1013 matches found
CVE-2024-34144
A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377ae and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the contex...
CVE-2024-34145
A sandbox bypass vulnerability involving sandbox-defined classes that shadow specific non-sandbox-defined classes in Jenkins Script Security Plugin 1335.vf07d9ce377ae and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox...
CVE-2024-34144
A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377ae and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the contex...
CVE-2024-34145
A sandbox bypass vulnerability involving sandbox-defined classes that shadow specific non-sandbox-defined classes in Jenkins Script Security Plugin 1335.vf07d9ce377ae and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox...
CVE-2024-4340 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-sqlparse...
RHEL 8 : Red Hat OpenShift Pipelines Client tkn for 1.12.1 (RHSA-2023:6059)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6059 advisory. Red Hat OpenShift Pipelines Client, tkn for the 1.12.1 release, provides a CLI tool to interact with the Pipelines and Triggers components...
RHEL 8 : openshift-pipelines-client (RHSA-2023:6781)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6781 advisory. Red Hat OpenShift Pipelines Client, tkn for the 1.11.2 release, provides a CLI tool to interact with the Pipelines and Triggers components...
RHEL 8 : Red Hat OpenShift Pipelines Client tkn for 1.10.6 (RHSA-2023:7699)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:7699 advisory. Red Hat OpenShift Pipelines Client, tkn for the 1.10.6 release, provides a CLI tool to interact with the Pipelines and Triggers components...
GHSA-PXHW-596R-RWQ5 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines, argocd-image-updater, spark-operator, nodetaint, kubernetes-csi-driver-hostpath, ip-masq-agent, kubernetes, local-static-provisioner, kubernetes-dns-node-cache...
PT-2024-5975 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.0 through 17.0.4 GitLab CE/EE versions 17.1 through 17.1.2 GitLab CE/EE versions 17.2 through 17.2.0 Description: A resource misdirection vulnerability in GitLab allows an attacker to craft a repository import in such...
CVE-2024-3177 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines, argocd-image-updater, spark-operator, nodetaint, kubernetes-csi-driver-hostpath, ip-masq-agent, kubernetes, local-static-provisioner, kubernetes-dns-node-cache...
UBUNTU-CVE-2024-26921
In the Linux kernel, the following vulnerability has been resolved: inet: inetdefrag: prevent sk release while still in use iplocalout and other functions can pass skb-sk as function argument. If the skb is a fragment and reassembly happens before such function call returns, the sk must not be...
GHSA-2M57-HF25-PHGG vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-sqlparse...
GHSA-2M57-HF25-PHGG vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-sqlparse...
Denial Of Service (DoS)
org.elasticsearch:elasticsearch is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of deeply nested pipelines during document processing which can cause the Elasticsearch node to crash, resulting in Denial Of Service...
Elasticsearch 8.13.0 / 7.17.19 Security Update (ESA-2024-06)
Elasticsearch Uncontrolled Resource Consumption vulnerability ESA-2024-06 A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash. Affected Versions: Elasticsearch versions on or after 7.0.0 and...
Insecure Variable Substitution
github.com/go-vela/server is vulnerable to Insecure Variable Substitution. This vulnerability is due to the use of variable substitution combined with insensitive fields such as parameters, image, and entrypoint in Vela pipelines. The vulnerability allows an attacker to bypass log masking and...
GHSA-CXJH-PQWP-8MFP vulnerabilities
Vulnerabilities for packages: lerna, opensearch-dashboards, kibana, kubeflow-centraldashboard, kubeflow-pipelines, configurable-http-proxy, opensearch-dashboards-fips...