1944 matches found
GHSA-6H9X-9J5V-7W9H Rancher Fleet Helm Values are stored inside BundleDeployment in plain text
Impact A vulnerability has been identified when using Fleet to manage Helm charts where sensitive information is passed through BundleDeployment.Spec.Options.Helm.Values may be stored in plain text. This can result in: 1. Unauthorized disclosure of sensitive data: Any user with GET or LIST...
Rancher Fleet Helm Values are stored inside BundleDeployment in plain text
Impact A vulnerability has been identified when using Fleet to manage Helm charts where sensitive information is passed through BundleDeployment.Spec.Options.Helm.Values may be stored in plain text. This can result in: 1. Unauthorized disclosure of sensitive data: Any user with GET or LIST...
PT-2025-35331
Name of the Vulnerable Software and Affected Versions SUSE Fleet versions prior to v0.14.0 SUSE Fleet version v0.13.1 SUSE Fleet version v0.12.6 SUSE Fleet version v0.11.10 Description A vulnerability exists in SUSE Fleet when managing Helm charts, where sensitive information passed through...
CVE-2025-38561
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix PreauhHashValue race condition If client send multiple session setup requests to ksmbd, PreauhHashValue race condition could happen. There is no need to free sess-PreauhHashValue at session setup phase. It can be freed...
SUSE-SU-2025:02858-1 Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP7)
This update for the Linux Kernel 6.4.0-1507005 fixes several issues. The following security issues were fixed: - CVE-2025-38494: HID: core: do not bypass hidhwrawrequest bsc1247350. - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID bsc1247351. -...
Accelerating Secure Enterprise Kubernetes Adoption
Learn how LKE-E solves critical problems while providing streamlined adoption, operational simplicity, and cost efficiency at scale...
Linux Distros Unpatched Vulnerability : CVE-2020-6838
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In mruby 2.1.0, there is a use-after-free in hashvaluesat in mrbgems/mruby-hash-ext/src/hash-ext.c. CVE-2020-6838 Note that Nessus relies on the presence of the...
CVE-2024-53945
The KuWFi 4G AC900 LTE router 1.0.13 is vulnerable to command injection on the HTTP API endpoints /goform/formMultiApnSetting and /goform/atCmd. An authenticated attacker can execute arbitrary OS commands with root privileges via shell metacharacters in parameters such as pincode and cmds...
Malicious code in @crabas0npm/dolorum-at-debitis (npm)
The package @crabas0npm/dolorum-at-debitis was found to contain malicious code...
MAL-2025-7268 Malicious code in @crabas0npm/dolorum-at-debitis (npm)
The package @crabas0npm/dolorum-at-debitis was found to contain malicious code...
MAL-2025-7629 Malicious code in @crabas0npm2/at-nulla-architecto (npm)
The package @crabas0npm2/at-nulla-architecto was found to contain malicious code...
MAL-2025-9355 Malicious code in @supernpm2024/at-quidem-repellat-iusto (npm)
The package @supernpm2024/at-quidem-repellat-iusto was found to contain malicious code...
MAL-2025-7191 Malicious code in @crabas0npm/at-at-error-accusamus (npm)
The package @crabas0npm/at-at-error-accusamus was found to contain malicious code...
Malicious code in @dramateas/at-nam-vel-cum (npm)
The package @dramateas/at-nam-vel-cum was found to contain malicious code...
Malicious code in @crabas0npm/at-dicta-harum (npm)
The package @crabas0npm/at-dicta-harum was found to contain malicious code...
MAL-2025-7627 Malicious code in @crabas0npm2/assumenda-at-fuga (npm)
The package @crabas0npm2/assumenda-at-fuga was found to contain malicious code...
MAL-2025-9530 Malicious code in @teamteanpm2024/minus-sapiente-at (npm)
The package @teamteanpm2024/minus-sapiente-at was found to contain malicious code...
MAL-2025-7812 Malicious code in @dramateas/at-nam-vel-cum (npm)
The package @dramateas/at-nam-vel-cum was found to contain malicious code...