321 matches found
GHSA-XCQ4-M2R3-CMRJ Trivy possibly leaks registry credential when scanning images from malicious registries
Impact If a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could result in the leakage of credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registr...
Trivy possibly leaks registry credential when scanning images from malicious registries
Impact If a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could result in the leakage of credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registr...
PT-2024-26372 · Docker +3 · Docker +3
Name of the Vulnerable Software and Affected Versions: Trivy versions prior to 0.51.2 Description: A malicious actor can trigger Trivy to leak credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registry AC...
Aqua Security Trivy 安全漏洞
Aqua Security Trivy is a comprehensive and versatile security scanner from Aqua Security. A security vulnerability exists in Aqua Security Trivy versions prior to 0.51.2, which stems from a potential leak of registry credentials when scanning images from a malicious registry...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: bank-vaults, conftest-fips, prometheus-adapter-fips, smarter-device-manager, tempo, regclient, prometheus-redis-exporter-fips, cadvisor, crane, hubble-ui-backend-fips, eksctl, vault-k8s-fips, wireguard-go, cfssl, falcoctl, falcosidekick-fips,...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094 Malicious code was discovered in the upstream ta...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094 Malicious code was discovered in the upstream ta...
CVE-2024-29018 vulnerabilities
Vulnerabilities for packages: conftest-fips, spire-server, cadvisor, kaniko, up, ctop, kubescape, prometheus, dagger, buf, loki, trivy, zot, buildkitd, ko, docker-compose, grype, kargo, syft, spire-server-fips, aactl, wolfictl, cilium-cli, conftest, crossplane, melange, cadvisor-fips, tkn...
GHSA-MQ39-4GV4-MVPX vulnerabilities
Vulnerabilities for packages: conftest-fips, spire-server, cadvisor, kaniko, up, ctop, kubescape, prometheus, dagger, buf, loki, trivy, zot, buildkitd, ko, docker-compose, grype, kargo, syft, spire-server-fips, aactl, wolfictl, cilium-cli, conftest, crossplane, melange, cadvisor-fips, tkn...
openSUSE: Security Advisory for trivy (openSUSE-SU-2023:0064-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for trivy (openSUSE-SU-2022:10022-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for trivy (openSUSE-SU-2022:10081-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: chartmuseum, kubevela, flux-source-controller, k8sgpt, helm-operator, helm-push, cilium-cli, k9s, kots, eksctl, trivy, zarf, zot, up, flux-helm-controller, kubescape...
GHSA-V53G-5GJP-272R vulnerabilities
Vulnerabilities for packages: flux-helm-controller, kots, zarf, zot, cilium-cli, helm-operator, k8sgpt, k9s, kubevela, helm-push, kubescape, up, eksctl, trivy, chartmuseum, flux-source-controller...
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: chartmuseum, kubevela, flux-source-controller, k8sgpt, helm-operator, helm-push, cilium-cli, k9s, kots, eksctl, trivy, zarf, zot, up, flux-helm-controller, kubescape...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: cri-tools, docker-machine-driver-harvester, kubevela, vexctl, cadvisor, bom, crane, docker-credential-gcr, slsa-verifier, eksctl, falcoctl, ctop, flux, ko-fips, policy-controller-fips, goreleaser, kubescape, rancher-machine, chartmuseum, dagger, timoni, falcoctl-fips...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: cri-tools, docker-machine-driver-harvester, kubevela, vexctl, cadvisor, bom, crane, docker-credential-gcr, slsa-verifier, eksctl, falcoctl, ctop, flux, ko-fips, policy-controller-fips, goreleaser, kubescape, rancher-machine, chartmuseum, dagger, timoni, falcoctl-fips...
GHSA-M3R6-H7WV-7XXV vulnerabilities
Vulnerabilities for packages: conftest, guac, zot, scorecard, trivy, docker, kubescape, buildkitd, kaniko, skaffold...