Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in certain ways. This is related to internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication and the use of the UyY29r password for the M3vwHr account. This also affects "Grouper for Web...
7AI Score
EPSS
Internet2 Grouper before 5.6 allows authentication bypass when LDAP authentication is used in certain ways. This is related to internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication and the use of the UyY29r password for the M3vwHr account. This also affects "Grouper for Web...
EPSS
7.5AI Score
4.9CVSS
6AI Score
0.0004EPSS
7.5AI Score
7.5AI Score
7.5AI Score
7.5AI Score
9.8CVSS
9.7AI Score
0.002EPSS
GHSA-84PR-M4JR-85G5 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-jupyter-web-app,...
7.5AI Score
CVE-2024-34069 vulnerabilities
Vulnerabilities for packages: py3.10-tensorflow-core, kubeflow-jupyter-web-app, superset, py3-werkzeug,...
7.5CVSS
7.8AI Score
0.0004EPSS
GHSA-2G68-C3QC-8985 vulnerabilities
Vulnerabilities for packages: py3.10-tensorflow-core, kubeflow-jupyter-web-app, superset, py3-werkzeug,...
7.5AI Score
CVE-2024-28219 vulnerabilities
Vulnerabilities for packages: pytorch, kubeflow-pipelines-visualization-server,...
6.7CVSS
7AI Score
0.0004EPSS
7.5AI Score
5.3CVSS
6.1AI Score
0.0004EPSS
7.8CVSS
7.1AI Score
0.0004EPSS
7.5AI Score
7.8CVSS
7.1AI Score
0.0004EPSS
7.3CVSS
7.1AI Score
0.0005EPSS
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, mage, nri-nagios, goreleaser, dgraph, node-problem-detector, terraform, clusterctl, nri-mssql, crossplane, bom, k8sgpt-operator, docker-cli, mockery,...
7.8AI Score
0.0004EPSS
GHSA-95PR-FXF5-86GV vulnerabilities
Vulnerabilities for packages: goreleaser, kubescape, zarf, falco, tkn, zot, apko, aactl, policy-controller, gitsign, vexctl, wolfictl, neuvector-sigstore-interface, melange, falcoctl, ko, spire-server, tekton-chains, skaffold, slsa-verifier,...
7.5AI Score
CVE-2023-44487 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, amass, goreleaser, dgraph, dotnet, node-problem-detector, terraform, terraform-provider-azurerm, bom, prometheus-bind-exporter, telegraf, minio, memcached-exporter, opentofu, haproxy-ingress, helm, gke-gcloud-auth-plugin,...
7.5CVSS
9AI Score
0.732EPSS
Vulnerabilities for packages: cert-manager, opentelemetry-collector-contrib, goreleaser, keda, kubescape, zarf, gitlab-shell, terragrunt, terraform, fulcio, terraform-provider-azurerm, k3d, tkn, zot, loki, nuclei, opentofu, gitlab-runner, aactl, policy-controller, pulumi, argo-cd,...
6CVSS
6AI Score
0.0004EPSS
CVE-2024-29018 vulnerabilities
Vulnerabilities for packages: goreleaser, grype, kubescape, cadvisor, crossplane, buf, tkn, zot, telegraf, datadog-agent, loki, aactl, prometheus, kargo, docker-compose, wolfictl, melange, buildkitd, ko, ctop, spire-server, trivy, conftest, syft, kaniko, up,...
5.9CVSS
6.1AI Score
0.0004EPSS
GHSA-2C7C-3MJ9-8FQH vulnerabilities
Vulnerabilities for packages: cert-manager, keda, kubescape, falco, terragrunt, fulcio, kots, tkn, aactl, argo-cd, traefik, dex, argo-workflows, gitsign, oauth2-proxy, kyverno, vexctl, tekton-pipelines, istio-pilot-discovery, cosign, spire-server, external-secrets-operator, vault, tekton-chains,...
7.5AI Score
GHSA-MQ39-4GV4-MVPX vulnerabilities
Vulnerabilities for packages: goreleaser, grype, kubescape, cadvisor, crossplane, buf, tkn, zot, telegraf, datadog-agent, loki, aactl, prometheus, kargo, docker-compose, wolfictl, melange, buildkitd, ko, ctop, spire-server, trivy, conftest, syft, kaniko, up,...
