1015 matches found
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: aws-signer-notation-plugin-fips, guac, openbao-fips, rancher-telemetry, crossplane-provider-azure-sql, yunikorn-web, smarter-device-manager, kapp-controller-fips, contour-fips, metrics-agent-fips, external-dns, pguser, trillian-fips, aws-flb-cloudwatch,...
Ubuntu: Security Advisory (USN-7685-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-6V2P-P543-PHR9 vulnerabilities
Vulnerabilities for packages: vertical-pod-autoscaler, timoni, k8s-device-plugin, helm, pluto, aws-s3-controller, kapp-controller, flyte, knative-client, apko, kubernetes-csi-external-attacher, containerd, portieris, x509-certificate-exporter, kube-rbac-proxy, step-kms-plugin, gatus, glab,...
Exploit for OS Command Injection in Docker
This repository is an offensive tool for container exploitation. The primary capability of this tool is to perform a container breakout via exposed Docker daemons docker.sock, CVE-2019-5736, and privileged container breakout via enabled CAPS and SYSCALLS. It also extracts data from Linux Kernel...
USN-7609-1 linux, linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oem-6.8, linux-oracle, linux-oracle-6.8, linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Netfilter; - Network traffic control; CVE-2025-38001, CVE-2025-37798, CVE-2025-37932,...
CVE-2021-30476
HashiCorp Terraform’s Vault Provider terraform-provider-vault did not correctly configure GCE-type bound labels for Vault’s GCP auth method. Fixed in 2.19.1...
Privilege Escalation
github.com/gardener/gardener is vulnerable to Privilege Escalation. The vulnerability is due to improper authorization checks due to the gardenlet component allowing project administrators to gain control over seed clusters managing their shoot clusters in environments using...
CVE-2018-17450
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request Forgery SSRF via the Kubernetes integration, leading for example to disclosure of a GCP service token...
MAL-2025-3491 Malicious code in gcp-alert-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d19b607b4f352b166f0a4c5a1e6189aca16d98607043baba144dba19d9ff70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gcp-alert-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d19b607b4f352b166f0a4c5a1e6189aca16d98607043baba144dba19d9ff70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Ubuntu: Security Advisory (USN-7461-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7461-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Network drivers; - File systems infrastructure; - Ext4 file system; - Network file system NFS server...
GCP Cloud Composer Bug Let Attackers Elevate Access via Malicious PyPI Packages
Cybersecurity researchers have detailed a now-patched vulnerability in Google Cloud Platform GCP that could have enabled an attacker to elevate their privileges in the Cloud Composer workflow orchestration service that's based on Apache Airflow. "This vulnerability lets attackers with edit...
Unable to upload the master image on MCS machine catalog in GCP
Error when updating the catalog Action Name: MCUpdateMachineCatalog Exception: StudioErrorId : ProvisioningTaskError ErrorCategory : NotSpecified TaskState : UnknownError TaskStateInformation : Terminated ErrorId : ManagedMachineGeneralException Operation : PreparingMasterImage ErrorMessage : Err...
USN-7406-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Network namespace; - Networking core; CVE-2024-26928, CVE-2024-56658,...
Google Acquires Wiz for Record $32 Billion
$32B Wiz acquisition: Google ramps up cloud security. Following Mandiant, this deal signals major GCP defense upgrade...
GHSA-7WRW-R4P8-38RX vulnerabilities
Vulnerabilities for packages: vertical-pod-autoscaler, timoni, gobump, k8s-device-plugin, helm, pluto, kapp-controller, sbom-convert, render-template, undock, kubernetes-csi-external-attacher, confluent-common-docker, containerd, x509-certificate-exporter, nri-nginx, kube-rbac-proxy,...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: node-problem-detector, regclient, trillian, go-licenses, thanos-operator, dex-k8s-authenticator, nats, newrelic-prometheus-configurator, smarter-device-manager, nri-nginx, sbom-scorecard, up, cadvisor, docker-credential-ecr-login, k8ssandra-operator, cri-tools,...