CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, kubernetes-csi-driver-hostpath, kubernetes, ip-masq-agent, nodetaint, argocd-image-updater, spark-operator, kubeflow-pipelines, aws-efs-csi-driver, local-static-provisioner...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, k3s, pgpool2exporter, eksctl, protoc-gen-go-grpc, spire-server, zarf, thanos-operator, certificate-transparency, aws-efs-csi-driver, falcoctl, minio, dex, litefs, policy-controller, smarter-device-manager, gh,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, crossplane-provider-aws-rds, conftest-fips, metrics-server-fips, pulumi-language-dotnet, node-problem-detector, gitsign, k8sgpt, crossplane-provider-azure, metrics-server, step-ca, nats, nri-kubernetes, terraform-provider-google, tflint,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: nodetaint, aws-ebs-csi-driver, aws-efs-csi-driver, prometheus-adapter, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, spark-operator, ip-masq-agent...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, ip-masq-agent, nodetaint, prometheus-adapter, spark-operator, aws-efs-csi-driver...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: nodetaint, aws-ebs-csi-driver, aws-efs-csi-driver, prometheus-adapter, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, spark-operator, ip-masq-agent...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter, kpt, azure-aad-pod-identity-mic, metrics-server-fips, dive, flux-notification-controller, prometheus-adapter, atlantis-fips, pulumi-language-dotnet, node-problem-detector, configmap-reload-fips, apko, k8sgpt, crossplane-provider-azure,...

CVE-2023-41041 User session is still usable after logout in graylog2-server

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss,...

GHSA-C7FC-CM7P-92R2 Openstack ironic-inspector has SQL injection vulnerability in node_cache

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

CVE-2020-13949 vulnerabilities

Vulnerabilities for packages: trino, automq-fips, automq, druid...

The vulnerability of the node_cache.find_node() function in the Ironic Inspector daemon, a hardware self-analysis tool for the OpenStack cloud service creation platform, allows a malicious actor to trigger a service failure.

The vulnerability of the nodecache.findnode function in the Ironic Inspector hardware self-analysis daemon of the OpenStack SDN platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow a malicious actor to cause service...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...

openstack-ironic-inspector SQL Injection Vulnerability

openstack-ironic-inspector is a hardware inspection daemon. The program is mainly used to inspect the hardware properties of nodes managed by OpenStack Ironic. A SQL injection vulnerability exists in the 'nodecache.findnode' function in openstack-ironic-inspector. The vulnerability stems from a...

DEBIAN-CVE-2019-10141

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

PYSEC-2019-152

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

UBUNTU-CVE-2019-10141

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...