356 matches found
CVE-2021-21285 vulnerabilities
Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...
CVE-2021-41091 vulnerabilities
Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...
CVE-2025-64434 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-6FJ5-M822-RQX8 vulnerabilities
Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...
GHSA-7452-XQPJ-6RPC vulnerabilities
Vulnerabilities for packages: rancher-machine, docker-machine-driver-harvester...
CVE-2025-64432 vulnerabilities
Vulnerabilities for packages: virt-launcher, virt-operator, virt-operator-fips, virt-controller-fips, virt-api, virt-controller, docker-machine-driver-harvester, virt-api-fips, virt-handler, virt-handler-fips...
GHSA-38JW-G2QX-4286 vulnerabilities
Vulnerabilities for packages: virt-launcher, virt-operator, virt-operator-fips, virt-controller-fips, virt-api, virt-controller, docker-machine-driver-harvester, virt-api-fips, virt-handler, virt-handler-fips...
GHSA-GGP9-C99X-54GP vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
Harvest May Expose OS Default SSH Login Password Via SUSE Virtualization Interactive Installer
Impact Projects using the SUSE Virtualization Harvester environment are vulnerable to this exploit if they are using the 1.5.x or 1.6.x interactive installer to either create a new cluster or add new hosts to an existing cluster. The environment is not affected if the PXE boot mechanism is utiliz...
PT-2026-1506
Name of the Vulnerable Software and Affected Versions SUSE Virtualization Harvester versions 1.5.x through 1.6.x Description The interactive installer for SUSE Virtualization Harvester may expose the default OS SSH login password when creating a new cluster or adding hosts to an existing cluster...
GHSA-WCW9-47FP-RRFR vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, govulncheck, direnv, kubecolor, kubeflow-katib, kubescape-operator, nri-prometheus, whereabouts, boring-registry, rancher-system-agent, hello-world-golang, vendir, vt-cli, oras, promxy, harbor, git-credential-oauth, gosu, delve,...
GHSA-FRHW-MQJ2-WXW2 vulnerabilities
Vulnerabilities for packages: fluent-bit-plugin-loki, kubecolor, boring-registry, rancher-system-agent, kyverno-policy-reporter-ui, delve, elvish, fscrypt, ini-file, kratos, supercronic, azure-ipam, flannel, crane, frp, kind, kube-logging-operator, nerdctl, runc, extism, s5cmd,...
CVE-2025-47912 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, govulncheck, direnv, kubecolor, kubeflow-katib, kubescape-operator, nri-prometheus, whereabouts, boring-registry, rancher-system-agent, hello-world-golang, vendir, vt-cli, oras, promxy, harbor, git-credential-oauth, gosu, delve,...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, govulncheck, direnv, kubecolor, kubeflow-katib, kubescape-operator, nri-prometheus, whereabouts, boring-registry, rancher-system-agent, hello-world-golang, vendir, vt-cli, oras, promxy, harbor, git-credential-oauth, gosu, delve,...
GHSA-9GCR-GP5F-JW27 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, govulncheck, direnv, kubecolor, kubeflow-katib, kubescape-operator, nri-prometheus, whereabouts, boring-registry, rancher-system-agent, hello-world-golang, vendir, vt-cli, oras, promxy, harbor, git-credential-oauth, delve,...
GHSA-HJX7-FPXX-MJ48 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, govulncheck, direnv, kubecolor, kubeflow-katib, kubescape-operator, nri-prometheus, whereabouts, boring-registry, rancher-system-agent, hello-world-golang, vendir, vt-cli, oras, promxy, harbor, git-credential-oauth, gosu, delve,...
GHSA-QH38-484V-W52X vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, govulncheck, direnv, kubecolor, kubeflow-katib, kubescape-operator, nri-prometheus, whereabouts, boring-registry, rancher-system-agent, hello-world-golang, vendir, vt-cli, oras, promxy, harbor, git-credential-oauth, gosu, delve,...
GHSA-RJCG-56PH-3QVG vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, govulncheck, direnv, kubecolor, kubeflow-katib, kubescape-operator, nri-prometheus, whereabouts, boring-registry, rancher-system-agent, hello-world-golang, vendir, vt-cli, oras, promxy, harbor, git-credential-oauth, gosu, delve,...
CVE-2025-58188 vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, govulncheck, direnv, kubecolor, kubeflow-katib, kubescape-operator, nri-prometheus, whereabouts, boring-registry, rancher-system-agent, hello-world-golang, vendir, vt-cli, oras, promxy, harbor, git-credential-oauth, gosu, delve,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: cluster-proportional-autoscaler, govulncheck, direnv, kubecolor, kubeflow-katib, kubescape-operator, nri-prometheus, whereabouts, boring-registry, rancher-system-agent, hello-world-golang, vendir, vt-cli, oras, promxy, harbor, git-credential-oauth, gosu, delve,...