GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: atlantis-fips, minio-object-browser, newrelic-nri-kube-events-fips, thanos-receive-controller, spqr, prometheus-elasticsearch-exporter, keda, vendir-fips, rancher, harbor-registry-fips, gomplate, listmonk, authentik, crossplane-provider-aws-s3-fips, kyverno, skopeo,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner, kaf, newrelic-prometheus-configurator, runc, spicedb, stern, neuvector-scanner, gostatsd, cert-exporter, crossplane-provider-aws, regclient, git-lfs, cadvisor, nfs-subdir-external-provisioner, rclone, dask-gateway, fulcio, caddy,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: atlantis-fips, spqr, glab, harbor-registry-fips, gomplate, go-bindata, skopeo, go-md2man, kubescape, mkcert, azure-aad-pod-identity-mic, grpcurl, rekor-fips, argo-workflows, ksops, kyverno-policy-reporter-kyverno-plugin, spegel, crane, terraform-docs,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: chezmoi, atlantis-fips, spqr, prometheus-elasticsearch-exporter, glab, harbor-registry-fips, gomplate, go-bindata, skopeo, go-md2man, kubescape, mkcert, vault-csi-provider, azure-aad-pod-identity-mic, grpcurl, rekor-fips, argo-workflows, kots, ksops,...

OSV-2021-1192 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37927 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::PoolBuffer::MakeUnique arrow::AllocateBuffer...

OSV-2021-1189 Segv on unknown address in arrow::DefaultBackend

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37915 Crash type: Segv on unknown address Crash state: arrow::DefaultBackend arrow::defaultmemorypool arrow::ipc::IpcReadOptions::Defaults...

PT-2021-27737

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash state involves the arrow::DefaultBackend,...

PT-2021-27736

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash state involves components such as arrow::DefaultBackend,...

arrow:arrow-ipc-file-fuzz: Segv on unknown address in arrow::DefaultBackend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6674891504484352 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-file-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...

arrow:arrow-ipc-stream-fuzz: Segv on unknown address in arrow::DefaultBackend

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4757582821064704 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

Exposed Endpoints

github.com/kubernetes/ingress-nginx is uses publicly exposed endpoints. The prometheus metrics and healthz of the Kubernetes defaultbackend can be accessed by a remote attacker using a port-forward request to access the publicly accessible metrics...