648 matches found
[SECURITY] Fedora 36 Update: pack-0.29.0~rc1-1.fc36
pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...
[SECURITY] Fedora 37 Update: pack-0.29.0~rc1-1.fc37
pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...
Shift left with Wiz Guardrails: New Wiz Admission Controller capabilities enable security policy checks at deployment time
Wiz CLI and Wiz Admission Controller enable developers to leverage a single security policy throughout the software pipeline for cloud-native environments...
Gain flexibility and scale with a cloud-native DLP solution
We’re living in a seismic era for data security. Chief information security officers CISOs have to contend with a digital landscape that seems to shift daily as more organizations move to remote and hybrid work, redrawing the boundaries for how data is used and shared. The cloud has enabled...
Gain flexibility and scale with a cloud-native DLP solution
We’re living in a seismic era for data security. Chief information security officers CISOs have to contend with a digital landscape that seems to shift daily as more organizations move to remote and hybrid work, redrawing the boundaries for how data is used and shared. The cloud has enabled...
[SECURITY] Fedora 38 Update: pack-0.29.0~rc1-1.fc38
pack is a CLI implementation of the Platform Interface Specification for Cloud Native Buildpacks...
Fedora: Security Advisory for pack (FEDORA-2023-5eca6a8326)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Rainbond has a logic flaw vulnerability (CNVD-2023-29097)
Rainbond is a cloud-native application management platform. Rainbond suffers from a logic flaw vulnerability that can be exploited by an attacker to reset arbitrary user passwords...
Rainbond has a logic flaw vulnerability (CNVD-2023-29035)
Rainbond is a cloud-native application management platform. Rainbond suffers from a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...
Rainbond has a flawed logic vulnerability
Rainbond is a cloud-native application management platform. Rainbond suffers from a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...
Malwarebytes wins 2023 CRN 'Coolest Endpoint And Managed Security Companies' award
CRN, a trusted source for IT channel news and analysis, has named Malwarebytes one of the "Coolest Endpoint And Managed Security Companies" on the 2023 CRN Security 100 list. The CRN Security 100 highlights channel-friendly cybersecurity vendors across a number of market segments including Endpoi...
File Upload Vulnerability in Rainbond
Rainbond is a cloud-native application management platform. Rainbond suffers from a file upload vulnerability that can be exploited by an attacker to gain server privileges...
MOSN 安全漏洞
MOSN is a cloud-native web proxy written in Go language by MOSN Open Source. A security vulnerability exists in MOSN version v.0.23.0, which stems from a vulnerability that allows an attacker to elevate privileges via case-sensitive JWT authorization...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps security update
An update is now available for Red Hat OpenShift GitOps 1.5.9 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Wallarm Releases New End-to-End Solution to Reduce Risk and Time-to-Remediate Leaked API Keys and Secrets
Advancement to API Security Technology Will Combat Recent Surge in Hacks Leveraging Leaked API; Early Release Now Available San Francisco, CA –BUSINESS WIRE– January 19, 2023 – Wallarm, the end-to-end API security company, today announced the early release of the Wallarm API Leak Management...
What’s New in InsightIDR: Q4 2022 in Review
As we continue to empower security teams with the freedom to focus on what matters most, Q4 focused on investments and releases that contributed to that vision. With InsightIDR, Rapid7’s cloud-native SIEM and XDR solution, teams have the scale, comprehensive contextual coverage, and expertly vett...
CVE-2022-23509
Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. GitOps run has a local S3 bucket which it uses for synchronizing files that are later applied against a Kubernetes cluster. The communication between GitOps...
CVE-2022-23509 Weave Gitops Run vulnerable to insecure communication
Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. GitOps run has a local S3 bucket which it uses for synchronizing files that are later applied against a Kubernetes cluster. The communication between GitOps...
CVE-2022-23509
CVE-2022-23509 concerns insecure, unencrypted communication between Weave GitOps’ GitOps Run and its local S3 bucket. This allows privileged users or processes to tap traffic and obtain information enabling access to the S3 bucket, potentially leading to bucket content modification and unintended...