CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: atlantis, falcosidekick-fips, fuse-overlayfs-snapshotter, kyverno-policy-reporter-ui, caddy, hey, wavefront-collector-for-kubernetes, actions-runner-controller-fips, kustomize, cass-operator-fips-no-pvc-delete, runc, thanos, kube-bench-fips,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: caddy, sigstore-scaffolding, zot, k3s, kargo, weaviate, aactl, frp, zarf, oauth2-proxy, dex, step-ca, goreleaser, kubernetes-dashboard, wolfictl, kubescape, temporal, argo-workflows, terragrunt, ko, bank-vaults, falcoctl, policy-controller, step, grpc-health-probe,...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: falcoctl, mc-fips, external-secrets-fips, boring-registry-fips, spire-server, minio-fips, falcoctl-fips, spire-server-fips, mc, boring-registry, minio...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: falcoctl, mc-fips, external-secrets-fips, boring-registry-fips, spire-server, minio-fips, falcoctl-fips, spire-server-fips, mc, boring-registry, minio...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: vexctl, tekton-chains, boring-registry, gitsign, spire-server, falcoctl, mc, minio, kubescape...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: falcoctl, gitsign, tekton-chains, vexctl, cosign-fips, kubescape, falcoctl-fips...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, bank-vaults-fips, src, timestamp-authority-fips, smarter-device-manager-fips, kubescape, plutono-fips, slsa-verifier, spark-operator, kiam, aws-efs-csi-driver-fips, aactl, kube-oidc-proxy, vault-csi-provider, cortex,...

SUSE CVE-2019-13509

In Docker CE and EE before 18.09.8 as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10, Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes non external secrets. I...

In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10) Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.

...

DEBIAN-CVE-2019-13509

In Docker CE and EE before 18.09.8 as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10, Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes non external secrets. I...