2408 matches found
RCE vulnerability in Kubernetes Continuous Deploy
Kubernetes Continuous Deploy 2.3.1 and earlier bundles a version of Kubernetes Java Client library with the vulnerability https://vulners.com/cve/CVE-2021-25738CVE-2021-25738 that does not configure its YAML parser to prevent the instantiation of arbitrary types. This results in a remote code...
CVE-2022-2074
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template...
CVE-2022-2074
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template...
CVE-2022-2049
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function...
CVE-2022-2075
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation...
CVE-2022-2074
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template...
CVE-2022-2049
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function...
CVE-2022-2075
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation...
CVE-2022-2075
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation...
CVE-2022-2049
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function...
Design/Logic Flaw
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation...
Denial of service
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template...
Design/Logic Flaw
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function...
CVE-2022-2075
The CVE-2022-2075 entry concerns Octopus Deploy and a Regex Denial of Service targeting the build information request validation. Affected component/attack: the validation logic used to handle build information requests can be abused via crafted input, causing DoS. CVSS v3.1 base score 7.5 (HIGH)...
CVE-2022-2075
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation...
CVE-2022-2074
CVE-2022-2074 concerns Octopus Deploy, where “affected versions” expose a vulnerability that can cause a Regex Denial of Service via the Variable Project Template . The issue is described across multiple feeds as a DoS risk without definitive CVE-wide exploitation details in some sources, while o...
CVE-2022-2074
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template...
CVE-2022-2049
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function...
CVE-2022-2049
CVE-2022-2049 affects Octopus Deploy. The issue enables a Regex Denial of Service via the package upload function; the underlying root cause and affected versions are not detailed in the provided documents. No remediation or exploit details are provided in the connected sources.