GHSA-892H-R6CR-53G4 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-9V7R-X7CV-V437 vulnerabilities

Vulnerabilities for packages: metrics-server...

GHSA-679V-HH23-H5JH vulnerabilities

Vulnerabilities for packages: metrics-server, smarter-device-manager-fips, kubeflow-katib, configmap-reload-fips, kind...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, git-lfs, mkcert, gitness, docker-credential-acr-env, prometheus-redis-exporter, policy-controller-fips, conftest, external-secrets-fips, smarter-device-manager, azure-aad-pod-identity-mic, chartmuseum, direnv, kubebuilder, gostatsd, helm,...

SUSE: Security Advisory (SUSE-SU-2025:0588-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2948-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:3499-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:4313-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Astra Linux – Vulnerability in Chromium

The out-of-bounds reading in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42154)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42154 advisory. - In the Linux kernel, the following vulnerability has been resolved: tcpmetrics: validate source addr length ...

Azure Linux 3.0 Security Update: containerd / cri-tools / docker-buildx / docker-compose / moby-containerd-cc (CVE-2023-47108)

The version of containerd / cri-tools / docker-buildx / docker-compose / moby-containerd-cc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-47108 advisory. - OpenTelemetry-Go Contrib is a collecti...

CVE-2024-55573

An issue was discovered in Centreon centreon-web 24.10.x before 24.10.3, 24.04.x before 24.04.9, 23.10.x before 23.10.19, 23.04.x before 23.04.24. A user with high privileges is able to inject SQL into the form used to create virtual metrics...

Malicious code in @metrics-service/static (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-773 Malicious code in @metrics-service/static (npm)

--- -= Per source details. Do not edit below this line.=-...

GO-2025-3418 Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway

Envoy Admin Interface Exposed through prometheus metrics endpoint in github.com/envoyproxy/gateway...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 24 for SLE 15 SP4) (SUSE-SU-2025:0251-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Metrics component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Metrics component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

Apache Hadoop Code Injection Vulnerability

Apache Ambari is an application from the Apache USA Foundation. Provides software developed to configure, manage and monitor Apache Hadoop clusters to simplify Hadoop management. A code injection vulnerability exists in Apache Hadoop. The vulnerability is due to a vulnerability in the Ambari...

SQL Injection

Overview centreon/centreon is a network, system, applicative supervision and monitoring tool. Affected versions of this package are vulnerable to SQL Injection through the form used to create virtual metrics. An attacker can manipulate the underlying database queries and potentially access, modif...

Envoy Admin Interface Exposed through prometheus metrics endpoint

Impact A user with access to a Kubernetes cluster where Envoy Gateway is installed can use a path traversal attack to execute Envoy Admin interface commands on proxies managed by Envoy Gateway. The admin interface can be used to terminate the Envoy process and extract the Envoy configuration...