9133 matches found
June 9, 2020—KB4561674 (Security-only update)
None None...
June 9, 2020—KB4561670 (Monthly Rollup)
None None...
Couchbase Sync Gateway and Couchbase Server Denial of Service Vulnerabilities
Couchbase Sync Gateway and Couchbase Server are both products of Couchbase Inc. Couchbase Sync Gateway is a secure web gateway for data access and data synchronization over the web.Couchbase Server is a distributed open source Couchbase Server is a distributed open-source NoSQL non-relational...
CVE-2020-9041
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections...
Design/Logic Flaw
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections...
[SECURITY] Fedora 32 Update: slurm-19.05.7-1.fc32
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...
FreeBSD : Gitlab -- Multiple Vulnerabilities (69cf62a8-a0aa-11ea-9ea5-001b217b3468)
Gitlab reports : User Email Verification Bypass OAuth Flow Missing Email Verification Checks Notification Email Verification Bypass Undisclosed Vulnerability on a Third-Party Rendering Engine Group Sign-Up Restriction Bypass Mirror Project Owner Impersonation Missing Permission Check on Fork...
Unable to add Nutanix AHV cluster due to empty credentials list
Challenge When trying to add a new Nutanix AHV cluster to the Veeam Backup & Replication infrastructure, the operation cannot be finished due to an empty list of credentials. Newly added credentials are not displayed in the Credentials list, and the wizard does not allow adding a new cluster...
Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster, which allows attackers to trigger service interruptions.
Vulnerability of the Cluster component: The general system management for Oracle databases and MySQL Cluster is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using various network protocols...
Gitlab -- Multiple Vulnerabilities
Gitlab reports: User Email Verification Bypass OAuth Flow Missing Email Verification Checks Notification Email Verification Bypass Undisclosed Vulnerability on a Third-Party Rendering Engine Group Sign-Up Restriction Bypass Mirror Project Owner Impersonation Missing Permission Check on Fork...
ceph-ansible: hard coded credential in ceph-ansible playbook
A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph...
CVE-2020-4412
The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster...
The vulnerability of the Kubernetes cluster management software, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
The vulnerability of the Kubernetes cluster management software is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Kubernetes: Internal IP addresses range and AWS cluster region leaked in a Github repository
Report Submission Form Summary: I was exploring the GitHub repository and found some internal IP address and its cluster region related to AWS cluster. So i decided to report it to you. Please have a look and let me know. Steps To Reproduce: VISIT THIS LINK : Repository - kubernetes / kubernetes...
May 12, 2020—KB4556840 (Monthly Rollup)
None None...
May 12, 2020—KB4556854 (Security-only update)
None None...
May 12, 2020—KB4556846 (Monthly Rollup)
None None...
Product release: Virtuozzo Infrastructure Platform 3.5 Update 3 (3.5.3-18)
This update provides bug fixes and improvements. Vulnerability id: VSTOR-33034 Assigning tier 0 to a cache disk makes no effect. The disk does not receive the "journaltier" parameter and can be used by storage disks of other tiers. Vulnerability id: VSTOR-33032 S3 cluster creation fails with a...
Percona XtraDB Cluster Information Disclosure Vulnerability
Percona XtraDB Cluster is a U.S. Percona's open source MySQL clustering solution . An information disclosure vulnerability exists in Percona XtraDB Cluster versions prior to 5.7.28-31.41.2. No detailed vulnerability details are provided at this time...