7.5AI Score
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, pulumi-language-java, amass, kube-state-metrics, goreleaser, dgraph, node-problem-detector, terragrunt, terraform, terraform-provider-azurerm, clusterctl, crossplane, k8sgpt-operator, newrelic-infra-operator, prometheus-bind-exporter, zot,...
7.5AI Score
CVE-2024-21506 vulnerabilities
Vulnerabilities for packages: py3-pymongo, kubeflow-pipelines-visualization-server,...
6.7AI Score
0.0004EPSS
4.9CVSS
6AI Score
0.0004EPSS
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: kube-bench, vault, caddy, src, spicedb, amass, telegraf, keda, kine, k3s, temporal-server, ferretdb, argo-workflows, kots, trillian,...
9.8CVSS
9.7AI Score
0.0004EPSS
GHSA-MRWW-27VC-GGHV vulnerabilities
Vulnerabilities for packages: kube-bench, vault, caddy, src, spicedb, amass, telegraf, keda, kine, k3s, temporal-server, ferretdb, argo-workflows, kots, trillian,...
7.5AI Score
7.5AI Score
7.3CVSS
7.1AI Score
0.0005EPSS
7.3CVSS
7.1AI Score
0.0004EPSS
9.8CVSS
7.7AI Score
0.001EPSS
7.5AI Score
4.4CVSS
5.6AI Score
0.0004EPSS
4.9CVSS
6AI Score
0.0004EPSS
4.9CVSS
5.7AI Score
0.0005EPSS
7.5AI Score
7.5AI Score
7.5AI Score
7.5CVSS
7.2AI Score
0.0004EPSS
GHSA-JJG7-2V4V-X38H vulnerabilities
Vulnerabilities for packages: py3-idna, dask-gateway, k8s-sidecar, datadog-agent, py3.10-tensorflow-core, jwt-tool, confluent-docker-utils, az, kubeflow-jupyter-web-app, kubeflow-pipelines, ggshield, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, kubeflow-katib,...
7.5AI Score
7.5AI Score
CVE-2023-45288 vulnerabilities
Vulnerabilities for packages: nri-postgresql, velero-plugin-for-csi, terragrunt, nsc, nri-mssql, docker-cli, q, zot, opentofu, memcached-exporter, haproxy-ingress, ingress-nginx-controller, argo-cd, cluster-autoscaler, gomplate, kyverno, flux-image-automation-controller,...
6.8AI Score
0.0004EPSS
CVE-2024-24787 vulnerabilities
Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, kube-state-metrics, cert-manager-webhook-pdns, gitleaks, mage, wave, dgraph, clusterctl, tempo, crossplane, bom, newrelic-prometheus-configurator, mockery, newrelic-infra-operator, q, go, prometheus-bind-exporter, zot,...
6.5AI Score
0.0004EPSS
GHSA-5FQ7-4MXC-535H vulnerabilities
Vulnerabilities for packages: docker-credential-acr-env, aws-efs-csi-driver, kube-state-metrics, cert-manager-webhook-pdns, gitleaks, mage, wave, dgraph, clusterctl, tempo, crossplane, bom, newrelic-prometheus-configurator, mockery, newrelic-infra-operator, q, go, prometheus-bind-exporter, zot,...
7.5AI Score
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: nri-postgresql, velero-plugin-for-csi, terragrunt, nsc, nri-mssql, q, opentofu, memcached-exporter, pluto, haproxy-ingress, ingress-nginx-controller, cluster-autoscaler, gomplate, kyverno, flux-image-automation-controller, kubernetes-csi-external-resizer, lazygit,...
5.5CVSS
6.1AI Score
0.0004EPSS
GHSA-V6V8-XJ6M-XWQH vulnerabilities
Vulnerabilities for packages: cert-manager, opentelemetry-collector-contrib, goreleaser, keda, kubescape, zarf, gitlab-shell, terragrunt, terraform, fulcio, terraform-provider-azurerm, k3d, tkn, zot, loki, nuclei, opentofu, gitlab-runner, aactl, policy-controller, pulumi, argo-cd,...
7.5AI Score