256 matches found
Fedora: Security Advisory for jackson-bom (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of component BOM in the macOS operating system allows a hacker to disclose sensitive information or cause a service failure.
The vulnerability of component BOM in the macOS operating system is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: scorecard, gitness, nuclei, src-fingerprint, pulumi-kubernetes-operator, gitsign, bom, go-licenses, goreleaser...
CVE-2023-49569 vulnerabilities
Vulnerabilities for packages: scorecard, goreleaser, pulumi-kubernetes-operator, nuclei, go-licenses, bom, src-fingerprint, gitsign, gitness...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: scorecard, gitness, nuclei, src-fingerprint, pulumi-kubernetes-operator, gitsign, bom, go-licenses, goreleaser...
GHSA-449P-3H89-PW88 vulnerabilities
Vulnerabilities for packages: scorecard, goreleaser, pulumi-kubernetes-operator, nuclei, go-licenses, bom, src-fingerprint, gitsign, gitness...
Three Ways To Supercharge Your Software Supply Chain Security
Section four of the "Executive Order on Improving the Nation's Cybersecurity" introduced a lot of people in tech to the concept of a "Software Supply Chain" and securing it. If you make software and ever hope to sell it to one or more federal agencies, you have to pay attention to this. Even if y...
GHSA-X5MR-P6V4-WP93 Field injection in the KirbyData text storage handler
TL;DR This vulnerability affects all Kirby sites that might have potential attackers in the group of authenticated Panel users or that allow external visitors to update a Kirby content file e.g. via a contact or comment form. Your Kirby sites are not affected if they don't allow write access for...
Information disclosure
Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 affects all Kirby sites that might have potential attackers in the group of authenticated Panel users or that allow external visitors to update a Kirby content file e.g. via a...
CVE-2023-38488 Kirby vulnerable to field injection in the KirbyData text storage handler
Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 affects all Kirby sites that might have potential attackers in the group of authenticated Panel users or that allow external visitors to update a Kirby content file e.g. via a...
CVE-2023-38488: Improper Neutralization of Delimiters
Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 affects all Kirby sites that might have potential attackers in the group of authenticated Panel users or that allow external visitors to update a Kirby content file e.g. via a...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the comliferaylayoutadminwebportletGroupPagesPortletbackURL parameter in the SEO configuration of the Layout module. An attacker can cause users to be redirected to arbitrary external URLs by tricking them into clickin...
Cross-site Request Forgery (CSRF)
Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the comliferaylayoutadminwebportletGroupPagesPortletbackURL parameter in the SEO configuration process. An attacker can execute arbitrary code by tricking a user into performing actions through crafte...
CVE-2023-2253 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, kubernetes-dashboard, bom, aactl, kpt...
CVE-2023-2253 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard, kpt, argocd-image-updater-fips, argocd-image-updater, aactl, bom...
GHSA-HQXW-F8MX-CPMW vulnerabilities
Vulnerabilities for packages: argocd-image-updater, kubernetes-dashboard, bom, aactl, kpt...
GHSA-HQXW-F8MX-CPMW vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard, kpt, argocd-image-updater-fips, argocd-image-updater, aactl, bom...
CVE-2023-28841 vulnerabilities
Vulnerabilities for packages: up, helm, ctop, apko, bom, ko, melange...