VGPU Software (guest Driver) - Linux, NVIDIA Cloud Gaming (guest Driver) Security Vulnerabilities

Exploit for CVE-2024-6387

OpenSSH CVE-2024-6387 A vulnerability (CVE-2024-6387) has...

How MFA Failures are Fueling a 500% Surge in Ransomware Losses

The cybersecurity threat landscape has witnessed a dramatic and alarming rise in the average ransomware payment, an increase exceeding 500%. Sophos, a global leader in cybersecurity, revealed in its annual "State of Ransomware 2024" report that the average ransom payment has increased 500% in the.....

New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data

Modern CPUs from Intel, including Raptor Lake and Alder Lake, have been found vulnerable to a new side-channel attack that could be exploited to leak sensitive information from the processors. The attack, codenamed Indirector by security researchers Luyi Li, Hosein Yavarzadeh, and Dean Tullsen,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, dynamic-localpv-provisioner, atlantis, cortex, gobuster, kpt, ingress-nginx-controller, prometheus, spark-operator, hey, kubernetes-csi-livenessprobe, terraform, envoy-ratelimit, coredns, node-problem-detector, aws-efs-csi-driver,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: k3d, datadog-agent, skopeo, runc, zot, nerdctl, skaffold, ingress-nginx-controller, kots, telegraf, syft, newrelic-infrastructure-agent, k3s, nvidia-device-plugin, kaniko, cadvisor, ctop, buildkitd, kubernetes, docker, wolfictl, zarf, k9s, grype, trivy,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, prometheus-stackdriver-exporter, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter,....

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, local-static-provisioner, spark-operator, calico, ip-masq-agent, node-feature-discovery, aws-ebs-csi-driver, nodetaint, cluster-autoscaler, kubernetes,...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, cluster-autoscaler, calico,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, eksctl, terragrunt, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, spark-operator, influx, terraform, cadvisor, ytt,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, helm-push, prometheus-stackdriver-exporter, regclient, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, neuvector-scanner, oras, cortex, overmind, mockery, extism, runc, kpt, docker-credential-gcr,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, helm-push, prometheus-stackdriver-exporter, regclient, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, neuvector-scanner, oras, cortex, overmind, mockery, extism, runc, kpt, docker-credential-gcr,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, terragrunt, extism, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, influx, hey, terraform, cadvisor, ctop, ytt, nfs-subdir-external-provisioner,....

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: k3d, prometheus-stackdriver-exporter, actions-runner-controller, helm-push, dynamic-localpv-provisioner, trillian, skopeo, atlantis, eksctl, cortex, kubeflow-pipelines, prometheus-postgres-exporter, terragrunt, istio-cni, gobuster,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, prometheus-stackdriver-exporter, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter,....

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-Q78C-GWQW-JCMC vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, cluster-autoscaler, calico,...

CVE-2022-3162 affecting package kube-vip-cloud-provider 0.0.2-17

CVE-2022-3162 affecting package kube-vip-cloud-provider 0.0.2-17. No patch is available...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: traefik, flux, opentelemetry-collector-contrib, fulcio, cosign, fluent-bit-plugin-loki, py3-cassandra-medusa, teleport, py3-azure-identity, flux-image-reflector-controller, hugo, tekton-chains, cortex, grafana, terragrunt, timestamp-authority, guac, airflow, rook,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: traefik, flux, opentelemetry-collector-contrib, fulcio, cosign, fluent-bit-plugin-loki, py3-cassandra-medusa, teleport, py3-azure-identity, flux-image-reflector-controller, hugo, tekton-chains, cortex, grafana, terragrunt, timestamp-authority, guac, airflow, rook,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: k3d, prometheus-stackdriver-exporter, dynamic-localpv-provisioner, trillian, chartmuseum, prometheus-postgres-exporter, runc, gobuster, kpt, kubernetes-csi-external-provisioner, crossplane-provider-azure, prometheus, kube-fluentd-operator, spark-operator,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, eksctl, terragrunt, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, spark-operator, influx, terraform, cadvisor, ytt,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, terragrunt, extism, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, influx, hey, terraform, cadvisor, ctop, ytt, nfs-subdir-external-provisioner,....

