GHSA-JFVP-7X6P-H2PV vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, opentelemetry-collector-contrib, cadvisor, syft, grype, runc, kubernetes, buildah, neuvector-scanner, grafana-alloy, podman, docker, k3s, ctop...

CVE-2024-45310 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, opentelemetry-collector-contrib, cadvisor, syft, grype, runc, kubernetes, buildah, neuvector-scanner, grafana-alloy, podman, docker, k3s, ctop...

OPENSUSE-SU-2024:14121-1 cadvisor-0.49.1-1.1 on GA media

These are all security issues fixed in the cadvisor-0.49.1-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-2CGQ-H8XW-2V5J vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, cadvisor, ctop, neuvector-scanner, buildah, grype, wolfictl, opentelemetry-collector-contrib-fips, kubernetes, cadvisor-fips...

GHSA-C5PJ-MQFH-RVC3 vulnerabilities

Vulnerabilities for packages: docker...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, cadvisor, ctop, neuvector-scanner, buildah, grype, wolfictl, opentelemetry-collector-contrib-fips, kubernetes, cadvisor-fips...

Google cAdvisor REST API Improper Access Control Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Google cAdvisor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the REST API endpoint, which listens on TCP port 8080 by default. The issue...

Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. (CVE-2024-29964)

Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files. An unprivileged attacker who gains access to the server can read sensitive information from these files...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: cilium-cli, melange, ko, syft, cadvisor, trivy, grype, wolfictl, cadvisor-fips, loki, kubescape, docker-compose, kaniko, conftest-fips, prometheus, buf, crossplane, buildkitd, zot, tkn, ctop, aactl, up, kargo, conftest, spire-server, spire-server-fips, dagger...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: cilium-cli, melange, ko, syft, cadvisor, trivy, grype, wolfictl, cadvisor-fips, loki, kubescape, docker-compose, kaniko, conftest-fips, prometheus, buf, crossplane, buildkitd, zot, tkn, ctop, aactl, up, kargo, conftest, spire-server, spire-server-fips, dagger...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, flux, k3s, ko-fips, pulumi, bom, kots, nerdctl, tekton-chains, gitsign, kubeflow-katib, crane, newrelic-infrastructure-agent, skaffold, cosign, skopeo, docker-machine-driver-harvester, cadvisor, kpt, trivy, goreleaser, policy-controller,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: docker-credential-gcr, flux, k3s, ko-fips, pulumi, bom, kots, nerdctl, tekton-chains, gitsign, kubeflow-katib, crane, newrelic-infrastructure-agent, skaffold, cosign, skopeo, docker-machine-driver-harvester, cadvisor, kpt, trivy, goreleaser, policy-controller,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: k3s, kots, nerdctl, skaffold, newrelic-infrastructure-agent, syft, skopeo, cadvisor, trivy, docker, grype, wolfictl, kubernetes, kubescape, kaniko, runc, zarf, k9s, buildkitd, zot, ctop, k3d, podman...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: kaniko, trivy, zarf, skopeo, newrelic-infrastructure-agent, grype, k9s, wolfictl, podman, k3d, k3s, runc, cadvisor, zot, buildkitd, nerdctl, kubescape, docker, skaffold, kubernetes, kots, syft, ctop...

TikTok: Remotely Accessible Container Advisor exposed performance metrics and resource usage

A vulnerability was found that caused cAdvisor Container Advisor to be publicly accessible through an 8080 port. We thank @tw4v3sx for reporting this to our team...

Fedora: Security Advisory for cadvisor (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: cadvisor-0.44.1-4.fc36

cAdvisor Container Advisor provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container i...

Fedora: Security Advisory for cadvisor (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: cadvisor-0.44.1-3.fc35

cAdvisor Container Advisor provides container users an understanding of the resource usage and performance characteristics of their running containers. It is a running daemon that collects, aggregates, processes, and exports information about running containers. Specifically, for each container i...

Fedora: Security Advisory for cadvisor (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...