1666 matches found
Fedora 40 : prometheus-podman-exporter (2024-2f8a62d6d6)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-2f8a62d6d6 advisory. release 1.12.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
Fedora: Security Advisory (FEDORA-2024-1bae1999ba)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2024-2f8a62d6d6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 39 : prometheus-podman-exporter (2024-1bae1999ba)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-1bae1999ba advisory. release 1.12.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this iss...
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-fips, fulcio, kube-logging-logging-operator, protoc-gen-go-grpc, trivy-fips, cert-exporter-fips, terraform, kustomize-fips, metacontroller, nri-mssql, memcached-exporter, influx, stakater-reloader, nats-server, mc-fips, tfsec, kube-vip-fips,...
CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.10.0-12
CVE-2024-24786 affecting package prometheus-adapter for versions less than 0.10.0-12. A patched version of the package is available...
GitLab 13.2 < 13.6.7 / 13.7 < 13.7.7 / 13.8 < 13.8.4 (CVE-2021-22178)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack through the Prometheus integration. CVE-2021-22178 Note that Nessus has not teste...
GitLab 13.7 < 13.7.2 (CVE-2021-22166)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method CVE-2021-22166 Note that Nessus has not tested for this issue but has instead...
GHSA-XC3P-28HW-Q24G Grafana proxy Cross-site Scripting
Today we are releasing Grafana 8.3.5 and 7.5.15. This patch release includes MEDIUM severity security fix for XSS for Grafana. Release v.8.3.5, only containing security fixes: - Download Grafana 8.3.5 - Release notes Release v.7.5.15, only containing security fixes: - Download Grafana 7.5.15 -...
Security Bulletin: IBM Storage Fusion HCI is vulnerable to denial of service, authentication bypass, and incorrect privilege assignment due to Golang vulnerabilities.
Summary IBM Storage Fusion HCI uses Golang packages that may cause Fusion to be vulnerable to denial of service, authentication bypass, and incorrect privilege assignment. CVE-2018-20699, CVE-2023-48795, CVE-2022-21698, CVE-2021-41190, CVE-2023-39325, CVE-2022-29526, CVE-2023-45288. Vulnerability...
RHEL 7 : prometheus_client_golang (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - prometheus/clientgolang: Denial of service using InstrumentHandlerCounter CVE-2022-21698 Note that Nessus has not...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: prometheus-mysqld-exporter, pulumi-kubernetes-operator, kubernetes-dashboard-fips, docker-credential-acr-env, cue-fips, fulcio, kube-oidc-proxy, configmap-reload, kubecolor, kubernetes-ingress-defaultbackend, cert-exporter-fips, prometheus-redis-exporter-fips,...
CVE-2024-34045
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-countersININITIMSGCOUNTERProcedureCodeidE2setup-Increment...
CVE-2024-34046
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-sctpParams-e2tCountersINSUCCMSGCOUNTERProcedureCodeidRICsubscription-Increment...
CVE-2024-34045
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-countersININITIMSGCOUNTERProcedureCodeidE2setup-Increment...
Fedora 40 : golang-github-prometheus-prom2json (2023-14a33318b8)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-14a33318b8 advisory. Automatic update for golang-github-prometheus-prom2json-1.3.3-1.fc40. Changelog Sun Dec 3 2023 Mikel Olasagasti Uranga - 1.3.3-1 - Update to 1.3.3 -...
CVE-2024-34046
The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-sctpParams-e2tCountersINSUCCMSGCOUNTERProcedureCodeidRICsubscription-Increment...
CVE-2024-34045
CVE-2024-34045 affects the O-RAN E2T I-Release Prometheus metric Increment function. The vulnerability is a crash in sctpThread.cpp triggered when Increment() is called for message.peerInfo->counters[IN_INITI][MSG_COUNTER][ProcedureCode_id_E2setup]->Increment(). The dataset confirms this ca...
PT-2024-25663 · Unknown · O-Ran E2T I-Release
Name of the Vulnerable Software and Affected Versions: O-RAN E2T I-Release affected versions not specified Description: The issue concerns the O-RAN E2T I-Release Prometheus metric Increment function, which can crash in sctpThread.cpp. This crash occurs when the Increment function is called for...
PT-2024-25661 · Unknown · O-Ran E2T I-Release
Name of the Vulnerable Software and Affected Versions: O-RAN E2T I-Release affected versions not specified Description: The issue is related to a NULL pointer dereference in the buildPrometheusList function. This occurs because the peerInfo can be NULL. Recommendations: At the moment, there is no...