PT-2023-18601 · Suse · Kubewarden-Controller

Name of the Vulnerable Software and Affected Versions: SUSE kubewarden kubewarden-controller versions prior to 1.6.0 Description: An Improper Privilege Management issue allows attackers to read arbitrary secrets if they gain access to the ServiceAccount kubewarden-controller. Recommendations: For...

SUSE CVE-2023-22645

An Improper Privilege Management vulnerability in SUSE kubewarden allows attackers to read arbitrary secrets if they get access to the ServiceAccount kubewarden-controller This issue affects: SUSE kubewarden kubewarden-controller versions prior to 1.6.0...

SUSE CVE-2018-18264

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster...

HTCondor 安全漏洞

HTCondor is a workload management system. HTCondor has a security vulnerability that could be exploited by an attacker to take control of other users' jobs or read secrets from their data...

CVE-2021-27328

Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such as a password or decryption key...

USN-3489-1 db5.3 vulnerability

It was discovered that Berkeley DB incorrectly handled certain configuration files. An attacker could possibly use this issue to read sensitive information...

USN-2816-1 python-django vulnerability

Ryan Butterfield discovered that Django incorrectly handled the date template filter. A remote attacker could possibly use this issue to obtain secrets from application settings...