Moderate: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.15.2

cert-manager Operator for Red Hat OpenShift 1.15.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

TencentOS Server 3: conmon (TSSA-2022:0258)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0258 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EUVD-2018-17038

Malware in sbrugna...

EUVD-2019-2198

Malware in sbrugna...

EUVD-2019-13726

Malware in sbrugna...

EUVD-2018-2081

Malware in sbrugna...

EUVD-2021-2608

Malware in sbrugna...

EUVD-2021-1233

Malware in sbrugna...

EUVD-2023-2509

Malicious code in bioql PyPI...

EUVD-2023-2423

Malicious code in bioql PyPI...

EUVD-2022-0898

Malicious code in bioql PyPI...

EUVD-2024-2846

Malicious code in bioql PyPI...

EUVD-2022-1339

Malicious code in bioql PyPI...

EUVD-2022-1260

Malicious code in bioql PyPI...

EUVD-2023-2961

Malicious code in bioql PyPI...

Webhook redirect in kube-apiserver

...

Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain

A vulnerability exists in the Kubernetes C client where the certificate validation logic accepts properly constructed certificates from any Certificate Authority CA without properly verifying the trust chain. This flaw allows a malicious actor to present a forged certificate and potentially...

OPENSUSE-SU-2025:15235-1 kubernetes1.31-apiserver-1.31.10-1.1 on GA media

These are all security issues fixed in the kubernetes1.31-apiserver-1.31.10-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2023-41333

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace is able to affect traffic on an entire Cilium cluster, potentially bypassing policy enforcement in othe...

CVE-2019-13209

Rancher 2 through 2.2.4 is vulnerable to a Cross-Site Websocket Hijacking attack that allows an exploiter to gain access to clusters managed by Rancher. The attack requires a victim to be logged into a Rancher server, and then to access a third-party site hosted by the exploiter. Once that is...