Some Dahua Ip Camera, Video Intercom, Ptz Dome Camera, Thermal Camera Devices Security Vulnerabilities

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: opentofu, buildkitd, prometheus-bind-exporter, terraform, kots, metacontroller, kpt, nginx-mainline, conftest, external-dns, pulumi-language-dotnet, flux-source-controller, tomcat, amass, istio-envoy, mc, aws-efs-csi-driver, kubernetes-csi-external-attacher,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: fulcio, filebeat, opentofu, buildkitd, prometheus-bind-exporter, terraform, timoni, kots, gcsfuse, karpenter, metacontroller, kpt, conftest, prometheus-pushgateway, external-dns, pulumi-language-dotnet, rclone, rekor, doppler-kubernetes-operator,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: gops, nri-nginx, filebeat, opentofu, buildkitd, prometheus-bind-exporter, vt-cli, terraform, shfmt, timoni, docker-cli, gcsfuse, dask-gateway, kpt, prometheus-pushgateway, mage, external-dns, sbom-scorecard, doppler-kubernetes-operator, nri-discovery-kubernetes,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: calico, kubernetes-csi-driver-hostpath, cluster-autoscaler, nodetaint, kubernetes-dns-node-cache, aws-ebs-csi-driver, kubernetes, node-feature-discovery, ip-masq-agent, local-static-provisioner,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: harbor-registry, timoni, docker-cli, minify, mods, sbom-scorecard, dockerize, paranoia, kube-bench, neuvector-sigstore-interface, prometheus-postgres-exporter, spegel, tekton-chains, thanos, nvidia-device-plugin, aactl, cadvisor, tkn, certificate-transparency,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: gops, fulcio, harbor-registry, grafana-rollout-operator, buildkitd, prometheus-bind-exporter, vt-cli, shfmt, timoni, mods, karpenter, metacontroller, dask-gateway, kpt, conftest, mage, external-dns, pulumi-language-dotnet, rclone, rekor, mongo-tools,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: gops, fulcio, harbor-registry, grafana-rollout-operator, buildkitd, prometheus-bind-exporter, vt-cli, shfmt, timoni, mods, karpenter, metacontroller, dask-gateway, kpt, conftest, mage, external-dns, pulumi-language-dotnet, rclone, rekor, mongo-tools,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: harbor-registry, timoni, minify, mods, sbom-scorecard, opa, dockerize, paranoia, kube-bench, neuvector-sigstore-interface, wgcf, prometheus-postgres-exporter, spegel, tekton-chains, thanos, nvidia-device-plugin, octo-sts, aactl, kube-vip, cadvisor, age, tkn,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: gops, cortex, cass-operator, wait-for-port, gke-gcloud-auth-plugin, gitlab-logger, prometheus-bind-exporter, render-template, docker-cli, nats, nsc, aws-flb-cloudwatch, sonobuoy, vertical-pod-autoscaler, cilium-envoy, go-bindata, mage, k3d, sbom-scorecard,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: fulcio, filebeat, opentofu, buildkitd, prometheus-bind-exporter, terraform, timoni, kots, gcsfuse, karpenter, metacontroller, kpt, conftest, prometheus-pushgateway, external-dns, pulumi-language-dotnet, rclone, rekor, doppler-kubernetes-operator,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: gops, nri-nginx, filebeat, opentofu, buildkitd, prometheus-bind-exporter, vt-cli, terraform, shfmt, timoni, docker-cli, gcsfuse, dask-gateway, kpt, prometheus-pushgateway, mage, external-dns, sbom-scorecard, doppler-kubernetes-operator, nri-discovery-kubernetes,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: gops, nri-nginx, filebeat, opentofu, buildkitd, prometheus-bind-exporter, vt-cli, terraform, shfmt, timoni, docker-cli, gcsfuse, dask-gateway, kpt, prometheus-pushgateway, mage, external-dns, sbom-scorecard, doppler-kubernetes-operator, nri-discovery-kubernetes,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: harbor-registry, timoni, docker-cli, minify, mods, sbom-scorecard, dockerize, paranoia, kube-bench, neuvector-sigstore-interface, prometheus-postgres-exporter, spegel, tekton-chains, thanos, nvidia-device-plugin, aactl, cadvisor, tkn, certificate-transparency,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: harbor-registry, timoni, minify, mods, sbom-scorecard, opa, dockerize, paranoia, kube-bench, neuvector-sigstore-interface, wgcf, prometheus-postgres-exporter, spegel, tekton-chains, thanos, nvidia-device-plugin, octo-sts, aactl, kube-vip, cadvisor, age, tkn,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: gops, nri-nginx, filebeat, opentofu, buildkitd, prometheus-bind-exporter, vt-cli, terraform, shfmt, timoni, docker-cli, gcsfuse, dask-gateway, kpt, prometheus-pushgateway, mage, external-dns, sbom-scorecard, doppler-kubernetes-operator, nri-discovery-kubernetes,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: