Lucene search
+L

23308 matches found

Tenable Nessus
Tenable Nessus
•added 2025/09/04 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2021-21303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Helm is open-source software which is essentially The Kubernetes Package Manager. Helm is a tool for managing Charts. Charts are packages of pre-configured...

6.8CVSS7.2AI score0.01086EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/04 12:00 a.m.•25 views

Argo CD information leakage vulnerability

Argo CD is an Argo open source declarative GitOps continuous delivery tool for Kubernetes. An information disclosure vulnerability exists in Argo CD that stems from a project-level permission API token that can retrieve sensitive repository credentials. The following versions are affected: versio...

9.9CVSS8.3AI score0.05655EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/04 12:00 a.m.•4 views

CVE-2025-55190: Exposure of Sensitive Information to an Unauthorized Actor

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwor...

9.9CVSS8.4AI score0.05655EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/09/04 12:00 a.m.•13 views

PT-2025-36094

Name of the Vulnerable Software and Affected Versions Argo CD versions 2.13.0 through 2.13.8 Argo CD versions 2.14.0 through 2.14.15 Argo CD versions 3.0.0 through 3.0.12 Argo CD version 3.1.0-rc1 through 3.1.1 Description Argo CD, a declarative GitOps continuous delivery tool for Kubernetes,...

9.9CVSS8.4AI score0.05655EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2025/09/03 10:31 p.m.•17 views

This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable.

...

6.5CVSS7.7AI score0.00703EPSS
SaveExploits0
Veeam
Veeam
•added 2025/09/03 12:00 a.m.•38 views

Required Package Changes in Solaris 10 and 11.3

Challenge Solaris 10 does not include the CA certificates required for S3 repository connections, nor does it natively provide OpenSSH with modern features. For secure S3 access and SSH communications with the Veeam Software Appliance VSA for Veeam Backup & Replication, you must install both...

6.8AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/09/03 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2013-1910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yum does not properly handle bad metadata, which allows an attacker to cause a denial of service and possibly have other unspecified impact via a Trojan horse...

9.8CVSS8.3AI score0.02598EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/02 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2025-3642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. A remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default, this was only available to teachers an...

8.8CVSS8AI score0.01058EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/30 6:20 p.m.•13 views

CVE-2025-5101

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that under certain conditions could have allowed an authenticated attacker to distribute malicious code that appears harmless in the web interface by taking advantage of...

5CVSS5.9AI score0.00128EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:18 p.m.•18 views

CVE-2025-34161

Coolify versions prior to v4.0.0-beta.420.7 are vulnerable to a remote code execution vulnerability in the project deployment workflow. The platform allows authenticated users, with low-level member privileges, to inject arbitrary shell commands via the Git Repository field during project creatio...

9.4CVSS6.9AI score0.02963EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:17 p.m.•22 views

CVE-2025-8447

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed users with access to any repository to retrieve limited code content from another repository by creating a diff between the repositories. To exploit this vulnerability, an attacker needed to know the...

7CVSS5.9AI score0.0031EPSS
SaveExploits0References1
osv_bit
osv_bit
•added 2025/08/30 9:04 a.m.•22 views

BIT-GITLAB-2025-5101 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that under certain conditions could have allowed an authenticated attacker to distribute malicious code that appears harmless in the web interface by taking advantage of...

5CVSS5.8AI score0.00128EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2022-1188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions starting from 14.8 before 14.8.5, all version...

5.3CVSS5.7AI score0.01384EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2024-8041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Denial of Service DoS issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1. A deni...

6.5CVSS5.7AI score0.00462EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2023-0756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11...

8CVSS7.8AI score0.01008EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2020-13309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SSRF attack through the repository mirrori...

8.8CVSS7.6AI score0.01265EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2021-22200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal...

7.5CVSS6.9AI score0.01003EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2023-1098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from...

5.8CVSS5.3AI score0.00942EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2022-42906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerline-gitstatus aka Powerline Gitstatus before 1.3.2 allows arbitrary code execution. git repositories can contain per-repository configuration that changes...

7.8CVSS7.8AI score0.00477EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2020-10954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab through 12.9 is affected by a potential DoS in repository archive download. CVE-2020-10954 Note that Nessus relies on the presence of the package as...

7.5CVSS6.4AI score0.01148EPSS
SaveExploits0References2
Rows per page
Query Builder