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: kubernetes, containerd, kubernetes-csi-external-resizer, kubevela, docker-compose, k3s, kyverno, temporal-server, temporal, kine, envoy-ratelimit, keda, cert-manager, cri-tools, argo-cd, aws-ebs-csi-driver,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kubernetes, containerd, kubernetes-csi-external-resizer, kubevela, docker-compose, k3s, kyverno, temporal-server, temporal, kine, envoy-ratelimit, keda, cert-manager, cri-tools, argo-cd, aws-ebs-csi-driver,...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, spark-operator, prometheus-adapter, calico, ip-masq-agent, aws-efs-csi-driver, aws-ebs-csi-driver, nodetaint,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, spark-operator, prometheus-adapter, calico, ip-masq-agent, aws-efs-csi-driver, aws-ebs-csi-driver, nodetaint,...

CVE-2023-2878 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, helm-push, prometheus-stackdriver-exporter, regclient, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, neuvector-scanner, oras, cortex, overmind, mockery, extism, runc, kpt, docker-credential-gcr,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13

CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13. A patched version of the package is...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, prometheus-stackdriver-exporter, dynamic-localpv-provisioner, trillian, chartmuseum, atlantis, prometheus-postgres-exporter, runc, istio-cni, gobuster, kpt, kubernetes-csi-external-provisioner, crossplane-provider-azure, prometheus,...

GHSA-G82W-58JF-GCXX vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, terragrunt, extism, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, influx, hey, terraform, cadvisor, ctop, ytt, nfs-subdir-external-provisioner,....

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: k3d, prometheus-stackdriver-exporter, dynamic-localpv-provisioner, trillian, chartmuseum, prometheus-postgres-exporter, runc, gobuster, kpt, kubernetes-csi-external-provisioner, crossplane-provider-azure, prometheus, kube-fluentd-operator, spark-operator,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: k3d, prometheus-stackdriver-exporter, actions-runner-controller, helm-push, dynamic-localpv-provisioner, trillian, skopeo, atlantis, eksctl, cortex, kubeflow-pipelines, prometheus-postgres-exporter, terragrunt, istio-cni, gobuster,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, prometheus-stackdriver-exporter, dynamic-localpv-provisioner, trillian, chartmuseum, atlantis, prometheus-postgres-exporter, runc, istio-cni, gobuster, kpt, kubernetes-csi-external-provisioner, crossplane-provider-azure, prometheus,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: falco, k3d, prometheus-stackdriver-exporter, cosign, dynamic-localpv-provisioner, metrics-server, dgraph, helm, cortex, oauth2-proxy, cilium-envoy, kubernetes-csi-node-driver-registrar, thanos, gatekeeper, kubevela, secrets-store-csi-driver,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, dynamic-localpv-provisioner, atlantis, cortex, gobuster, kpt, ingress-nginx-controller, prometheus, spark-operator, hey, kubernetes-csi-livenessprobe, terraform, envoy-ratelimit, coredns, node-problem-detector, aws-efs-csi-driver,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, helm-push, prometheus-stackdriver-exporter, regclient, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, neuvector-scanner, oras, cortex, overmind, mockery, extism, runc, kpt, docker-credential-gcr,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, terragrunt, extism, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, influx, hey, terraform, cadvisor, ctop, ytt, nfs-subdir-external-provisioner,....

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, local-static-provisioner, spark-operator, calico, ip-masq-agent, node-feature-discovery, aws-ebs-csi-driver, nodetaint, cluster-autoscaler, kubernetes,...

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: k3d, datadog-agent, skopeo, runc, zot, nerdctl, skaffold, ingress-nginx-controller, kots, telegraf, syft, newrelic-infrastructure-agent, k3s, nvidia-device-plugin, kaniko, cadvisor, ctop, buildkitd, kubernetes, docker, wolfictl, zarf, k9s, grype, trivy,...