2165 matches found
CVE-2025-32777: Allocation of Resources Without Limits or Throttling
Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...
New Pacu Module: Secret Enumeration in Elastic Beanstalk
The post New Pacu Module: Secret Enumeration in Elastic Beanstalk appeared first on Rhino Security Labs...
CVE-2025-26478
Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2025-25013
Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack...
CVE-2025-25013
Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack...
CVE-2025-25013
CVE-2025-25013 affects Elastic Defend; the issue is improper restriction of environment variables, causing exposure of sensitive data (e.g., API keys/tokens) via unfiltered env vars transmitted to the stack. Reported CVSSv3.1: 6.5 (Medium), with network attack vector, low attack complexity, low p...
CVE-2025-25013 Elastic Defend Insertion of Sensitive Information into Log Files
Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack...
CVE-2025-25013 Elastic Defend Insertion of Sensitive Information into Log Files
Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack...
Elastic Defend 8.17.3 Security Update (ESA-2025-05)
Elastic Defend Insertion of Sensitive Information into Log Files ESA-2025-05 Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack. This...
PT-2025-15665 · Elastic · Defend
Name of the Vulnerable Software and Affected Versions: Elastic Defend affected versions not specified Description: The issue is related to the improper restriction of environment variables in Elastic Defend, which can lead to the exposure of sensitive information such as API keys and tokens. This...
Elastic Kibana 资源管理错误漏洞
Elastic Kibana is an available data visualization dashboard software from Elastic, Inc. A resource management error vulnerability exists in Elastic Kibana versions 7.17.0 through 7.17.22 and 8.0.0 through 8.15.0, which stems from a flaw in the handling of ad-hoc requests to the Observability API...
Elastic Defend 日志信息泄露漏洞
Elastic Defend is an application from the Dutch company Elastic. It provides prevention, detection and response capabilities, as well as deep visibility into EPP, EDR, SIEM and security analytics. A log information disclosure vulnerability exists in Elastic Defend versions prior to 8.17.3, which...
CVE-2025-25013: Insertion of Sensitive Information into Log File
Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack...
Elastic Kibana 安全漏洞
Elastic Kibana is a usable data visualization dashboard software from Elastic. A security vulnerability exists in Elastic Kibana versions 8.16.1 and earlier and 8.17.1, which stems from prototype contamination combined with unrestricted file uploads and path traversal, which could lead to code...
Citrix App Layering 2409 - Unable to Edit App Layers with Boot Error 0xc000000f
Administrators may encounter an issue where they are unable to edit Application Layers within Citrix Elastic Layer Management ELM version 2409 after applying the February 2025 patches to their Windows 11 24H2 packaging machines. This inability to edit App Layers is accompanied by aboot error code...
CVE-2024-10190 Unauthenticated Remote Code Execution in ElasticRendezvousHandler in horovod/horovod
Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. The vulnerability is due to improper handling of base64-encoded data in the ElasticRendezvousHandler, a subclass of KVStoreHandler. Specifically, the putvalue method in ElasticRendezvousHandler...
CVE-2025-29786 vulnerabilities
Vulnerabilities for packages: argo-workflows-fips, argo-cd, grafana-alloy, opentelemetry-collector-fips, argo-workflows, kargo, argo-rollouts, amazon-cloudwatch-agent, eks-distro, grafana-alloy-fips, argo-cd-fips, kubeflow-pipelines, splunk-otel-collector-fips, keda, k8sgpt, eks-distro-fips,...
GHSA-93MQ-9FFX-83M2 vulnerabilities
Vulnerabilities for packages: argo-workflows-fips, argo-cd, grafana-alloy, opentelemetry-collector-fips, argo-workflows, kargo, argo-rollouts, amazon-cloudwatch-agent, eks-distro, grafana-alloy-fips, argo-cd-fips, kubeflow-pipelines, splunk-otel-collector-fips, keda, k8sgpt, eks-distro-fips,...
Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution
Elastic has rolled out security updates to address a critical security flaw impacting the Kibana data visualization dashboard software for Elasticsearch that could result in arbitrary code execution. The vulnerability, tracked as CVE-2025-25015 , carries a CVSS score of 9.9 out of a maximum of...