134 matches found
EUVD-2023-26945
Malicious code in bioql PyPI...
EUVD-2025-11857
Malicious code in bioql PyPI...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: chart-testing, vault, rancher-security-scan, gobump, portieris, nri-memcached, envconsul, gendesk, clickhouse-operator, google-osconfig-agent, helm-push, nats-server-config-reloader, nri-mysql, cerbos, aactl, gatekeeper, kubernetes-dashboard-web, docker-cli,...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: azure-ipam, aws-load-balancer-controller, terraform-provider-azapi-fips, helm-fips, custom-pod-autoscaler-fips, kubernetes-replicator-fips, influxd, vault, argo-cd-fips, victoriametrics-operator, git-credential-oauth, cerbos-fips, grafana-operator-fips, helm-push,...
BIT-CONTOUR-2024-36539
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
The vulnerability of Contour.Talk video conferencing software for macOS, related to the use of an insecure search path, allows attackers to escalate their privileges and gain unauthorized access to the system.
The vulnerability of Contour.Talk software for macOS-related video conferencing systems is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to the system...
Structure Disruption: Subverting Malicious Diffusion-Based Inpainting Via Self-Attention Query Perturbation
The rapid advancement of diffusion models has enhanced their image inpainting and editing capabilities but also introduced significant societal risks. Adversaries can exploit user images from social media to generate misleading or harmful content. While adversarial perturbations can disrupt...
CVE-2024-36539
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2023-22834
The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create...
CVE-2025-32792 ses's global contour bindings leak into Compartment lexical scope
SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using ses and the Compartment API to evaluate third-party code in an isolated execution environment that hav...
GHSA-QXP5-GWG8-XV66 vulnerabilities
Vulnerabilities for packages: bank-vaults, aws-load-balancer-controller, cloudflared, terraform-provider-azapi-fips, kubernetes-csi-livenessprobe, rabbitmq-messaging-topology-operator-fips, vault, cass-operator-fips, vault-k8s, argo-cd-fips, crossplane-provider-aws-iam, cinder-csi-plugin-fips,...
CVE-2020-15127
In Contour Ingress controller for Kubernetes before version 1.7.0, a bad actor can shut down all instances of Envoy, essentially killing the entire ingress data plane. GET requests to /shutdown on port 8090 of the Envoy pod initiate Envoy's shutdown procedure. The shutdown procedure includes...
GO-2022-0922 ExternalName Services can be used to gain access to Envoy's admin interface in github.com/projectcontour/contour
ExternalName Services can be used to gain access to Envoy's admin interface in github.com/projectcontour/contour...
CVE-2024-36539
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
Contour 安全漏洞
Contour is a Project Contour open source Kubernetes entry controller using the Envoy proxy. A security vulnerability exists in Contour 1.28.3 and earlier versions, which stems from the presence of an insecure privilege vulnerability that allows an attacker to access sensitive data and elevate...
CVE-2024-36539
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2024-36539
In Contour 1.28.3, insecure permissions on the service account allow attackers to access the token and escalate privileges, enabling sensitive data access. Affects Contour (Kubernetes ingress controller) v1.28.3; root cause is improper token permissions. Documented impact: high confidentiality, i...
PT-2024-27059 · Contour · Contour
Name of the Vulnerable Software and Affected Versions: contour version 1.28.3 Description: The issue allows attackers to access sensitive data and escalate privileges by obtaining the service account's token due to insecure permissions. Recommendations: For contour version 1.28.3, update the...
