aedes 安全漏洞

aedes is an open source graphical user interface GUI based tool from moscajs. A security vulnerability exists in aedes version 0.51.2, which can lead to a denial of service by an attacker with a crafted request...

PT-2024-32986 · Aedes · Aedes

Name of the Vulnerable Software and Affected Versions: aedes version 0.51.2 Description: An issue in aedes allows attackers to cause a Denial of Service DoS via a crafted request. Recommendations: For aedes version 0.51.2, consider restricting access to the service to minimize the risk of...

CVE-2024-35192

CVE-2024-35192 affects Trivy prior to 0.51.2. Triggering image scans from a crafted malicious registry could leak credentials for registries (e.g., AWS ECR, Google Artifact/Container Registry, Azure ACR) to the user running Trivy. The tokens could be used to push/pull images from registries the u...

PT-2024-26372 · Docker +3 · Docker +3

Name of the Vulnerable Software and Affected Versions: Trivy versions prior to 0.51.2 Description: A malicious actor can trigger Trivy to leak credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registry AC...

Aqua Security Trivy 安全漏洞

Aqua Security Trivy is a comprehensive and versatile security scanner from Aqua Security. A security vulnerability exists in Aqua Security Trivy versions prior to 0.51.2, which stems from a potential leak of registry credentials when scanning images from a malicious registry...