CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1

CVE-2023-3978 affecting package prometheus-adapter for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-3978 affecting package vitess for versions less than 17.0.7-1

CVE-2023-3978 affecting package vitess for versions less than 17.0.7-1. An upgraded version of the package is available that resolves this issue...

CBL Mariner 2.0 Security Update: cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter (CVE-2023-3978)

The version of cert-manager / cni-plugins / kubevirt / multus / packer / prometheus-adapter installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3978 advisory. - Text nodes not in the HTML namespace ar...

CGA-3978-P594-95VW

Bulletin has no description...

WordPress Jitsi Shortcode Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)

Software Jitsi Shortcode Type Plugin Vulnerable versions = 0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3978 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4ddc2b03e91f Credits Bob Matyas Required privileg...

Fedora 40 : xq (2024-e9ca3462aa)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e9ca3462aa advisory. Automatic update for xq-1.2.4-2.fc40. Changelog Sun Feb 11 2024 Maxwell G - 1.2.4-2 - Rebuild for golang 1.22.0 Sun Feb 11 2024 Mikel Olasagasti...

Fedora 40 : gh (2023-684eb03db0)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-684eb03db0 advisory. Automatic update for gh-2.33.0-1.fc40. Changelog Wed Aug 23 2023 Mikel Olasagasti Uranga - 2.33.0-1 - Update to 2.33.0 - Closes rhbz2233559 rhbz2229593 Tenab...

Fedora 40 : golang-github-onsi-ginkgo-2 (2023-c4b597d917)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c4b597d917 advisory. Automatic update for golang-github-onsi-ginkgo-2-2.12.1-1.fc40. Changelog Sun Sep 24 2023 Mikel Olasagasti Uranga - 2.12.1-1 - Update to 2.12.1 - Closes...

Fedora 40 : caddy (2023-57b1499122)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-57b1499122 advisory. Automatic update for caddy-2.7.4-1.fc40. Changelog Thu Aug 17 2023 Carl George - 2.7.4-1 - Update to version 2.7.4, resolves rhbz2232696 - Fix CVE-2023-3978,...

Fedora 40 : rclone (2023-ff1e594f3d)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ff1e594f3d advisory. Automatic update for rclone-1.64.0-1.fc40. Changelog Thu Oct 12 2023 Mikel Olasagasti Uranga - 1.64.0-1 - Update to 1.64.0 - Closes rhbz2238581...

CVE-2023-3978 affecting package kubevirt for versions less than 1.2.0-1

CVE-2023-3978 affecting package kubevirt for versions less than 1.2.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-3978 affecting package telegraf for versions less than 1.29.4-1

CVE-2023-3978 affecting package telegraf for versions less than 1.29.4-1. An upgraded version of the package is available that resolves this issue...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.14.14 packages and security update

Red Hat OpenShift Container Platform release 4.14.14 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Critical: Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security and extras update

Red Hat OpenShift Container Platform release 4.15.0 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...

RHEL 8 / 9 : OpenShift Container Platform 4.14.14 (RHSA-2024:0944)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0944 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

Medium: containerd

Issue Overview: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A malicious HTTP client can further exploit this to cause a server to automatically read a large amount of da...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.48 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.48 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Amazon Linux 2 : ecs-init (ALASECS-2024-031)

The version of ecs-init installed on the remote host is prior to 1.79.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2024-031 advisory. Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This...

Medium: ecs-init

Issue Overview: Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack. CVE-2023-3978 Affected Packages: ecs-init Issue Correction: Run dnf update ecs-init --releasever 2023.3.20240108 or dnf update...

Medium: ecs-init

Issue Overview: Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack. CVE-2023-3978 Affected Packages: ecs-init Issue Correction: Run dnf update ecs-init --releasever 2023.3.20240108 to update you...