730 matches found
CVE-2024-28893
CVE-2024-28893 affects HP SoftPaqs. The issue enables potential arbitrary code execution when a SoftPaq configuration file is modified after extraction, as described by HP’s advisory. The underlying impact is high with local attack vector, requiring user interaction and elevated privileges, and c...
CVE-2024-3154 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib-fips, cadvisor, buildah, opentelemetry-collector-contrib, cadvisor-fips, grype, kubernetes, neuvector-scanner, wolfictl, ctop...
GHSA-PXHW-596R-RWQ5 vulnerabilities
Vulnerabilities for packages: ip-masq-agent, local-static-provisioner, nodetaint, kubernetes-dns-node-cache, argocd-image-updater-fips, kubeflow-pipelines, spark-operator, rancher-webhook-fips, kubernetes, aws-efs-csi-driver-fips, rancher-webhook, kubernetes-csi-driver-hostpath,...
CVE-2024-32650 vulnerabilities
Vulnerabilities for packages: cargo-audit, wasmcloud, xh, pgcat, samply, kdash...
MGASA-2024-0136 Updated puppet packages fix security vulnerabilities
The updated packages fix missing requires for puppet and fix commands in systemd units...
GHSA-MR82-8J83-VXMV vulnerabilities
Vulnerabilities for packages: datadog-agent...
CVE-2024-3772 vulnerabilities
Vulnerabilities for packages: datadog-agent...
GHSA-4V7X-PQXF-CX7M vulnerabilities
Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, influx, cloudflared, crossplane-provider-aws-firehose, flux-source-controller, falcosidekick-fips, oauth2-proxy, gitness, prometheus-nats-exporter, k8ssandra-operator, local-path-provisioner, kubernetes-csi-external-provisioner...
CVE-2023-45288 vulnerabilities
Vulnerabilities for packages: spire-server, ko, nri-redis, paranoia, metacontroller, crossplane-provider-aws-kms, dockerize, secrets-store-csi-driver-provider-azure, runc, up, helm, nri-jmx, atlantis, aws-load-balancer-controller, velero, crossplane-provider-azure-sql, kyverno-policy-reporter-ui,...
MGASA-2024-0093 Updated clojure packages fix security vulnerability
An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service DoS via the clojure.core$partial$fn5920 function. CVE-2024-22871...
GHSA-592J-995H-P23J vulnerabilities
Vulnerabilities for packages: ruby, jruby...
CVE-2024-29018 vulnerabilities
Vulnerabilities for packages: aactl, trivy, loki, spire-server-fips, syft, tkn, up, wolfictl, dagger, buf, cilium-cli, zot, conftest-fips, grype, kargo, kaniko, crossplane, melange, conftest, docker-compose, cadvisor-fips, ko, buildkitd, kubescape, prometheus, spire-server, cadvisor, ctop...
GHSA-G623-JCGG-MHMM vulnerabilities
Vulnerabilities for packages: argo-cd, argo-cd-fips...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: tkn, kubernetes-dashboard-fips, falcoctl-fips, temporal-ui-server, kots, cloudflared, wolfictl, flux-source-controller, argo-workflows-fips, fulcio-fips, argo-workflows, oauth2-proxy, neuvector-fips, vault, ko-fips, grpc-health-probe, neuvector, kubernetes-dashboard,...
GHSA-HJ3V-M684-V259 vulnerabilities
Vulnerabilities for packages: external-secrets-fips, spire-server-fips, falcoctl, falcoctl-fips, mc-fips, boring-registry-fips, minio, mc, minio-fips, spire-server, boring-registry...
CVE-2024-27289 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, caddy-fips, trillian, trillian-fips, step-ca, kots, step, argo-workflows-fips, caddy, argo-workflows...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: k3s, src, wavefront-collector-for-kubernetes, kots, temporal-server, amass, argo-workflows-fips, falcosidekick-fips, kube-bench-fips, argo-workflows, caddy-fips, trillian, kine, step-ca, kube-bench, trillian-fips, caddy, temporal-server-fips, spicedb, step, ferretdb...
GHSA-H3M7-RQC4-7H9P vulnerabilities
Vulnerabilities for packages: spicedb...