235 matches found
CVE-2022-32149 vulnerabilities
Vulnerabilities for packages: kubeflow, php-fpmexporter, hey, vt-cli, k3d, grpcurl, gitleaks, dynamic-localpv-provisioner, terraform-provider-sendgrid...
GHSA-GWC9-M7RH-J2WW vulnerabilities
Vulnerabilities for packages: k3d, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kubeflow-fips...
GHSA-GWC9-M7RH-J2WW vulnerabilities
Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, k3d, terraform-provider-sendgrid...
GHSA-69CG-P879-7622 vulnerabilities
Vulnerabilities for packages: kubeflow, hey, k3d, wireguard-go, grpcurl, kubeflow-katib, dynamic-localpv-provisioner, terraform-provider-sendgrid...
GHSA-69CG-P879-7622 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, k3d, kubeflow, kube-state-metrics, grpcurl, dynamic-localpv-provisioner, wireguard-go, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, hey, kubeflow-fips...
CVE-2022-27664 vulnerabilities
Vulnerabilities for packages: kubeflow, hey, k3d, wireguard-go, grpcurl, kubeflow-katib, dynamic-localpv-provisioner, terraform-provider-sendgrid...
CVE-2022-27664 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, k3d, kubeflow, kube-state-metrics, grpcurl, dynamic-localpv-provisioner, wireguard-go, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, hey, kubeflow-fips...
CVE-2021-43565 vulnerabilities
Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, k3d, terraform-provider-sendgrid...
CVE-2021-43565 vulnerabilities
Vulnerabilities for packages: k3d, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kubeflow-fips...
CVE-2022-1805
When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero Clients. The issue could be exploited by an adversary that places a MITM Man in the Middle between a zero client and AWS session provisioner in the network. This issue is only...
CVE-2022-1805
When connecting to Amazon Workspaces, the SHA256 presented by AWS connection provisioner is not fully verified by Zero Clients. The issue could be exploited by an adversary that places a MITM Man in the Middle between a zero client and AWS session provisioner in the network. This issue is only...
AWS Connection Session Provisioner’s SHA256 hash is not fully verified by PCoIP Zero Clients
HP has provided updated versions of Tera2 Zero Client firmware that remediate vulnerabilities found in firmware version 22.04 and earlier. Products can be updated or replaced with the latest release by downloading from the Teradici website and following standard installation or update instruction...
GHSA-P782-XGP4-8HR8 vulnerabilities
Vulnerabilities for packages: kubeflow, ctop, k3d, kind, grpcurl, dynamic-localpv-provisioner, terraform-provider-sendgrid...
GHSA-P782-XGP4-8HR8 vulnerabilities
Vulnerabilities for packages: k3d, kubeflow, grpcurl, dynamic-localpv-provisioner, ctop, terraform-provider-sendgrid, kind, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips...
Malicious code in aws-greengrass-provisioner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 496decc383bda63b7c118bc82ff28dcb006789eaec77d1226416debec9a9dc20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in webhook-provisioner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697ea38acf4a193645bda704d70e5d5e598227df1456666b6997d1c09ffcbacd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7096 Malicious code in webhook-provisioner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697ea38acf4a193645bda704d70e5d5e598227df1456666b6997d1c09ffcbacd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-F4W6-3RH6-6Q4Q vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-provisioner...
GHSA-F4W6-3RH6-6Q4Q Kubernetes CSI Sidecar Containers Can Allow Unauthorized Data Access
Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...