5216 matches found
GO-2022-0547 aws-iam-authenticator allow-listed IAM identity may be able to modify their username, escalate privileges before v0.5.9 in sigs.k8s.io/aws-iam-authenticator
aws-iam-authenticator allow-listed IAM identity may be able to modify their username, escalate privileges before v0.5.9 in sigs.k8s.io/aws-iam-authenticator...
kernel security update
An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
RLSA-2024:5101 Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: powerpc: Fix access beyond end of drmem array CVE-2023-52451 kernel: efivarfs: force RO when remounting if SetVariable is not supported CVE-2023-52463 kernel: tracing: Restructure...
ALBeast: Misconfiguration Flaw Exposes 15,000 AWS Load Balancers to Risk
ALBeast is a critical vulnerability that allows attackers to bypass authentication and authorization in AWS ALB-based applications. Learn…...
An AWS Configuration Issue Could Expose Thousands of Web Apps
Amazon has updated its instructions for how customers should more securely implement AWS's traffic-routing service known as Application Load Balancer, but it's not clear everyone will get the memo...
Detecting AWS Account Compromise: Key Indicators in CloudTrail Logs for Stolen API Keys
As cloud infrastructure becomes the backbone of modern enterprises, ensuring the security of these environments is paramount. With AWS Amazon Web Services still being the dominant cloud it is important for any security professional to know where to look for signs of compromise. AWS CloudTrail...
CVE-2024-42006
Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure...
CVE-2024-42006
CVE-2024-42006 affects Keyfactor AWS Orchestrator up to version 2.0, with an information-disclosure vulnerability reported across multiple feeds. The Red/PRC sources corroborate an information disclosure issue but do not provide concrete exploit vectors or technical root-cause specifics in the su...
CVE-2024-42006
Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure...
CVE-2024-42006
Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure...
GHSA-VWF8-Q6FW-4WCM vulnerabilities
Vulnerabilities for packages: hubble, cilium-cli, hubble-ui...
Attackers Exploit Public .env Files to Breach Cloud Accounts in Extortion Campaign
A large-scale extortion campaign has compromised various organizations by taking advantage of publicly accessible environment variable files .env that contain credentials associated with cloud and social media applications. "Multiple security missteps were present in the course of this campaign,...
CVE-2024-43810
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin...
CVE-2024-43810
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin...
CVE-2024-42486 vulnerabilities
Vulnerabilities for packages: hubble, cilium-cli, hubble-ui...
CVE-2024-43810
CVE-2024-43810 : JetBrains TeamCity prior to version 2024.07.1 contains a reflected XSS vulnerability in the AWS Core plugin . The issue is scoped to TeamCity installations using affected plugin code before the 2024.07.1 update. Public details describe the vulnerability as reflected XSS, with no ...
CVE-2024-43810
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin...
EUVD-2024-40461
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin...