CVE-2024-28248 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GHSA-V6Q2-4QR3-5CW6 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GHSA-J89H-QRVR-XC36 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GHSA-68MJ-9PJQ-MC85 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

[SECURITY] Fedora 40 Update: vecmath1.2-1.14-36.fc40

This is an unofficial implementation java source code of the javax.vecmath package specified in the JavaTM 3D API 1.2 . The package includes classes for 3-space vector/point, 4-space vector, 4x4, 3x3 matrix, quaternion, axis-angle combination and etc. which are often utilized for computer graphic...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: temporal-server-fips, kube-bench-fips, argo-workflows-fips, wavefront-collector-for-kubernetes, temporal-server, kube-bench, argo-workflows, src, spicedb, caddy, caddy-fips, amass, trillian-fips, kots, kine, falcosidekick-fips, k3s, ferretdb, step, trillian, step-ca...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: step-ca, ferretdb, kube-bench, kots, spicedb, src, step, k3s, temporal-server, trillian, kine, argo-workflows, caddy, amass...

BIT-GOLANG-2020-15586

Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time...

Jenkins Build Monitor View Plugin Security Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A security vulnerability...

GHSA-R3W7-MFPM-C2VW vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: temporal-server-fips, kube-bench-fips, argo-workflows-fips, wavefront-collector-for-kubernetes, temporal-server, kube-bench, argo-workflows, src, spicedb, caddy, caddy-fips, amass, trillian-fips, kots, kine, falcosidekick-fips, k3s, ferretdb, step, trillian, step-ca...

CVE-2024-2048 vulnerabilities

Vulnerabilities for packages: k3d...

PT-2024-21050 · Cilium · Cilium

Name of the Vulnerable Software and Affected Versions: Cilium versions 1.14 through 1.14.6 Description: The issue affects Cilium users who are using CRDs to store Cilium state and Wireguard transparent encryption. Traffic to and from the Ingress and health endpoints is not encrypted. This issue...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: flux-helm-controller, chartmuseum, zarf, kots, cilium-cli, kubescape, trivy, up, eksctl, kubevela, k9s, k8sgpt, flux-source-controller, zot, helm-push, helm-operator...

SSRF (Server-Side Request Forgery) org.apache.xmlgraphics:batik-bridge Dependency in Jira Software Data Center and Server

This High severity org.apache.xmlgraphics:batik-bridge Dependency vulnerability was introduced in versions 8.20.0, 8.22.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, and 9.6.0 of Jira Software Data Center and Server. This org.apache.xmlgraphics:batik-bridge Dependency vulnerability, with a CVSS...

PX4 Drone Autopilot Security Vulnerability

PX4 Drone Autopilot is a PX4 Drone Autopilot for Drones open source. A security vulnerability exists in PX4 Autopilot version 1.14 and earlier. An attacker exploited the vulnerability to send a drone on an unexpected mission...

CVE-2023-51807

CVE-2023-51807 is an XSS vulnerability in OFCMS v1.14. A remote attacker can obtain sensitive information by sending a crafted payload to the title addition component. CVSSv3.1 base score 5.4 (Network, Low attack complexity, Privileges Required: Low, User Interaction: Required, Scope: Changed; Co...

Rocky Linux 8 : nginx:1.14 (RLSA-2019:2799)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:2799 advisory. - Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, timoni, gitness, falcoctl, wavefront-collector-for-kubernetes, aactl, grpcurl, up, kubernetes-csi-livenessprobe-fips, pulumi-language-yaml, dex, dynamic-localpv-provisioner, kaf, dex-k8s-authenticator, prometheus-operator,...

OESA-2023-1651 batik security update

Batik is an inline templating engine for CoffeeScript, inspired by CoffeeKup, that lets you write your template directly as a CoffeeScript function. Security Fixes: Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protoco...