Denial of Service (DoS)

Overview vapor/vapor is an a server-side Swift HTTP web framework. Affected versions of this package are vulnerable to Denial of Service DoS. This can happen against a user who bootstraps a metrics backend for their Vapor app. Details Denial of Service DoS describes a family of attacks, all aimed...

SUSE-SU-2022:3747-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: - Update to upstream release 0.11.0 jscSLE-24791 Add TLS support Switch to logger, please check --log.level and --log.format flags - Update to version 0.10.1 Bugfix: Reset ProxyBalancer metrics on each scrape to remo...

CVE-2017-7517

An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProject", and then later deletes it another user can then create a project called "MyProject" and access...

PT-2022-8032 · Red Hat · Openshift Enterprise

Name of the Vulnerable Software and Affected Versions: Openshift Enterprise affected versions not specified Description: An input validation issue exists due to a direct mapping between tenants in Hawkular Metrics and projects/namespaces in OpenShift. This allows a new project with the same name ...

Red Hat OpenShift 输入验证错误漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat that enables building, testing, deploying and running applications. An input validation error vulnerability exists in Redhat Openshift Enterprise, which arises when a user creates a project named "MyProject" a...

CVE-2017-7517

CVE-2017-7517 describes an input validation issue in Red Hat OpenShift Enterprise where a 1:1 mapping between Hawkular Metrics tenants and OpenShift projects/namespaces allows a user who creates and later deletes a project named X to be able to access the metrics from the original project X when ...

CVE-2017-7517

An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProject", and then later deletes it another user can then create a project called "MyProject" and access...

Observability with Spring Boot 3

The Spring Observability Team has been working on adding observability support for Spring Applications for quite some time, and we are pleased to inform you that this feature will be generally available with Spring Framework 6 and Spring Boot 3! What is observability? In our understanding, it is...

[SECURITY] Fedora 37 Update: grafana-9.0.9-1.fc37

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

GSD-2022-1004998 drm/amd/pm: Fix a potential gpu_metrics_table memory leak

drm/amd/pm: Fix a potential gpumetricstable memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.7 by commit...

MAL-2022-4577 Malicious code in metrics-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 444d75d1e9415004ef5f95cbd2adcb09332c35ba4bae38c6d39b93a6f224226b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metrics-ebay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 444d75d1e9415004ef5f95cbd2adcb09332c35ba4bae38c6d39b93a6f224226b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

TikTok: Remotely Accessible Container Advisor exposed performance metrics and resource usage

A vulnerability was found that caused cAdvisor Container Advisor to be publicly accessible through an 8080 port. We thank @tw4v3sx for reporting this to our team...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, dynamic-localpv-provisioner, terraform-provider-sendgrid, hey, kubeflow, kubeflow-fips, grpcurl, k3d, dynamic-localpv-provisioner-fips, wireguard-go, kubeflow-katib, terraform-provider-sendgrid-fips...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, dynamic-localpv-provisioner, terraform-provider-sendgrid, hey, kubeflow, kubeflow-fips, grpcurl, k3d, dynamic-localpv-provisioner-fips, wireguard-go, kubeflow-katib, terraform-provider-sendgrid-fips...

GHSA-PVC3-WVXR-7CMF SmallRye Health UI Cross-site Scripting vulnerability

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

CVE-2021-3914

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

CVE-2021-3914

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

CVE-2021-3914

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

CVE-2021-3914

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...