2208 matches found
MAL-2022-279 Malicious code in @frontend-metrics/gtm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5743ebe739a7fe8bb76a512075ce5fc3e9b4936813b47d6d8e83cce538db40be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @frontend-metrics/hotjar (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc044ca69fb03444fe01161e81c79dd2bdd764aa2944339cee044016185990e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-280 Malicious code in @frontend-metrics/hotjar (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc044ca69fb03444fe01161e81c79dd2bdd764aa2944339cee044016185990e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-32559
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...
CVE-2022-32559
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...
CVE-2022-32559
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...
Code injection
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...
CVE-2022-32559
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...
CVE-2022-32559
CVE-2022-32559 affects Couchbase Server prior to 7.0.4. The issue arises from handling random HTTP requests that can lead to leaked metrics, exposing potential information about the system. According to multiple connected sources, the vulnerability impacts Couchbase Server versions before 7.0.4, ...
PT-2022-21371 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.0.4 Description: An issue was discovered in Couchbase Server where random HTTP requests can lead to leaked metrics. Recommendations: For versions prior to 7.0.4, update to version 7.0.4 or later to resolve...
GHSA-R48Q-9G5R-8Q2H vulnerabilities
Vulnerabilities for packages: kubeflow-fips, kubeflow, kube-state-metrics...
CVE-2022-1996 vulnerabilities
Vulnerabilities for packages: kubeflow-fips, kubeflow, kube-state-metrics...
GHSA-P3X5-5XPX-9PHM Kubernetes ingress exposes sensitive information
Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...
Kubernetes ingress exposes sensitive information
Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...
kube-state-metrics may expose secret content in metrics
A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that enabled annotations to be exposed as metrics. By default, the kube-state-metrics metrics only expose metadata about Secrets. However, a combination of...
GHSA-C92W-72C5-9X59 kube-state-metrics may expose secret content in metrics
A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that enabled annotations to be exposed as metrics. By default, the kube-state-metrics metrics only expose metadata about Secrets. However, a combination of...
Jenkins build-metrics Plugin reflected cross-site scripting vulnerability
Jenkins build-metrics Plugin does not properly escape the label query parameter, resulting in a reflected cross-site scripting vulnerability. As of publication of this advisory, there is no fix...
GHSA-F8W9-66FP-3JGW Jenkins build-metrics Plugin reflected cross-site scripting vulnerability
Jenkins build-metrics Plugin does not properly escape the label query parameter, resulting in a reflected cross-site scripting vulnerability. As of publication of this advisory, there is no fix...