Emc Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401 Security Vulnerabilities

CVE-2023-41928 Remote server offers deprecated TLS protocol in Kiloview P1/P2 devices

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic...

CVE-2023-41928 Remote server offers deprecated TLS protocol in Kiloview P1/P2 devices

The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic...

CVE-2023-41927 Weak TLS Cipher Suites Supported in Kiloview P1/P2 devices

The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptographic...

CVE-2023-41927 Weak TLS Cipher Suites Supported in Kiloview P1/P2 devices

The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing the risk of cryptographic...

Exploit for CVE-2024-6387

Run bash cve-2024-6387.sh Description: An...

CVE-2024-5349

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'map_style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute...

CVE-2024-5349

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'map_style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute...

Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware

A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deliver malware. The vulnerability, tracked as CVE-2024-20399 (CVSS score: 6.0), concerns a case of command injection that allows an authenticated,...

CVE-2024-5349 LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'map_style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute...

GHSA-VQ7J-GX56-RXJH vulnerabilities

Vulnerabilities for packages: metrics-server, kind,...

CVE-2024-28219 vulnerabilities

Vulnerabilities for packages: py3-pillow, pytorch,...

GHSA-M87M-MMVP-V9QM vulnerabilities

Vulnerabilities for packages:...

CVE-2024-20994 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21047 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21062 vulnerabilities

Vulnerabilities for packages:...

GHSA-5XQ9-RCPJ-P52V vulnerabilities

Vulnerabilities for packages:...

GHSA-88H4-JW57-85V9 vulnerabilities

Vulnerabilities for packages:...

GHSA-R27R-5FWH-VXQW vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21885 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21886 vulnerabilities

Vulnerabilities for packages:...

GHSA-49WX-9H9F-8C9G vulnerabilities

Vulnerabilities for packages:...

CVE-2024-31080 vulnerabilities

Vulnerabilities for packages:...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: gitsign, goreleaser, spire-server, tekton-chains, melange, apko, tkn, kubescape, aactl, zot, falco, falcoctl, skaffold, flux-source-controller, ko, wolfictl, vexctl, neuvector-sigstore-interface, zarf, policy-controller,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: goreleaser, spire-server, trivy, kargo, up, buf, dagger, melange, prometheus, cadvisor, telegraf, datadog-agent, tkn, kubescape, kaniko, docker-compose, aactl, grype, loki, crossplane, zot, syft, wolfictl, ko, ctop, buildkitd,...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: goreleaser, spire-server, trivy, kargo, up, buf, dagger, melange, prometheus, cadvisor, telegraf, datadog-agent, tkn, kubescape, kaniko, docker-compose, aactl, grype, loki, crossplane, zot, syft, wolfictl, ko, ctop, buildkitd,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, istio-pilot-agent, k9s, tekton-chains, thanos-operator, istio-pilot-discovery, trillian, karpenter, prometheus-node-exporter,...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: keda, temporal-server, trillian, amass, kube-bench, argo-workflows, telegraf, vault, ferretdb, k3s, kots, spicedb, caddy, kine, src,...

CVE-2024-21506 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datadog-agent,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: keda, gitsign, spire-server, terragrunt, fulcio, argo-workflows, kots, tekton-chains, flux-kustomize-controller, istio-pilot-discovery, oauth2-proxy, dex, sops, cloudflared, tkn, kubescape, aactl, vault, external-secrets-operator, cilium-envoy, falco, argo-cd,...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: keda, temporal-server, trillian, amass, kube-bench, argo-workflows, telegraf, vault, ferretdb, k3s, kots, spicedb, caddy, kine, src,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kaf, fuse-overlayfs-snapshotter, gitness, kubevela, tomcat, nri-prometheus, kubescape, kubernetes-csi-livenessprobe, kubewatch, helm, flux-notification-controller, aactl, hey, spark-operator, frp, node-problem-detector, envoy-ratelimit, grpcurl, dotnet, skaffold,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, gitsign, goreleaser, spire-server, terragrunt, gh, scorecard, snyk-cli, fulcio, terraform-provider-azurerm, tekton-chains, vault-csi-provider, k3d, flux-kustomize-controller, kargo, flux, rook, step-ca, timestamp-authority,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, docker-credential-acr-env, go-bindata, k9s, tekton-chains, wait-for-port, trillian, karpenter, go, smarter-device-manager, dockerize,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: bank-vaults, boring-registry, helm-docs, buf, kubevela, configmap-reload, nri-prometheus, tkn, libnvidia-container, flux-notification-controller, gops, litefs, shfmt, php-fpm_exporter, nerdctl, lazygit, tempo, vexctl, nri-couchbase, kpt, docker, gobuster,...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, gitsign, goreleaser, spire-server, terragrunt, gh, scorecard, snyk-cli, fulcio, terraform-provider-azurerm, tekton-chains, vault-csi-provider, k3d, flux-kustomize-controller, kargo, flux, rook, step-ca, timestamp-authority,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: influx, cass-operator, gobuster, cni-plugins, gke-gcloud-auth-plugin, goreleaser, scorecard, helm-push, protoc-gen-go-grpc, go-bindata, k3d, petname, kind, wait-for-port, kubernetes-dashboard-metrics-scraper, smarter-device-manager, render-template, configmap-reload,.....

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, thanos-operator, trillian, karpenter, prometheus-node-exporter, kubevela, kubernetes-csi-external-resizer, nri-prometheus, tkn, kubernetes-csi-livenessprobe,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, vault-k8s, boring-registry, gitness, istio-pilot-agent, docker-credential-acr-env, fq, tekton-chains, istio-pilot-discovery, trillian, prometheus-node-exporter, buf, dockerize, cadvisor, go-licenses, tkn, kubescape, kubewatch, nsc, helm, aactl,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, istio-pilot-agent, k9s, tekton-chains, thanos-operator, istio-pilot-discovery, trillian, karpenter, prometheus-node-exporter,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, goreleaser, spire-server, terragrunt, velero, trivy, boring-registry, restic, sqlpad, fulcio, argo-workflows, tekton-chains, flux-kustomize-controller, flux, rook, step-ca, timestamp-authority, gitlab-runner, flux-image-reflector-controller, up,...

GHSA-679V-HH23-H5JH vulnerabilities

Vulnerabilities for packages: metrics-server, kind,...

CVE-2023-39320 vulnerabilities

Vulnerabilities for packages:...

GHSA-RXV8-V965-V333 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21013 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21060 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21096 vulnerabilities

Vulnerabilities for packages:...

GHSA-8CPF-FXR6-4WPQ vulnerabilities

Vulnerabilities for packages:...