VGPU Software (guest Driver - Windows), NVIDIA Cloud Gaming (guest Driver - Windows) Security Vulnerabilities

CVE-2024-5642

CPython 3.9 and earlier doesn't disallow configuring an empty list ("[]") for SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vulnerability is of low severity due to...

CVE-2024-2973

An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device. Only routers or conductors that are running in....

CVE-2024-2973

An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router or conductor running with a redundant peer allows a network based attacker to bypass authentication and take full control of the device. Only routers or conductors that are running in....

CVE-2024-22272

VMware Cloud Director contains an Improper Privilege Management vulnerability. An authenticated tenant administrator for a given organization within VMware Cloud Director may be able to accidentally disable their organization leading to a Denial of Service for active sessions within their own...

CVE-2024-22272

VMware Cloud Director contains an Improper Privilege Management vulnerability. An authenticated tenant administrator for a given organization within VMware Cloud Director may be able to accidentally disable their organization leading to a Denial of Service for active sessions within their own...

CVE-2024-22276

VMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information vulnerability. A malicious actor with adjacent access to web/proxy server logging may be able to obtain sensitive information from URLs that are...

CVE-2024-22276

VMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information vulnerability. A malicious actor with adjacent access to web/proxy server logging may be able to obtain sensitive information from URLs that are...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kind, cosign, terraform, kots, flux-notification-controller, kubernetes-csi-node-driver-registrar, gitness, frp, argo-cd, pulumi-language-yaml, calico, oauth2-proxy, gitlab-runner, kubernetes-csi-livenessprobe, flux-helm-controller, kyverno, kaf,...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: calico, argo-cd, cluster-autoscaler,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: spark-operator, calico, kubernetes-csi-driver-hostpath, local-static-provisioner, cluster-autoscaler, ip-masq-agent, aws-ebs-csi-driver, kubernetes, kubernetes-dns-node-cache, node-feature-discovery,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: skaffold, k9s, zarf, docker, telegraf, kots, kaniko, skopeo, wolfictl, zot, buildkitd, kubescape, nvidia-device-plugin, runc, kubernetes, trivy, datadog-agent, ctop, nerdctl, newrelic-infrastructure-agent, grype, k3s, ingress-nginx-controller, syft, cadvisor,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, rabbitmq-cluster-operator, terraform, cert-exporter, k8ssandra-operator, aws-flb-kinesis, filebeat, cluster-api-controller, nri-nginx, q, cass-operator, yq, kube-state-metrics, go-md2man, flannel-cni-plugin, kubernetes-csi-node-driver-registrar,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, cosign, cert-exporter, k8ssandra-operator, spire-server, aws-flb-kinesis, filebeat, kots, terraform, cass-operator, flux-notification-controller, kargo, kube-state-metrics, nri-discovery-kubernetes, kubernetes-csi-node-driver-registrar,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: kind, cosign, cert-exporter, secrets-store-csi-driver-provider-aws, q, flux-notification-controller, kube-state-metrics, go-md2man, snyk-cli, tempo, kafka_exporter, gitness, newrelic-prometheus-configurator, frp, pulumi-language-yaml, cert-manager-webhook-pdns,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: kind, cosign, cert-exporter, secrets-store-csi-driver-provider-aws, q, flux-notification-controller, kube-state-metrics, go-md2man, snyk-cli, tempo, kafka_exporter, gitness, newrelic-prometheus-configurator, frp, pulumi-language-yaml, cert-manager-webhook-pdns,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, terraform, q, cass-operator, nri-discovery-kubernetes, kafka_exporter, frp, cert-manager-webhook-pdns, paranoia, buf, crossplane-provider-gcp, falcosidekick, nri-apache, gcsfuse, vcluster, kubewatch, shfmt, pulumi-language-java,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: flux, pulumi, py3-cassandra-medusa, velero, zarf, cosign, spire-server, filebeat, fulcio, falcoctl, grafana, secrets-store-csi-driver-provider-azure, telegraf, traefik, grafana-agent-operator, tempo, flux-kustomize-controller, ksops, step, up, airflow, zot, k8sgpt,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, terraform, q, cass-operator, nri-discovery-kubernetes, kafka_exporter, frp, cert-manager-webhook-pdns, paranoia, kube-rbac-proxy, buf, crossplane-provider-gcp, falcosidekick, nri-apache, gcsfuse, kubewatch, shfmt, pulumi-language-java,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: cosign, terraform, spire-server, kots, kube-state-metrics, gitness, frp, argo-cd, zot, certificate-transparency, prometheus-statsd-exporter, calico, kube-rbac-proxy, oauth2-proxy, gitlab-runner, mongo-tools, flux-helm-controller, buf, kyverno, kaf, gitsign,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: cosign, terraform, kots, flux-notification-controller, yq, kube-state-metrics, kubernetes-csi-node-driver-registrar, gitness, frp, argo-cd, pulumi-language-yaml, zot, prometheus-statsd-exporter, oauth2-proxy, gitlab-runner, kubernetes-csi-livenessprobe, dive,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: rabbitmq-cluster-operator, cosign, cert-exporter, k8ssandra-operator, spire-server, aws-flb-kinesis, filebeat, kots, terraform, cass-operator, flux-notification-controller, kargo, kube-state-metrics, nri-discovery-kubernetes, kubernetes-csi-node-driver-registrar,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, rabbitmq-cluster-operator, terraform, cert-exporter, k8ssandra-operator, aws-flb-kinesis, filebeat, cluster-api-controller, nri-nginx, q, cass-operator, yq, kube-state-metrics, go-md2man, flannel-cni-plugin, kubernetes-csi-node-driver-registrar,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux, pulumi, py3-cassandra-medusa, velero, zarf, cosign, spire-server, filebeat, fulcio, falcoctl, grafana, secrets-store-csi-driver-provider-azure, telegraf, traefik, grafana-agent-operator, tempo, flux-kustomize-controller, ksops, step, up, airflow, zot, k8sgpt,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, rabbitmq-cluster-operator, terraform, cert-exporter, k8ssandra-operator, aws-flb-kinesis, filebeat, cluster-api-controller, nri-nginx, q, cass-operator, yq, kube-state-metrics, go-md2man, flannel-cni-plugin, kubernetes-csi-node-driver-registrar,...

