ipfs:ipfs_ds_flatfs: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4623157817376768 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsflatfs Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

CVE-2021-32001

K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material cluster certificate authority private keys, secrets encryption configuration passphrase, etc. and decrypt it, without having to know the...

Code injection

K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material cluster certificate authority private keys, secrets encryption configuration passphrase, etc. and decrypt it, without having to know the...

CVE-2021-32001

K3s (SUSE Rancher) and RKE2 installations are affected by CVE-2021-32001, where a user with direct datastore access or a datastore backup copy can extract cluster keying material (including CA private keys and encryption passphrases) and decrypt data without the token. Affected versions include S...

CVE-2021-32001

K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material cluster certificate authority private keys, secrets encryption configuration passphrase, etc. and decrypt it, without having to know the...

PT-2021-19621 · Suse · Rke2 +1

Name of the Vulnerable Software and Affected Versions: SUSE Rancher K3s versions v1.19.12+k3s1 through v1.21.2+k3s1 and prior versions RKE2 versions v1.19.12+rke2r1 through v1.21.2+rke2r1 and prior versions Description: A Missing Encryption of Sensitive Data issue allows any user with direct acce...

SUSE Rancher K3s 安全漏洞

SUSE Rancher K3s is a CNCF sandboxing project from SUSE Germany that provides a lightweight but powerful certified Kubernetes distribution. A security vulnerability exists in SUSE Rancher K3s that allows any user with direct access to a datastore, or a copy of a datastore backup, to extract the...

CVE-2021-32001: Missing Encryption of Sensitive Data

K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material cluster certificate authority private keys, secrets encryption configuration passphrase, etc. and decrypt it, without having to know the...

CVE-2021-32001

K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material cluster certificate authority private keys, secrets encryption configuration passphrase, etc. and decrypt it, without having to know the...

ipfs:ipfs_ds_badger2: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4633330907742208 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsbadger2 Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

ipfs:ipfs_ds_badger2: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6252516983570432 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsbadger2 Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201328 Crash State: NULL Sanitizer: address ASAN Recommended Securi...

DSCheck Maintenance Assistant

Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the request here - https://forms.gle/obA39PEz5qpDiSPq8 Once we verify your request, we will provide access to the download location. Description DSCheck Maintenance Assistant is designed to facilitate...

VulnCheck KEV: CVE-2023-25158

GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when executing OGC Filters with JDBCDataStore...

Veeam Management Pack 8.0 Update 6 cumulative patch for VMware vSphere 7.0 monitoring

Challenge Veeam Management Pack 8.0 Update 6 is not compatible with VMware vSphere 7.0 and later. When you try to connect to vCenter Servers running VMware vSphere 7.0, you get the following error: "Cannot connect to "YourVcenterName" on port 443. Unsupported API version." Cause The issue is...

Malicious Package

Overview dragonflycloudinary-datastore is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid usi...

CVE-2020-10372: Improper Neutralization of Input During Web Page Generation

Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI...

PT-2020-12044

Name of the Vulnerable Software and Affected Versions Ramp AltitudeCDN Altimeter versions prior to 2.4.0 Description The issue allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the "dms/rest/services/datastore/createOrEditValueForKey" URI. Recommendations For versions...

VMs stored on vVols may experience a significant stun during the snapshot removal process after the backup session.

Challenge During the snapshot removal operation that occurs at the end of a backup/replication job for a VM stored on a vVol Datastore, the following is observed: The Guest OS of the VM being processed is stunned or frozen. Monitoring software may report that the Guest OS is inaccessible due to a...

How to Migrate PVS server from one datastore to another datastore

Migrate PVS server from one datastore to another datastore...

The 'Veeam VMware: Datastore Unknown Files Analysis' Monitor Triggers Excessive Alerts

Challenge Situations customers may face that this article covers: The Veeam VMware: Datastore Unknown Files Analysis monitor triggers excessive alerts. The Veeam VMware: Datastore Unknown Files Analysis monitor and the Scan Datastore for Unknown Files Task show different results. The UnknownFiles...