388 matches found
CBL Mariner 2.0 Security Update: application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns (CVE-2023-45288)
The version of application-gateway-kubernetes-ingress / azcopy / blobfuse2 / cert-manager / coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-45288 advisory. - An attacker May cause an HTTP/...
CBL Mariner 2.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)
The version of cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3162 advisory. - Users authorized to list or watch one type of...
CBL Mariner 2.0 Security Update: cert-manager / helm (CVE-2024-26147)
The version of cert-manager / helm installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26147 advisory. - Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an...
AZL-42916 CVE-2024-6104 affecting package cert-manager for versions less than 1.11.2-12
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...
AZL-42880 CVE-2024-6104 affecting package cert-manager for versions less than 1.12.12-3
go-retryablehttp prior to 0.7.7 did not sanitize urls when writing them to its log file. This could lead to go-retryablehttp writing sensitive HTTP basic auth credentials to its log file. This vulnerability, CVE-2024-6104, was fixed in go-retryablehttp 0.7.7...
CVE-2023-45288 affecting package cert-manager for versions less than 1.11.2-9
CVE-2023-45288 affecting package cert-manager for versions less than 1.11.2-9. A patched version of the package is available...
CVE-2024-26147 affecting package cert-manager for versions less than 1.11.2-10
CVE-2024-26147 affecting package cert-manager for versions less than 1.11.2-10. A patched version of the package is available...
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: fluent-operator, stern, flux-notification-controller, kubernetes-csi-livenessprobe, envoy-ratelimit, docker-compose, nri-apache, karpenter, up, grype, helm-operator-fips, cloud-sql-proxy-fips, kyverno-policy-reporter-kyverno-plugin, nri-kafka, step-fips, hcloud,...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: stern, kubebuilder, kubescape, caddy-fips, confluent-common-docker, falcosidekick, flux-image-reflector-controller, aws-efs-csi-driver, flux-notification-controller, kubernetes-csi-livenessprobe-fips, boring-registry-fips, kubernetes-csi-livenessprobe,...
SUSE CVE-2024-28718
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the certmanager.py. component...
CVE-2024-28718
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the certmanager.py. component...
CVE-2024-28718
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the certmanager.py. component...
UBUNTU-CVE-2024-28718
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the certmanager.py. component...
OpenStack 安全漏洞
OpenStack is a cloud platform management program of the National Aeronautics and Space Administration NASA. A security vulnerability exists in the OpenStack magnum yoga-eom version that stems from allowing remote attackers to execute arbitrary code via the certmanager.py component...
CVE-2024-28718
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the certmanager.py. component...
GHSA-4V7X-PQXF-CX7M vulnerabilities
Vulnerabilities for packages: hubble-ui, aws-load-balancer-controller, vt-cli, crossplane-provider-aws-sns, dgraph, crossplane-provider-azure-storage, kafkaexporter, litefs, k3s, newrelic-infrastructure-agent, hcloud, haproxy-ingress, secrets-store-csi-driver-provider-aws,...
AZL-38503 CVE-2023-45288 affecting package cert-manager for versions less than 1.12.12-1
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...
AZL-39334 CVE-2023-45288 affecting package cert-manager for versions less than 1.11.2-9
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...