236 matches found
GHSA-C8G6-QRWH-M3VP NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow
Impact A vulnerability was identified in NeuVector, where the enforcer used environment variables CLUSTERRPCPORT and CLUSTERLANPORT to generate a command to be executed via popen, without first sanitising their values. The entry process of the enforcer container is the monitor process. When the...
NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow
Impact A vulnerability was identified in NeuVector, where the enforcer used environment variables CLUSTERRPCPORT and CLUSTERLANPORT to generate a command to be executed via popen, without first sanitising their values. The entry process of the enforcer container is the monitor process. When the...
PT-2025-43268
Name of the Vulnerable Software and Affected Versions NeuVector versions prior to 5.4.7 Description A critical issue exists in NeuVector where the enforcer component improperly handles environment variables CLUSTER RPC PORT and CLUSTER LAN PORT. These variables are used to construct shell command...
EUVD-2019-9347
Malware in sbrugna...
EUVD-2023-26778
Malicious code in bioql PyPI...
EUVD-2023-3007
Malicious code in bioql PyPI...
EUVD-2023-3055
Malicious code in bioql PyPI...
EUVD-2023-1385
Malicious code in bioql PyPI...
EUVD-2025-29523
Malicious code in bioql PyPI...
EUVD-2022-2173
Malicious code in bioql PyPI...
EUVD-2023-2662
Malicious code in bioql PyPI...
EUVD-2025-29463
Malicious code in bioql PyPI...
EUVD-2025-29462
Malicious code in bioql PyPI...
EUVD-2022-7175
Malicious code in bioql PyPI...
Use Of Default Credentials
github.com/neuvector/neuvector is vulnerable to Use of Default Credentials. The vulnerability is due to hardcoded default password due to the use of a fixed string as the default admin password, which can be exploited if not changed immediately after deployment, allowing attackers with network...
CVE-2025-8077
A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in admin account. If this password is not changed immediately after deployment, any workload with network access within the cluster could use the default...
CVE-2025-54467
When a Java command with password parameters is executed and terminated by NeuVector for Process rule violation the password will appear in the NeuVector security event log...
CVE-2025-8077
A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in admin account. If this password is not changed immediately after deployment, any workload with network access within the cluster could use the default...