8938 matches found
Improper Ownership Management
Overview Affected versions of this package are vulnerable to Improper Ownership Management for projects, whose namespace defaults to being the project name, regardless of cluster. A user with permission to create a project can escalate privileges to those of a user who owns a project by the same...
Improper Ownership Management
Overview github.com/rancher/rancher/pkg/controllers/managementuser/secret is a project that provides a container management platform built for organizations that deploy containers in production Affected versions of this package are vulnerable to Improper Ownership Management for projects, whose...
SUSE CVE-2025-22079
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate ltreedepth to avoid out-of-bounds access The ltreedepth field is 16-bit le16, but the actual maximum depth is limited to OCFS2MAXPATHDEPTH. Add a check to prevent out-of-bounds access if ltreedepth has an invalid...
Cluster-Aware Attacks on Graph Watermarks
Data from domains such as social networks, healthcare, finance, and cybersecurity can be represented as graph-structured information. Given the sensitive nature of this data and their frequent distribution among collaborators, ensuring secure and attributable sharing is essential. Graph...
CVE-2024-10306
A vulnerability was found in modproxycluster. The issue is that the directive should be replaced by the directive as the former does not restrict IP/host access as Require ip IPADDRESS would suggest. This means that anyone with access to the host might send MCMP requests that may result in...
CVE-2024-10306
A vulnerability was found in modproxycluster. The issue is that the directive should be replaced by the directive as the former does not restrict IP/host access as Require ip IPADDRESS would suggest. This means that anyone with access to the host might send MCMP requests that may result in...
Unable to view cluster in SCVMM hosting connection
Not able to see cluster in SCVMM hosting connection Error: - An unexpected error occurred. Contact Citrix Technical Support...
CVE-2025-37087
A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...
CVE-2025-37087
CVE-2025-37087 affects HPE Performance Cluster Manager (HPCM) cmdb service. Multiple connected sources confirm a vulnerability that could allow an attacker to access an arbitrary file on the server host. The initial entry lists a high-severity CVSS 3.1 vector (9.8, NETWORK / LOW complexity / no u...
CVE-2025-37087
A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...
CVE-2025-37087
A vulnerability in the cmdb service of the HPE Performance Cluster Manager HPCM could allow an attacker to gain access to an arbitrary file on the server host...
GO-2025-3608 Argo Events users can gain privileged access to the host system and cluster with EventSource and Sensor CR in github.com/argoproj/argo-events
Argo Events users can gain privileged access to the host system and cluster with EventSource and Sensor CR in github.com/argoproj/argo-events...
K000150951: Multiple Oracle MySQL vulnerabilities
Security Advisory Description CVE-2025-30689 Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network...
PT-2025-17594 · Hewlett Packard · Hpe Performance Cluster Manager
Name of the Vulnerable Software and Affected Versions: HPE Performance Cluster Manager HPCM affected versions not specified Description: A vulnerability in the cmdb service could allow an attacker to gain access to an arbitrary file on the server host. Recommendations: At the moment, there is no...
Hewlett Packard Enterprise Cray Data Virtualization Service 安全漏洞
Hewlett Packard Enterprise Cray Data Virtualization Service HPE DVS is an application from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise Cray Data Virtualization Service that stems from a competitive condition and configuration issue that could resu...
Hewlett Packard Enterprise Performance Cluster Manager 安全漏洞
Hewlett Packard Enterprise Performance Cluster Manager is a security vulnerability in Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise Performance Cluster Manager that stems from a problem with the cmdb service and could result in access to arbitrary files...
Unspecified Vulnerability in Oracle MySQL (CNVD-2025-17378)
Oracle MySQL is an open source relational database management system.MySQL Client is a MySQL client, a program used to communicate with a server to process information in a database managed by the server. A security vulnerability exists in MySQL Cluster for Oracle MySQL, which stems from...
CVE-2025-27086
A vulnerability in the HPE Performance Cluster Manager HPCM GUI could allow an attacker to bypass authentication...