Lucene search
+L

160 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2022-7769

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00861EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/08/20 5:33 p.m.19 views

CVE-2025-55205

Capsule is a multi-tenancy and policy-based framework for Kubernetes. A namespace label injection vulnerability in Capsule v0.10.3 and earlier allows authenticated tenant users to inject arbitrary labels into system namespaces kube-system, default, capsule-system, bypassing multi-tenant isolation...

9CVSS6.7AI score0.00449EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/18 5:15 p.m.6 views

CVE-2025-55205

Capsule is a multi-tenancy and policy-based framework for Kubernetes. A namespace label injection vulnerability in Capsule v0.10.3 and earlier allows authenticated tenant users to inject arbitrary labels into system namespaces kube-system, default, capsule-system, bypassing multi-tenant isolation...

9CVSS0.00449EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/18 4:28 p.m.36 views

CVE-2025-55205

CVE-2025-55205 concerns Capsule (Kubernetes multi-tenant framework). Affected: Capsule v0.10.3 and earlier; fixed in v0.10.4. Vulnerability: authenticated tenant users can inject arbitrary labels into system namespaces (e.g., kube-system, default, capsule-system) via namespace labeling, bypassing...

9CVSS7AI score0.00449EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 10:27 a.m.8 views

CVE-2024-20279

A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to modify the behavior of default system policies, such as quality of service QoS policies, on an affected system. This...

4.3CVSS7AI score0.00319EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:46 a.m.12 views

CVE-2023-20230

A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, remote attacker to read, modify, or delete non-tenant policies for example, access policies created by users associated with a different securi...

5.4CVSS6.9AI score0.00333EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/19 4:15 p.m.34 views

CVE-2025-1758

Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: LoadMaster: 7.2.40.0 and above ECS: All versions Multi-Tenancy: 7.1.35.4 and above...

8.8CVSS0.04791EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/19 4:15 p.m.7 views

CVE-2025-1758

Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: LoadMaster: 7.2.40.0 and above ECS: All versions Multi-Tenancy: 7.1.35.4 and above...

8.8CVSS5.8AI score0.04791EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/19 3:28 p.m.8 views

CVE-2025-1758

Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: LoadMaster: 7.2.40.0 and above ECS: All versions Multi-Tenancy: 7.1.35.4 and above...

4.3CVSS4.8AI score0.04791EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/19 3:28 p.m.70 views

CVE-2025-1758

Progress LoadMaster CVE-2025-1758 is an improper input validation that can cause a buffer/stack overflow in the mangle executable. Affected: LoadMaster 7.2.40.0+, ECS all versions, Multi-Tenancy 7.1.35.4+. Impact ranges from high (NVD base 8.8, confidentiality/integrity/availability high) to pote...

8.8CVSS4.8AI score0.04791EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2025/03/19 3:28 p.m.141 views

CVE-2025-1758

Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: LoadMaster: 7.2.40.0 and above ECS: All versions Multi-Tenancy: 7.1.35.4 and above...

4.3CVSS0.04791EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:40 p.m.14 views

CVE-2022-36049

Flux2 is a tool for keeping Kubernetes clusters in sync with sources of configuration, and Flux's helm-controller is a Kubernetes operator that allows one to declaratively manage Helm chart releases. Helm controller is tightly integrated with the Helm SDK. A vulnerability found in the Helm SDK th...

7.7CVSS6.5AI score0.01045EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 9:41 p.m.11 views

CVE-2022-24817

Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via malicious Kubeconfig. In multi-tenancy deployments this can also...

9.9CVSS7.3AI score0.01075EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:0 p.m.14 views

CVE-2022-46167

Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to version 0.1.3, a ServiceAccount deployed in a Tenant Namespace, when granted with PATCH capabilities on its own Namespace, is able to edit it and remove the Owner Reference, breaking the reconciliation of the Capsule...

8.8CVSS6.7AI score0.00861EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:47 a.m.12 views

CVE-2024-7591

Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects: LoadMaster: 7.2.40.0 and above ECS: All versions Multi-Tenancy: 7.1.35.4 and above...

10CVSS7AI score0.43844EPSS
SaveExploits1References1
NVD
NVD
added 2024/09/05 6:15 p.m.50 views

CVE-2024-7591

Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects: LoadMaster: 7.2.40.0 and above ECS: All versions Multi-Tenancy: 7.1.35.4 and above...

10CVSS0.43844EPSS
SaveExploits1References2
OSV
OSV
added 2024/09/05 6:15 p.m.7 views

CVE-2024-7591

Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects: LoadMaster: 7.2.40.0 and above ECS: All versions Multi-Tenancy: 7.1.35.4 and above...

7.2CVSS6AI score0.43844EPSS
SaveExploits1References2
CVE
CVE
added 2024/09/05 5:16 p.m.132 views

CVE-2024-7591

The CVE-2024-7591 issue is an Improper Input Validation vulnerability in Kemp LoadMaster (and Progress LoadMaster) that enables OS command injection. Affected: LoadMaster 7.2.40.0+; ECS (all versions); Multi-Tenancy 7.1.35.4+. Impact: unauthenticated, remote command execution with high/critical i...

10CVSS8.4AI score0.43844EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2024/09/05 5:16 p.m.61 views

CVE-2024-7591 Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection

Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects: LoadMaster: 7.2.40.0 and above ECS: All versions Multi-Tenancy: 7.1.35.4 and above...

10CVSS0.43844EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/09/05 5:16 p.m.61 views

CVE-2024-7591 Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection

Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects: LoadMaster: 7.2.40.0 and above ECS: All versions Multi-Tenancy: 7.1.35.4 and above...

10CVSS7AI score0.43844EPSS
SaveExploits1References2
Rows per page
Query Builder