gops, nri-nginx, filebeat, opentofu, buildkitd, prometheus-bind-exporter, vt-cli, terraform, shfmt, timoni, docker-cli, gcsfuse, dask-gateway, kpt, prometheus-pushgateway, mage, external-dns, sbom-scorecard, doppler-kubernetes-operator, nri-discovery-kubernetes,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: gops, nri-nginx, filebeat, opentofu, buildkitd, prometheus-bind-exporter, vt-cli, terraform, shfmt, timoni, docker-cli, gcsfuse, dask-gateway, kpt, prometheus-pushgateway, mage, external-dns, sbom-scorecard, doppler-kubernetes-operator, nri-discovery-kubernetes,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: gops, fulcio, harbor-registry, grafana-rollout-operator, buildkitd, prometheus-bind-exporter, vt-cli, shfmt, timoni, mods, karpenter, metacontroller, dask-gateway, kpt, conftest, mage, external-dns, pulumi-language-dotnet, rclone, rekor, mongo-tools,...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: calico, aws-efs-csi-driver, cluster-autoscaler, nodetaint, kubernetes-dns-node-cache, aws-ebs-csi-driver, prometheus-adapter, ip-masq-agent,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: calico, aws-efs-csi-driver, cluster-autoscaler, nodetaint, kubernetes-dns-node-cache, aws-ebs-csi-driver, prometheus-adapter, ip-masq-agent,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: opentofu, buildkitd, prometheus-bind-exporter, terraform, kots, metacontroller, kpt, nginx-mainline, conftest, external-dns, pulumi-language-dotnet, flux-source-controller, tomcat, amass, istio-envoy, mc, aws-efs-csi-driver, kubernetes-csi-external-attacher,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: gops, nri-nginx, filebeat, opentofu, buildkitd, prometheus-bind-exporter, vt-cli, terraform, shfmt, timoni, docker-cli, gcsfuse, dask-gateway, kpt, prometheus-pushgateway, mage, external-dns, sbom-scorecard, doppler-kubernetes-operator, nri-discovery-kubernetes,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: gops, nri-nginx, filebeat, opentofu, buildkitd, prometheus-bind-exporter, vt-cli, terraform, shfmt, timoni, docker-cli, gcsfuse, dask-gateway, kpt, prometheus-pushgateway, mage, external-dns, sbom-scorecard, doppler-kubernetes-operator, nri-discovery-kubernetes,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: gops, nri-nginx, filebeat, opentofu, buildkitd, prometheus-bind-exporter, vt-cli, terraform, shfmt, timoni, docker-cli, gcsfuse, dask-gateway, kpt, prometheus-pushgateway, mage, external-dns, sbom-scorecard, doppler-kubernetes-operator, nri-discovery-kubernetes,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: harbor-registry, timoni, minify, mods, sbom-scorecard, opa, dockerize, paranoia, kube-bench, neuvector-sigstore-interface, wgcf, prometheus-postgres-exporter, spegel, tekton-chains, thanos, nvidia-device-plugin, octo-sts, aactl, kube-vip, cadvisor, age, tkn,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: gops, cortex, cass-operator, wait-for-port, gke-gcloud-auth-plugin, gitlab-logger, prometheus-bind-exporter, render-template, docker-cli, nats, nsc, aws-flb-cloudwatch, sonobuoy, vertical-pod-autoscaler, cilium-envoy, go-bindata, mage, k3d, sbom-scorecard,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: gops, cortex, cass-operator, wait-for-port, gke-gcloud-auth-plugin, gitlab-logger, prometheus-bind-exporter, render-template, docker-cli, nats, nsc, aws-flb-cloudwatch, sonobuoy, vertical-pod-autoscaler, cilium-envoy, go-bindata, mage, k3d, sbom-scorecard,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: gops, cortex, cass-operator, wait-for-port, gke-gcloud-auth-plugin, gitlab-logger, prometheus-bind-exporter, render-template, docker-cli, nats, nsc, aws-flb-cloudwatch, sonobuoy, vertical-pod-autoscaler, cilium-envoy, go-bindata, mage, k3d, sbom-scorecard,...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: calico, kubernetes-csi-driver-hostpath, cluster-autoscaler, nodetaint, kubernetes-dns-node-cache, aws-ebs-csi-driver, kubernetes, node-feature-discovery, ip-masq-agent, local-static-provisioner,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: gops, fulcio, harbor-registry, grafana-rollout-operator, buildkitd, prometheus-bind-exporter, vt-cli, shfmt, timoni, mods, karpenter, metacontroller, dask-gateway, kpt, conftest, mage, external-dns, pulumi-language-dotnet, rclone, rekor, mongo-tools,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: harbor-registry, timoni, minify, mods, sbom-scorecard, opa, dockerize, paranoia, kube-bench, neuvector-sigstore-interface, wgcf, prometheus-postgres-exporter, spegel, tekton-chains, thanos, nvidia-device-plugin, octo-sts, aactl, kube-vip, cadvisor, age, tkn,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: gops, nri-nginx, filebeat, opentofu, buildkitd, prometheus-bind-exporter, vt-cli, terraform, shfmt, timoni, docker-cli, gcsfuse, dask-gateway, kpt, prometheus-pushgateway, mage, external-dns, sbom-scorecard, doppler-kubernetes-operator, nri-discovery-kubernetes,...