GHSA-Q78C-GWQW-JCMC vulnerabilities

Vulnerabilities for packages: calico, argo-cd, cluster-autoscaler,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, rabbitmq-cluster-operator, terraform, cert-exporter, k8ssandra-operator, aws-flb-kinesis, filebeat, cluster-api-controller, nri-nginx, q, cass-operator, yq, kube-state-metrics, go-md2man, flannel-cni-plugin, kubernetes-csi-node-driver-registrar,...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: docker-compose, argo-cd, kubernetes, temporal, keda, containerd, cri-tools, kine, kubernetes-csi-external-resizer, kubevela, kubescape, kyverno, k3s, aws-ebs-csi-driver, cert-manager, envoy-ratelimit,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: prometheus-adapter, spark-operator, calico, cluster-autoscaler, ip-masq-agent, aws-efs-csi-driver, aws-ebs-csi-driver, kubernetes-dns-node-cache,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, terraform, q, cass-operator, nri-discovery-kubernetes, kafka_exporter, frp, cert-manager-webhook-pdns, paranoia, kube-rbac-proxy, buf, crossplane-provider-gcp, falcosidekick, nri-apache, gcsfuse, kubewatch, shfmt, pulumi-language-java,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: kind, cosign, cert-exporter, secrets-store-csi-driver-provider-aws, q, flux-notification-controller, kube-state-metrics, go-md2man, snyk-cli, tempo, kafka_exporter, gitness, newrelic-prometheus-configurator, frp, pulumi-language-yaml, cert-manager-webhook-pdns,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, terraform, q, cass-operator, nri-discovery-kubernetes, kafka_exporter, frp, cert-manager-webhook-pdns, paranoia, buf, crossplane-provider-gcp, falcosidekick, nri-apache, gcsfuse, vcluster, kubewatch, shfmt, pulumi-language-java,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kind, cosign, terraform, kots, flux-notification-controller, yq, kube-state-metrics, kubernetes-csi-node-driver-registrar, gitness, frp, argo-cd, pulumi-language-yaml, zot, prometheus-statsd-exporter, oauth2-proxy, gitlab-runner, kubernetes-csi-livenessprobe, dive,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, rabbitmq-cluster-operator, terraform, cert-exporter, k8ssandra-operator, aws-flb-kinesis, filebeat, cluster-api-controller, nri-nginx, q, cass-operator, yq, kube-state-metrics, go-md2man, flannel-cni-plugin, kubernetes-csi-node-driver-registrar,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, rabbitmq-cluster-operator, terraform, cert-exporter, k8ssandra-operator, aws-flb-kinesis, filebeat, cluster-api-controller, nri-nginx, q, cass-operator, yq, kube-state-metrics, go-md2man, flannel-cni-plugin, kubernetes-csi-node-driver-registrar,...

