148 matches found
checkov
Checkov 是一个用于基础设施即代码（IaC）的静态代码分析工具，同时也是用于镜像和开源包的软件组成分析（SCA）工具。 它扫描使用 Terraform、Terraform 计划、Cloudformation、AWS SAM、Kubernetes、Helm charts、Kustomize、Dockerfile、Serverless、Bicep、OpenAPI、ARM 模板 或 OpenTofu 配置的云基础设施，并使用基于图的扫描检测安全与合规配置错误。 它执行 软件组成分析（SCA）扫描，即对开源包和镜像进行常见漏洞与暴露（CVE）扫描。 Checkov 还为 Prisma...
CVE-2026-0303
Ejecución de Código Arbitrario en Checkov CVE-2026-0303 CVE: CVE-2026-0303 | CVSS Base: 6.3 | Severidad: Baja CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H CVE-2026-0303 - Vulnerabilidad de ejecución de código arbitrario en Checkov. Publicado por Palo Alto Networks el 9 de...
terragoat
TerraGoat - Vulnerable Terraform Infrastructure...
CVE-2026-76220 vulnerabilities
Vulnerabilities for packages: awx, mlflow, opal, checkov...
CVE-2026-76220 vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
CVE-2026-0303
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...
CVE-2026-0302
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...
EUVD-2026-75270
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...
CVE-2026-0302
CVE-2026-0302 is currently a reserved candidate with no public technical details available in the provided documents. Monitor for updates once the reserving organization publishes further information.
CVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov...
CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...
EUVD-2026-75269
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...
CVE-2026-0303
CVE-2026-0303 is currently reserved with no public technical details available. The affected product, root cause, and impact are not yet disclosed. Monitor for updates when the holder publicizes the vulnerability.
GHSA-W672-239G-C3GR vulnerabilities
Vulnerabilities for packages: awx, mlflow, opal, checkov...
GHSA-6R2R-WW24-7H52 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, mlflow, opal, awx, datahub-ingestion, checkov...
GHSA-M4F3-G4CQ-HQRX vulnerabilities
Vulnerabilities for packages: mlflow-fips, datahub-ingestion-fips, mlflow, opal, awx, datahub-ingestion, checkov...
CVE-2026-76222 vulnerabilities
Vulnerabilities for packages: awx, mlflow, opal, checkov...
CVE-2026-67323 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, mlflow, opal, awx, datahub-ingestion, checkov...