Mirai-like Botnet Targets Zyxel NAS Devices in Europe for DDoS Attacks

Beware, Zyxel customers, and keep your devices up to...

Virtuozzo Hybrid Infrastructure 6.2 (6.2.0-136)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute service, high availability of the management node, object storage management, networking, and monitoring. Additionally, this release delivers stability improvements and addresses issues found...

Friday Squid Blogging: New Squid Species

A new squid species--of the Gonatidae family--was discovered. The video shows her holding a brood of very large eggs. Research...

TEMU sued for being “dangerous malware” by Arkansas Attorney General

Chinese online shopping giant Temu is facing a lawsuit filed by State of Arkansas Attorney General Tim Griffin, alleging that the retailer's mobile app spies on users. “Temu purports to be an online shopping platform, but it is dangerous malware, surreptitiously granting itself access to...

Hashicorp Vault may expose sensitive log information in github.com/hashicorp/vault

Hashicorp Vault may expose sensitive log information in...

3 More Plugins Infected in WordPress.org Supply Chain Attack Due to Compromised Developer Passwords

Update #1: As of 12:36PM EST, another plugin has been infected. We've updated the list below to include this fourth plugin and the plugins team has been notified. Update #2: As of 2:20 PM EST, two more plugins appear to have malicious commits, however, the releases have not officially been made...

New SnailLoad Attack Exploits Network Latency to Spy on Users' Web Activities

A group of security researchers from the Graz University of Technology have demonstrated a new side-channel attack known as SnailLoad that could be used to remotely infer a user's web activity. "SnailLoad exploits a bottleneck present on all Internet connections," the researchers said in a study...

CVE-2024-5424

The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘galleryID’ and 'className' parameters in all versions up to, and including, 3.2.1 due to...

CVE-2024-5424

The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘galleryID’ and 'className' parameters in all versions up to, and including, 3.2.1 due to...

CVE-2024-5424 Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via galleryID and className Parameters

The Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘galleryID’ and 'className' parameters in all versions up to, and including, 3.2.1 due to...

Researchers Warn of Flaws in Widely Used Industrial Gas Analysis Equipment

Multiple security flaws have been disclosed in Emerson Rosemount gas chromatographs that could be exploited by malicious actors to obtain sensitive information, induce a denial-of-service (DoS) condition, and even execute arbitrary commands. The flaws impact GC370XA, GC700XA, and GC1500XA and...

CVE-2024-39350

A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500....

CVE-2024-39350

A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500....

CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data...

CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data...

CVE-2024-39350

A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500....

CVE-2024-39350

A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500....

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data...