CVE-2023-2878 vulnerabilities

Vulnerabilities for packages: vault-csi-provider,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: docker-compose, argo-cd, kubernetes, temporal, keda, containerd, cri-tools, kine, kubernetes-csi-external-resizer, kubevela, kubescape, kyverno, k3s, aws-ebs-csi-driver, cert-manager, envoy-ratelimit,...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, spark-operator, calico, cluster-autoscaler, ip-masq-agent, aws-efs-csi-driver, aws-ebs-csi-driver, kubernetes-dns-node-cache,...

GHSA-G82W-58JF-GCXX vulnerabilities

Vulnerabilities for packages: vault-csi-provider,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, terraform, q, cass-operator, nri-discovery-kubernetes, kafka_exporter, frp, cert-manager-webhook-pdns, paranoia, buf, crossplane-provider-gcp, falcosidekick, nri-apache, gcsfuse, vcluster, kubewatch, shfmt, pulumi-language-java,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: cosign, terraform, spire-server, kots, kube-state-metrics, gitness, frp, argo-cd, zot, certificate-transparency, prometheus-statsd-exporter, calico, kube-rbac-proxy, oauth2-proxy, gitlab-runner, mongo-tools, flux-helm-controller, buf, kyverno, kaf, gitsign,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: cosign, terraform, kots, flux-notification-controller, yq, kube-state-metrics, kubernetes-csi-node-driver-registrar, gitness, frp, argo-cd, pulumi-language-yaml, zot, prometheus-statsd-exporter, oauth2-proxy, gitlab-runner, kubernetes-csi-livenessprobe, dive,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kind, cosign, terraform, kots, flux-notification-controller, yq, kube-state-metrics, kubernetes-csi-node-driver-registrar, gitness, frp, argo-cd, pulumi-language-yaml, zot, prometheus-statsd-exporter, oauth2-proxy, gitlab-runner, kubernetes-csi-livenessprobe, dive,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, pulumi, weaviate, prometheus-adapter, dex, spark-operator, cosign, terraform-provider-aws, terraform, telegraf, kots, flux-notification-controller, pulumi-kubernetes-operator, vault-csi-provider, helm, flux-kustomize-controller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kind, cosign, terraform, kots, flux-notification-controller, kubernetes-csi-node-driver-registrar, gitness, frp, argo-cd, pulumi-language-yaml, calico, oauth2-proxy, gitlab-runner, kubernetes-csi-livenessprobe, flux-helm-controller, kyverno, kaf,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, rabbitmq-cluster-operator, terraform, cert-exporter, k8ssandra-operator, aws-flb-kinesis, filebeat, cluster-api-controller, nri-nginx, q, cass-operator, yq, kube-state-metrics, go-md2man, flannel-cni-plugin, kubernetes-csi-node-driver-registrar,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, rabbitmq-cluster-operator, terraform, cert-exporter, k8ssandra-operator, aws-flb-kinesis, filebeat, cluster-api-controller, nri-nginx, q, cass-operator, yq, kube-state-metrics, go-md2man, flannel-cni-plugin, kubernetes-csi-node-driver-registrar,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, rabbitmq-cluster-operator, terraform, cert-exporter, k8ssandra-operator, aws-flb-kinesis, filebeat, cluster-api-controller, nri-nginx, q, cass-operator, yq, kube-state-metrics, go-md2man, flannel-cni-plugin, kubernetes-csi-node-driver-registrar,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: kind, cosign, cert-exporter, secrets-store-csi-driver-provider-aws, q, flux-notification-controller, kube-state-metrics, go-md2man, snyk-cli, tempo, kafka_exporter, gitness, newrelic-prometheus-configurator, frp, pulumi-language-yaml, cert-manager-webhook-pdns,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, terraform, q, cass-operator, nri-discovery-kubernetes, kafka_exporter, frp, cert-manager-webhook-pdns, paranoia, buf, crossplane-provider-gcp, falcosidekick, nri-apache, gcsfuse, vcluster, kubewatch, shfmt, pulumi-language-java,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: kind, nri-mysql, rabbitmq-cluster-operator, terraform, cert-exporter, k8ssandra-operator, aws-flb-kinesis, filebeat, cluster-api-controller, nri-nginx, q, cass-operator, yq, kube-state-metrics, go-md2man, flannel-cni-plugin, kubernetes-csi-node-driver-registrar,...