CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: kube-oidc-proxy, kubernetes-fips, cert-manager, prometheus-adapter, k3s, caddy, up, metrics-server-fips, kubernetes, rancher-webhook, kubevela, rancher-webhook-fips, buildkitd...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: kubevela, k3s, caddy, buildkitd, up, kubernetes, prometheus-adapter...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, helm, scorecard, aws-efs-csi-driver, newrelic-infrastructure-agent, gke-gcloud-auth-plugin, terraform, k3d, dex, cue, cortex, hey, pulumi-language-java, nodetaint, node-problem-detector, secrets-store-csi-driver-provider-gcp, sigstore-scaffoldin...

AZL-34837 CVE-2023-44487 affecting package keda for versions less than 2.4.0-14

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-31316 CVE-2023-44487 affecting package keda for versions less than 2.4.0-14

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

Moderate: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift (with security updates)

Custom Metrics Autoscaler Operator for Red Hat OpenShift including security updates. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

AZL-34838 CVE-2022-3162 affecting package keda for versions less than 2.14.0-1

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions...

AZL-13781 CVE-2022-3162 affecting package keda for versions less than 2.4.0-29

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. There are 2+ CustomResourceDefinitions...

AZL-34839 CVE-2022-32149 affecting package keda for versions less than 2.14.0-1

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

AZL-33598 CVE-2022-32149 affecting package keda for versions less than 2.4.0-23

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse...

AZL-33597 CVE-2021-44716 affecting package keda for versions less than 2.4.0-19

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...

AZL-34836 CVE-2021-44716 affecting package keda for versions less than 2.14.0-1

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via HTTP/2 requests...

Weak Password Vulnerability in KEDACOM Network Keyboard Console at Suzhou KEDA Technology Co.

Ltd. is a provider of video and security products and solutions. A weak password vulnerability exists in the KEDACOM Network Keyboard Console of Suzhou KEDA Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Keda Web Camera Server 弱口令漏洞

No description provided by source...