8844 matches found
Elasticsearch stores private key on disk unencrypted
It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing Requests, the associated private key that is generated is stored on disk unencrypted even if the --pass parameter is passed in the command...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.15.24 bug fix and security update
Red Hat OpenShift Container Platform release 4.15.24 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
Microsoft Azure VSTS CLI vstscli Uncontrolled Search Path Element Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Azure VSTS CLI. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of Azure VSTS CLI. When installed from the Microsoft Container...
Exploit for Path Traversal in Jenkins
CVE-2024-23897 Because of a misconfiguration of a default o...
Malicious code in pd-py-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a736772e9e597e421d82f4148fe6b608acb28b363db608096df90e782cce4af7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11656 Malicious code in pd-py-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a736772e9e597e421d82f4148fe6b608acb28b363db608096df90e782cce4af7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in nifty-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4b2e94e5fff47d4815f87f6dc9ba29b20022d6022c37e0b32ba9e3df81111eb5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-2979 Malicious code in nifty-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4b2e94e5fff47d4815f87f6dc9ba29b20022d6022c37e0b32ba9e3df81111eb5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-11715 Malicious code in sumo-py-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6ed9233fda861428b541d5a3188300bb67c877f6998c43e808dc5910b7113b4d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in sumo-py-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6ed9233fda861428b541d5a3188300bb67c877f6998c43e808dc5910b7113b4d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2024-9941 Malicious code in appetize-cli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7f0791abf81cd0c979559b6938727478a6af6e21ceb08371567a9e0347b1e079 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Docker Desktop Daemon CLI External Control of File Path Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
Moderate: Red Hat Security Advisory: Release of openshift-serverless-clients kn 1.33.1 security update and bug fixes
Red Hat openshift-serverless-clients kn 1.33.1 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
RHEL 8 / 9 : OpenShift Container Platform 4.15.23 (RHSA-2024:4702)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4702 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...
RHEL 8 : Release of openshift-serverless-clients kn 1.33.1 security updatees (Moderate) (RHSA-2024:4867)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:4867 advisory. Red Hat OpenShift Serverless Client kn 1.33.1 provides a CLI to interact with Red Hat OpenShift Serverless 1.33.1. The kn CLI is delivered as an RPM...
CVE-2024-41136
CVE-2024-41136 affects HPE Aruba Networking EdgeConnect SD-WAN gateways; the issue is an authenticated command injection in the device’s Command Line Interface that can lead to arbitrary command execution as a privileged user on the underlying OS. Multiple connected sources corroborate an authent...
PT-2024-29287 · Hewlett Packard · Hpe Aruba Networking Edgeconnect Sd-Wan Gateway
Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking EdgeConnect SD-WAN gateway affected versions not specified Description: A vulnerability exists in the Command Line Interface of the HPE Aruba Networking EdgeConnect SD-WAN gateway, allowing remote authenticated users to r...
PT-2024-29286 · Hewlett Packard · Hpe Aruba Networking Edgeconnect Sd-Wan Gateway
Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking EdgeConnect SD-WAN gateway affected versions not specified Description: A vulnerability exists in the Command Line Interface of the HPE Aruba Networking EdgeConnect SD-WAN gateway, allowing remote authenticated users to r...
CBL Mariner 2.0 Security Update: cf-cli / cri-o / gh / libcontainers-common (CVE-2021-43565)
The version of cf-cli / cri-o / gh / libcontainers-common installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-43565 advisory. - The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of...
