431 matches found
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: minio, vertical-pod-autoscaler, memcached-exporter, dynamic-localpv-provisioner, prometheus-postgres-exporter-fips, prometheus-bind-exporter, configmap-reload-fips, kubernetes-csi-livenessprobe-fips, prometheus-alertmanager, flux-kustomize-controller, zot,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: terraform-provider-azurerm, oauth2-proxy, nri-prometheus, dex, terraform-provider-sendgrid, haproxy-ingress, slsa-verifier, kubewatch, dynamic-localpv-provisioner, fuse-overlayfs-snapshotter, kubescape, newrelic-infrastructure-agent, spark-operator, stakater-reloader...
CVE-2023-34236
Weave GitOps Terraform Controller aka Weave TF-controller is a controller for Flux to reconcile Terraform resources in a GitOps way. A vulnerability has been identified in Weave GitOps Terraform Controller which could allow an authenticated remote attacker to view sensitive information. This...
CVE-2023-2253 vulnerabilities
Vulnerabilities for packages: kpt, kubernetes-dashboard, aactl, argocd-image-updater, bom, argocd-image-updater-fips...
GHSA-HQXW-F8MX-CPMW vulnerabilities
Vulnerabilities for packages: kpt, kubernetes-dashboard, aactl, argocd-image-updater, bom, argocd-image-updater-fips...
CVE-2023-28841 vulnerabilities
Vulnerabilities for packages: helm, ctop, melange, apko, ko, bom, up...
GHSA-232P-VWFF-86MP vulnerabilities
Vulnerabilities for packages: helm, ctop, melange, apko, ko, bom, up...
GHSA-33PG-M6JH-5237 vulnerabilities
Vulnerabilities for packages: helm, ctop, melange, apko, ko, bom, up...
GHSA-6WRF-MXFJ-PF5P vulnerabilities
Vulnerabilities for packages: helm, ctop, melange, apko, ko, bom, up...
CVE-2023-25173 vulnerabilities
Vulnerabilities for packages: ctop...
CVE-2023-25153 vulnerabilities
Vulnerabilities for packages: ctop...
SUSE CVE-2018-15756
Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controlle...
GHSA-PWCW-6F5G-GXF8 vulnerabilities
Vulnerabilities for packages: helm...
CVE-2023-25165 vulnerabilities
Vulnerabilities for packages: helm...
Massive Ad Fraud Scheme Targeted Over 11 Million Devices with 1,700 Spoofed Apps
Researchers have shut down an "expansive" ad fraud scheme that spoofed more than 1,700 applications from 120 publishers and impacted roughly 11 million devices. "VASTFLUX was a malvertising attack that injected malicious JavaScript code into digital ad creatives, allowing the fraudsters to stack...
Massive Ad Fraud Scheme Targeted Over 11 Million Devices with 1,700 Spoofed Apps
Researchers have shut down an "expansive" ad fraud scheme that spoofed more than 1,700 applications from 120 publishers and impacted roughly 11 million devices. "VASTFLUX was a malvertising attack that injected malicious JavaScript code into digital ad creatives, allowing the fraudsters to stack...
Gamaredon APT cyber feud strikes Ukrainian entities
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary One of the most ubiquitous, intrusive, consistently active, and laser-focused APTs targeting Ukraine in cyberspace is the Gamaredon group, also known as the Shuckworm. Gamaredon Group has employed fast...
CVE-2022-23525 vulnerabilities
Vulnerabilities for packages: flux-helm-controller-0.37...