CVE-2021-43565 vulnerabilities

Vulnerabilities for packages: k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, kubeflow-fips, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, kubeflow...

Fedora: Security Advisory for golang-sigs-k8s-aws-iam-authenticator (FEDORA-2022-5038c3236c)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-sigs-k8s-aws-iam-authenticator-0.5.2-8.fc36

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster. The initial work on this tool was driven by Heptio. The project receives contributions from multiple community engineers and is currently maintained by Heptio and Amazon EKS OSS Engineers...

GHSA-P782-XGP4-8HR8 vulnerabilities

Vulnerabilities for packages: k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, kind, grpcurl, ctop, kubeflow...

Malicious code in eks-auto-create-idp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abe5220ea6202484d070bbe62ba66ccb40f7d0b230bcfb2a4208d4aec4877ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2682 Malicious code in eks-auto-create-idp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abe5220ea6202484d070bbe62ba66ccb40f7d0b230bcfb2a4208d4aec4877ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in callrail_eks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a04c2e632af57414931941b9d17e0edb9dc7883a968f5c96670cff845f32638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Amazon EKS vs Azure Kubernetes Service

Managed Kubernetes services help organizations deploy, configure, and manage Kubernetes clusters. This article compares two of the biggest service providers: Amazon EKS and Azure Kubernetes Services...

GHSA-F4W6-3RH6-6Q4Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner...

GHSA-HP87-P4GW-J4GQ vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, thanos-operator-fips, dynamic-localpv-provisioner-fips, thanos-operator...

CVE-2022-28948 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, thanos-operator-fips, dynamic-localpv-provisioner-fips, thanos-operator...

GHSA-8C26-WMH5-6G9V vulnerabilities

Vulnerabilities for packages: k3d, dynamic-localpv-provisioner, terraform-provider-sendgrid-fips, kubeflow-fips, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, kubeflow...

GHSA-CG3Q-J54F-5P7P vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

CVE-2022-21698 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

Kubernetes: Authenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespaces

Summary: Retrieving ingress-nginx serviceaccount token ingress-nginx allows adding custom snippets of nginx configuration to Kubernetes ingress objects. These snippets can be applied to either the relevant location or server blocks with the following annotations, respectively...

Sifchain: Open S3 Bucket | information leakage

Hi I found an Open S3 Bucket. - POC : aws s3 ls s3://amazon-eks/ Source : https://github.com/Sifchain/sifnode/blob/bebbe9883560bbde4f452f81a2d85bdbc243636a/deploy/rake/dependencies.rake21 regards oos Impact information leakage...

Information Leakage Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.

Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. An information leakage vulnerability exists in the employment information management syste...

SQL Injection Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.

Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. A SQL injection vulnerability exists in the Employment Information Management System of...

Unauthorized Access Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.

Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. An unauthorized access vulnerability exists in the Employment Information Management Syste...

Information Leakage Vulnerability in Chengdu EKS Information Industry Co.

Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. There is an information leakage vulnerability in Chengdu ECOSYS Information Industry Co.,...