BIT-APPSMITH-2022-38299

An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: supercronic, ip-masq-agent, flux-kustomize-controller, ctop, terraform-provider-sendgrid, prometheus-adapter, nri-discovery-kubernetes, kyverno-policy-reporter-ui, secrets-store-csi-driver-provider-gcp, step-ca, cilium-cli, thanos, prometheus-pushgateway,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, k8sgpt, temporal-server, kube-fluentd-operator, velero, doppler-kubernetes-operator, tkn, gh, slsa-verifier, temporal-ui-server-fips, prometheus-alertmanager-fips, secrets-store-csi-driver-provider-aws, kube-logging-logging-operator, hubbl...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: ferretdb, k8sgpt, hubble-ui-backend-fips, temporal-server, velero, doppler-kubernetes-operator, go-md2man, gh, slsa-verifier, fq, nri-haproxy, dockerize-fips, kubernetes-csi-external-resizer, rabbitmq-cluster-operator, cortex, prometheus-alertmanager-fips,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: supercronic, ip-masq-agent, q, cue, render-template, ctop, prometheus-adapter, nri-discovery-kubernetes, secrets-store-csi-driver-provider-gcp, thanos, prometheus-pushgateway, golangci-lint, gh, vault-k8s, local-path-provisioner,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-s3, k8sgpt, temporal-server, kube-fluentd-operator, velero, doppler-kubernetes-operator, tkn, gh, slsa-verifier, temporal-ui-server-fips, prometheus-alertmanager-fips, secrets-store-csi-driver-provider-aws, kube-logging-logging-operator, hubbl...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: supercronic, ip-masq-agent, q, cue, render-template, ctop, prometheus-adapter, nri-discovery-kubernetes, secrets-store-csi-driver-provider-gcp, thanos, prometheus-pushgateway, golangci-lint, gh, vault-k8s, local-path-provisioner,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: ferretdb, k8sgpt, hubble-ui-backend-fips, temporal-server, velero, doppler-kubernetes-operator, go-md2man, gh, slsa-verifier, fq, nri-haproxy, dockerize-fips, kubernetes-csi-external-resizer, rabbitmq-cluster-operator, cortex, prometheus-alertmanager-fips,...

Mozilla: two aws access key and secret key and database username and password exposed

A security vulnerability was identified in a Docker image hosted on Docker Hub. The image, associated with Mozilla's Common Voice project, was found to contain exposed AWS access keys, AWS secret keys, and database credentials. These sensitive credentials were discovered within the file...

openSUSE: Security Advisory for terraform (SUSE-SU-2023:3589-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for aws (SUSE-SU-2023:0423-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2024-4.0-0575

Updates of 'linux', 'linux-secure', 'linux-aws', 'linux-rt' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-3.0-0734

Updates of 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

Ubuntu: Security Advisory (USN-6653-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important Photon OS Security Update - PHSA-2024-4.0-0574

Updates of 'c-ares', 'linux-rt', 'linux-aws', 'apache-tomcat', 'linux-secure' packages of Photon OS have been released...

USN-6653-2: Linux kernel (AWS) vulnerabilities

It was discovered that a race condition existed in the ATM Asynchronous Transfer Mode subsystem of the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-51780 It was...

Veeam Backup for AWS Private Network Deployment Automation

Purpose This article provides information about Veeam Backup for AWS support for private deployment mode. It will explain how to use the attached script to configure network settings for buckets used as repositories and workers used for backups. To learn more about implementing Private Deployment...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel (AWS) vulnerabilities (USN-6653-2)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6653-2 advisory. It was discovered that a race condition existed in the ATM Asynchronous Transfer Mode subsystem of the Linux kernel, leading to a...

CVE-2024-0455 SSRF on AWS deployed instances of AnythingLLM via /metadata

The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level manager, admin, and when in single user could put in the URL http://169.254.169.254/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance which is a special IP and URL th...

CVE-2024-0455 SSRF on AWS deployed instances of AnythingLLM via /metadata

The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level manager, admin, and when in single user could put in the URL http://169.254.169.254/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance which is a special IP and URL th...