CVE-2022-32559

CVE-2022-32559 affects Couchbase Server prior to 7.0.4. The issue arises from handling random HTTP requests that can lead to leaked metrics, exposing potential information about the system. According to multiple connected sources, the vulnerability impacts Couchbase Server versions before 7.0.4, ...

CVE-2022-32559: Allocation of Resources Without Limits or Throttling

An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...

PT-2022-21371 · Couchbase · Couchbase Server

Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.0.4 Description: An issue was discovered in Couchbase Server where random HTTP requests can lead to leaked metrics. Recommendations: For versions prior to 7.0.4, update to version 7.0.4 or later to resolve...

GHSA-R48Q-9G5R-8Q2H vulnerabilities

Vulnerabilities for packages: kube-state-metrics, kubeflow-fips, kubeflow...

CVE-2022-1996 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, kubeflow-fips, kubeflow...

PT-2022-37021

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a null-dereference read crash. Technical details about the crash include the functions load glyph, gs fapi ft get char raster...

GHSA-P3X5-5XPX-9PHM Kubernetes ingress exposes sensitive information

Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...

Kubernetes ingress exposes sensitive information

Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...

kube-state-metrics may expose secret content in metrics

A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that enabled annotations to be exposed as metrics. By default, the kube-state-metrics metrics only expose metadata about Secrets. However, a combination of...

GHSA-C92W-72C5-9X59 kube-state-metrics may expose secret content in metrics

A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that enabled annotations to be exposed as metrics. By default, the kube-state-metrics metrics only expose metadata about Secrets. However, a combination of...

GHSA-F8W9-66FP-3JGW Jenkins build-metrics Plugin reflected cross-site scripting vulnerability

Jenkins build-metrics Plugin does not properly escape the label query parameter, resulting in a reflected cross-site scripting vulnerability. As of publication of this advisory, there is no fix...

Jenkins build-metrics Plugin reflected cross-site scripting vulnerability

Jenkins build-metrics Plugin does not properly escape the label query parameter, resulting in a reflected cross-site scripting vulnerability. As of publication of this advisory, there is no fix...

GHSA-HP87-P4GW-J4GQ vulnerabilities

Vulnerabilities for packages: thanos-operator-fips, dynamic-localpv-provisioner-fips, thanos-operator, dynamic-localpv-provisioner...

CVE-2022-28948 vulnerabilities

Vulnerabilities for packages: thanos-operator-fips, dynamic-localpv-provisioner-fips, thanos-operator, dynamic-localpv-provisioner...

Low: grafana security, bug fix, and enhancement update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. The following packages have been upgraded to a later upstream version: grafana 7.5.11. BZ1993214 Security Fixes: grafana: directory traversal vulnerability CVE-2021-43813 For more details...

Fedora: Security Advisory for golang-github-prometheus-node-exporter (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-prometheus-node-exporter-1.3.1-7.fc36

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

Fedora: Security Advisory for golang-github-prometheus-node-exporter (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: golang-github-prometheus-node-exporter-1.3.1-7.fc34

Prometheus exporter for hardware and OS metrics exposed by NIX kernels, writ ten in Go with pluggable metric collectors...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64091)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerability exists in versions prior to MISP 2.4.158, which...