CVE-2024-48874 Ruijie Reyee OS Server-Side Request Forgery

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could give attackers the ability to force Ruijie's proxy servers to perform any request the attackers choose. Using this, attackers could access internal services used by Ruijie and their internal cloud infrastructure via AWS cloud...

Moderate: Red Hat Security Advisory: ACS 4.6 enhancement and security update

Updated images are now available for Red Hat Advanced Cluster Security RHACS. The updated image includes new features and bug fixes. This release of RHACS 4.6 provides these new features: Support for ARM architecture in secured clusters Technology Preview Certifications for Red Hat Advanced Clust...

Expanded SOC Coverage Into AWS Environments with Rapid7 MXDR

Co-athored by Mikayla Wyman and Ryan Blanchard As organizations increasingly rely on AWS for scalability and innovation, the complexity of securing these environments grows. AWS offers a robust set of native services and a comprehensive ecosystem, but managing security signals and responding to...

Unable to encrypt Identity disk on AWS when using encrypted master image

The AMI was created using an encrypted instance\snapshot. However, the MCS machines appear with identity disk "Not encrypted"...

OPENSUSE-SU-2024:0384-1 Security update for zabbix

This update for zabbix fixes the following issues: Zabbix was updated to 6.0.33: - this version fixes CVE-2024-36461 and CVE-2024-22114 - New Features and Improvements + ZBXNEXT-9000 Changed query table for ASM disk group metrics in Oracle Database plugin and Oracle by ODBC template Agent Templat...

The Future of Serverless Security in 2025: From Logs to Runtime Protection

Serverless environments, leveraging services such as AWS Lambda, offer incredible benefits in terms of scalability, efficiency, and reduced operational overhead. However, securing these environments is extremely challenging. The core of current serverless security practices often revolves around...

How to use AWS Resource Control Policies

Unlock the Power of AWS Resource Control Policies: Enforce Security and Streamline Governance Across Your Organization...

Deloitte’s Cyber Cloud Managed Services (CCMS) - Enhance cyber posture with AWS and Wiz

Discover how Deloitte’s CCMS, powered by Wiz, enhances AWS cloud security with automated workflows, democratized risk management, and streamlined remediation to protect modern cloud environments...

Moderate Photon OS Security Update - PHSA-2024-4.0-0715

Updates of 'linux-aws', 'linux' packages of Photon OS have been released...

GHSA-27WF-5967-98GX vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, nodetaint, kubernetes-dns-node-cache, rancher-webhook, local-static-provisioner, local-static-provisioner-fips, kubeflow-pipelines, aws-efs-csi-driver-fips, argocd-image-updater-fips, kubernetes-dns-node-cache-fips, k8s-device-plugin,...

CVE-2024-10220 vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, nodetaint, kubernetes-dns-node-cache, rancher-webhook, local-static-provisioner, local-static-provisioner-fips, kubeflow-pipelines, aws-efs-csi-driver-fips, argocd-image-updater-fips, kubernetes-dns-node-cache-fips, k8s-device-plugin,...

com.amazonaws:aws-java-sdk-s3 Dependency in Bamboo Data Center and Server

This High severity com.amazonaws:aws-java-sdk-s3 Dependency vulnerability was introduced in versions 9.0.0, 9.1.0, and 9.2.1 of Bamboo Data Center and Server. This com.amazonaws:aws-java-sdk-s3 Dependency vulnerability, with a CVSS Score of 7.9 and a CVSS Vector of...

GHSA-R4PG-VG54-WXX4 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, aws-privateca-issuer, step-issuer, cert-manager-webhook-pdns, cert-exporter, cert-manager-cmctl...

Rapid7 Extends AWS Support to Include Coverage for Newly-Launched Resource Control Policies (RCPs)

In today’s cloud-first world, security and innovation go hand-in-hand. Rapid7 is excited to announce our support for Amazon Web Services’ AWS new Resource Control Policies RCPs, a powerful tool designed to bolster security controls for organizations using AWS infrastructure. As a launch partner f...

USN-7120-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - Network traffic control; CVE-2024-46800, CVE-2024-43882...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

GHSA-H7WQ-JJ8R-QM7P vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater-fips, aws-efs-csi-driver-fips, argocd-image-updater...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, aws-efs-csi-driver...

CVE-2024-0793 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, argocd-image-updater-fips, aws-efs-csi-driver-fips, argocd-image-updater...

CVE-2024-4343

A Python command injection vulnerability exists in the SagemakerLLM class's complete method within ./privategpt/components/llm/custom/sagemaker.py of the imartinez/privategpt application, versions up to and including 0.3.0. The vulnerability arises due to the use of the eval function to parse a...