, oras, docker-cli, flannel-cni-plugin, goreleaser, local-path-provisioner, prometheus-bind-exporter, gobuster, scorecard, ctop, ip-masq-agent, aws-flb-cloudwatch, aws-flb-firehose, cilium-envoy,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: wolfictl, goreleaser, istio-operator-fips, istio-pilot-agent, sops, argo-cd, consul, cosign, policy-controller, slsa-verifier, istio-pilot-agent-fips, istio-fips, aactl, timestamp-authority-fips, rekor, bank-vaults, terragrunt, grafana, vault, argo-workflows-fips,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: vault-k8s, src, gitlab-pages, flux-kustomize-controller, crossplane-provider-azure, gatekeeper, kube-logging-operator, spark-operator, kyverno, prometheus-bind-exporter, thanos-operator, node-problem-detector, gitlab-runner, aws-efs-csi-driver, skaffold,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: vault-k8s, src, gitlab-pages, flux-kustomize-controller, crossplane-provider-azure, gatekeeper, helm-push, spark-operator, kyverno, prometheus-bind-exporter, kubeflow-pipelines, ko, tekton-chains, node-problem-detector, gitlab-runner, scorecard, step-ca, k3d,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: gops, cass-operator, helm-push, goreleaser, amass, gosu, petname, render-template, prometheus-redis-exporter-fips, sops, aws-flb-cloudwatch, calico-fips, docker-cli, sbom-scorecard, go-licenses, ctop, slsa-verifier, go-bindata, stakater-reloader, grpcurl, aactl,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubeadm-controlplane-controller, clusterctl, vault-k8s, kubernetes-dns-node-cache, src, gitlab-pages, crossplane-provider-azure, gatekeeper, dagger, kube-logging-operator, spark-operator, kyverno, prometheus-bind-exporter, thanos-operator, kubeflow-pipelines,...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, istio-operator-fips, istio-pilot-agent, istio-pilot-discovery-fips, istio-cni, minio, external-secrets, falco, istio-cni-fips, istio-operator, falcoctl, istio-pilot-agent-fips, external-secrets-fips, istio-fips, spire-server-fips, istio-pilot-discovery,....

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: kubeadm-controlplane-controller, clusterctl, sbom-scorecard, vault-k8s, kubernetes-dns-node-cache, src, gitlab-logger, crossplane-provider-azure, gatekeeper, dagger, helm-push, kube-logging-operator, spark-operator, prometheus-bind-exporter, thanos-operator,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: kubeadm-controlplane-controller, clusterctl, sbom-scorecard, vault-k8s, kubernetes-dns-node-cache, src, gitlab-logger, crossplane-provider-azure, gatekeeper, dagger, helm-push, kube-logging-operator, spark-operator, prometheus-bind-exporter, thanos-operator,...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: cert-manager, kubevela, cluster-autoscaler-fips, up, kube-oidc-proxy, metrics-server-fips, gitlab-kas, calico, kubernetes, prometheus, thanos, kubernetes-fips, caddy, ipfs, k3s, keda, prometheus-adapter,...

GHSA-PVCR-V8J8-J5Q3 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, istio-operator-fips, istio-pilot-agent, istio-pilot-discovery-fips, istio-cni, minio, vexctl, external-secrets, falco, gitsign, istio-cni-fips, istio-operator, falcoctl, istio-pilot-agent-fips, external-secrets-fips, kubescape, spire-server-fips,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: clusterctl, vault-k8s, kubernetes-dns-node-cache, ipfs, src, gitlab-pages, flux-kustomize-controller, crossplane-provider-azure, prometheus-bind-exporter, hcloud, ko, tekton-chains, gitlab-runner, go, scorecard, croc, ip-masq-agent, skaffold, gostatsd, pombump, k3d,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: flux-notification-controller-2.0, cass-operator, helm-push, goreleaser, istio-operator-fips, render-template, argo-cd, nri-nagios, cue-fips, docker-cli, nri-nginx, cert-exporter, ctop, yq, kubeflow-katib, dagger, shfmt, eks-distro-kubernetes-csi-external-attacher,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: cass-operator, helm-push, goreleaser, istio-operator-fips, render-template, argo-cd, git-lfs, cue-fips, docker-cli, nri-nagios, cosign, nri-nginx, cert-exporter, yq, kubeflow-katib, velero-plugin-for-aws, thanos-fips, shfmt,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: flux-notification-controller-2.0, cass-operator, helm-push, goreleaser, istio-operator-fips, render-template, argo-cd, nri-nagios, cue-fips, docker-cli, nri-nginx, cert-exporter, ctop, yq, kubeflow-katib, dagger, shfmt, eks-distro-kubernetes-csi-external-attacher,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: clusterctl, vault-k8s, kubernetes-dns-node-cache, ipfs, src, gitlab-pages, flux-kustomize-controller, crossplane-provider-azure, prometheus-bind-exporter, hcloud, ko, tekton-chains, gitlab-runner, go, scorecard, croc, ip-masq-agent, skaffold, gostatsd, pombump, k3d,...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: cert-manager, kubevela, cluster-autoscaler-fips, up, kube-oidc-proxy, metrics-server-fips, gitlab-kas, calico, kubernetes, prometheus, thanos, kubernetes-fips, caddy, ipfs, k3s, keda, prometheus-adapter,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: gops, cass-operator, helm-push, goreleaser, amass, gosu, petname, render-template, prometheus-redis-exporter-fips, sops, aws-flb-cloudwatch, calico-fips, docker-cli, sbom-scorecard, go-licenses, ctop, slsa-verifier, go-bindata, stakater-reloader, grpcurl, aactl,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: kubeadm-controlplane-controller, clusterctl, sbom-scorecard, vault-k8s, kubernetes-dns-node-cache, src, gitlab-logger, crossplane-provider-azure, gatekeeper, dagger, helm-push, kube-logging-operator, spark-operator, prometheus-bind-exporter, thanos-operator,...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: cert-manager-fips, temporal, kubernetes, aws-ebs-csi-driver, argo-cd, keda, temporal-server-fips, kube-oidc-proxy, metrics-server-fips, kubernetes-fips, temporal-fips, cert-manager, kubevela, containerd, kubescape, k3s, cri-tools, kubernetes-csi-external-resizer,...