7517 matches found
CVE-2024-47827
A flaw was found in Argo Workflows. Due to a race condition in a global variable, the Argo Workflows controller can crash on command by any user with access to execute a workflow, which can lead to a denial of service...
Wiz Expands Runtime Protection to Serverless Containers
Wiz extends its cloud-native runtime sensor to secure serverless containers, providing deep visibility, blocking, and hunting capabilities for AWS Fargate and Azure Container Apps...
CVE-2024-9302: Weak Password Recovery Mechanism for Forgotten Password
The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.3.7. This is due to the verifyotpforgotpassword and updatepassword functions not having enough controls to preve...
CVE-2022-49003
A vulnerability was found in the Linux kernel's NVMe driver, involving a race condition in multipath configurations with RDMA connections. The nvmenshead list that tracks NVMe namespaces is not properly synchronized with the SRCU lock in the nvmempathrevalidatepaths function. This can cause a...
Malware in native-module2
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
This Week in Spring - October 22nd, 2024
Hi, Spring fans! Welcome to another installment of This Week in Spring. I write this to you in an Uber speeding down the autobahn near Frankfurt, Germany. What a time to be alive! At the rate this driver's going, I won't have much time to write this before we've arrived, so let's dive right into...
Fedora: Security Advisory (FEDORA-2024-ff98facbc6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-bf524bf5c0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: rust-rustls-native-certs-0.8.0-1.fc40
Rustls-native-certs allows rustls to use the platform native certificate store...
[SECURITY] Fedora 40 Update: rust-rustls-native-certs0.7-0.7.3-1.fc40
Rustls-native-certs allows rustls to use the platform native certificate store...
[SECURITY] Fedora 39 Update: rust-rustls-native-certs-0.8.0-1.fc39
Rustls-native-certs allows rustls to use the platform native certificate store...
[SECURITY] Fedora 39 Update: rust-rustls-native-certs0.7-0.7.3-1.fc39
Rustls-native-certs allows rustls to use the platform native certificate store...
Fedora 39 : rust-hyper-rustls / rust-reqwest / rust-rustls-native-certs / etc (2024-ff98facbc6)
The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-ff98facbc6 advisory. - Update the hyper-rustls crate to version 0.27.3. - Update the reqwest crate to version 0.12.8. - Update the rustls-native-certs crate to version 0.8.0 and...
Fedora 40 : rust-hyper-rustls / rust-reqwest / rust-rustls-native-certs / etc (2024-bf524bf5c0)
The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-bf524bf5c0 advisory. - Update the hyper-rustls crate to version 0.27.3. - Update the reqwest crate to version 0.12.8. - Update the rustls-native-certs crate to version 0.8.0 and...
Gartner 2024 CNAPP Market Guide Insights for Leaders
As businesses increasingly pivot to cloud-native applications, the landscape of cybersecurity becomes ever more challenging...
Malicious code in react-native-playstation (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9793 Malicious code in react-native-playstation (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9792 Malicious code in react-native-community (npm)
--- -= Per source details. Do not edit below this line.=-...