1013 matches found
CVE-2024-7037 Arbitrary File Write/Delete Leading to RCE in open-webui/open-webui
In version v0.3.8 of open-webui/open-webui, the endpoint /api/pipelines/upload is vulnerable to arbitrary file write and delete due to unsanitized file.filename concatenation with CACHEDIR. This vulnerability allows attackers to overwrite and delete system files, potentially leading to remote cod...
Important: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.16.0 release
Red Hat OpenShift Pipelines 1.16.0 has been released. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible, Kubernetes-native, open-source CI/CD framework which enables automating deployments...
Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Client tkn for 1.16.0 release
Red Hat OpenShift Pipelines Client tkn for 1.16.0 has been released. Red Hat OpenShift Pipelines Client, tkn for the 1.16.0 release, provides a CLI tool to interact with the Pipelines and Triggers components provided by Red Hat OpenShift Pipelines 1.16.0 The tkn CLI tool is delivered as an RPM...
PT-2024-6775 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.5 through 17.2.9 GitLab EE versions 17.3 through 17.3.5 GitLab EE versions 17.4 through 17.4.2 Description: The issue is related to errors in access control, allowing a remote attacker to run Continuous...
RHSA-2023:6059 Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.12.1 release and security update
Bulletin has no description...
RHSA-2023:7699 Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update
Bulletin has no description...
janis-pipelines (>=0.4.0 <=0.13.1), janis-pipelines-bioinformatics (>=0.0.1 <=0.12.2) +5 more potentially affected by CVE-2024-42346 via galaxy-auth (=22.1.1)
galaxy-auth PYPI version =22.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on galaxy-auth and may be impacted: - janis-pipelines =0.4.0, =0.0.1, =0.13.0, =0.6.0, =0.1.0, =0.8.0, =0.1.0, =0.12.0 Source cves: CVE-2024-42346 Source advisory:...
GHSA-M6FV-JMCG-4JFG vulnerabilities
Vulnerabilities for packages: argo-workflows, sqlpad, kubeflow-centraldashboard, thingsboard, kubeflow-pipelines...
GHSA-M6FV-JMCG-4JFG vulnerabilities
Vulnerabilities for packages: sqlpad, thingsboard, kubeflow-pipelines, argo-workflows, kubeflow-centraldashboard...
GHSA-CM22-4G7W-348P vulnerabilities
Vulnerabilities for packages: sqlpad, kubeflow-pipelines, argo-workflows, kubeflow-centraldashboard...
GHSA-CM22-4G7W-348P vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, sqlpad, argo-workflows, kubeflow-centraldashboard...
GHSA-QW6H-VGH9-J6WX vulnerabilities
Vulnerabilities for packages: sqlpad, kubeflow-pipelines, argo-workflows, kubeflow-centraldashboard...
GHSA-QW6H-VGH9-J6WX vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, sqlpad, argo-workflows, kubeflow-centraldashboard...
CVE-2024-45590 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, sqlpad, argo-workflows, kubeflow-centraldashboard...
GHSA-QWCR-R2FM-QRC7 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, sqlpad, argo-workflows, kubeflow-centraldashboard...
CVE-2024-43796 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, sqlpad, argo-workflows, kubeflow-centraldashboard...
CVE-2024-43799 vulnerabilities
Vulnerabilities for packages: sqlpad, thingsboard, kubeflow-pipelines, argo-workflows, kubeflow-centraldashboard...
CVE-2024-43800 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, sqlpad, argo-workflows, kubeflow-centraldashboard...