461 matches found
GHSA-XCQ4-M2R3-CMRJ Trivy possibly leaks registry credential when scanning images from malicious registries
Impact If a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could result in the leakage of credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registr...
Trivy possibly leaks registry credential when scanning images from malicious registries
Impact If a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could result in the leakage of credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registr...
PT-2024-26372 · Docker +3 · Docker +3
Name of the Vulnerable Software and Affected Versions: Trivy versions prior to 0.51.2 Description: A malicious actor can trigger Trivy to leak credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registry AC...
Aqua Security Trivy 安全漏洞
Aqua Security Trivy is a comprehensive and versatile security scanner from Aqua Security. A security vulnerability exists in Aqua Security Trivy versions prior to 0.51.2, which stems from a potential leak of registry credentials when scanning images from a malicious registry...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: aws-flb-firehose-fips, mods, render-template, cadvisor-fips, eck-operator, dex-k8s-authenticator, kind, smarter-device-manager-fips, flux-image-reflector-controller, spicedb, libnvidia-container, tekton-chains, kubernetes-dashboard-fips, kaf, influx,...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094 Malicious code was discovered in the upstream ta...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094 Malicious code was discovered in the upstream ta...
CVE-2024-29018 vulnerabilities
Vulnerabilities for packages: zot, cadvisor-fips, kargo, dagger, cilium-cli, spire-server-fips, up, conftest, syft, docker-compose, tkn, buf, crossplane, buildkitd, prometheus, grype, kubescape, aactl, conftest-fips, ko, loki, melange, trivy, wolfictl, spire-server, cadvisor, ctop, kaniko...
GHSA-MQ39-4GV4-MVPX vulnerabilities
Vulnerabilities for packages: zot, cadvisor-fips, kargo, dagger, cilium-cli, spire-server-fips, up, conftest, syft, docker-compose, tkn, buf, crossplane, buildkitd, prometheus, grype, kubescape, aactl, conftest-fips, ko, loki, melange, trivy, wolfictl, spire-server, cadvisor, ctop, kaniko...
openSUSE: Security Advisory for trivy (openSUSE-SU-2022:10022-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for trivy (openSUSE-SU-2023:0064-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for trivy (openSUSE-SU-2022:10081-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-R53H-JV2G-VPX6 vulnerabilities
Vulnerabilities for packages: chartmuseum, trivy, zot, zarf, flux-source-controller, flux-helm-controller, cilium-cli, up, kubevela, kubescape, k8sgpt, helm-operator, eksctl, helm-push, kots, k9s...
GHSA-V53G-5GJP-272R vulnerabilities
Vulnerabilities for packages: zarf, trivy, up, helm-operator, eksctl, cilium-cli, k9s, kubevela, zot, kots, chartmuseum, kubescape, helm-push, flux-helm-controller, k8sgpt, flux-source-controller...
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: chartmuseum, trivy, zot, zarf, flux-source-controller, flux-helm-controller, cilium-cli, up, kubevela, kubescape, k8sgpt, helm-operator, eksctl, helm-push, kots, k9s...
GHSA-XW73-RW38-6VJC vulnerabilities
Vulnerabilities for packages: zot, cadvisor-fips, falcoctl-fips, flux, zarf, policy-controller, flux-image-reflector-controller, kargo, scorecard, slsa-verifier, tekton-chains, dagger, skopeo, k3s, up, falcoctl, newrelic-infrastructure-agent, k8sgpt, cri-tools, docker-machine-driver-harvester,...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: zot, cadvisor-fips, falcoctl-fips, flux, zarf, policy-controller, flux-image-reflector-controller, kargo, scorecard, slsa-verifier, tekton-chains, dagger, skopeo, k3s, up, falcoctl, newrelic-infrastructure-agent, k8sgpt, cri-tools, docker-machine-driver-harvester,...
GHSA-M3R6-H7WV-7XXV vulnerabilities
Vulnerabilities for packages: trivy, docker, scorecard, zot, guac, buildkitd, skaffold, kaniko, kubescape, conftest...