8932 matches found
CVE-2022-29179
Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Prior to versions 1.9.16, 1.10.11, and 1.11.15, if an attacker is able to perform a container escape of a container running as root on a host where Cilium is installed,...
CVE-2022-29165 Argo CD will blindly trust JWT claims if anonymous access is enabled
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A critical vulnerability has been discovered in Argo CD starting with version 1.4.0 and prior to versions 2.1.15, 2.2.9, and 2.3.4 which would allow unauthenticated users to impersonate as any Argo CD user or role, includin...
CVE-2022-29165 Argo CD will blindly trust JWT claims if anonymous access is enabled
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A critical vulnerability has been discovered in Argo CD starting with version 1.4.0 and prior to versions 2.1.15, 2.2.9, and 2.3.4 which would allow unauthenticated users to impersonate as any Argo CD user or role, includin...
PT-2022-19433 · Cilium · Cilium
Name of the Vulnerable Software and Affected Versions: Cilium versions prior to 1.9.16 Cilium versions prior to 1.10.11 Cilium versions prior to 1.11.5 Description: Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. If a...
[SECURITY] Fedora 35 Update: slurm-21.08.8-2.fc35
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...
[SECURITY] Fedora 36 Update: slurm-21.08.8-2.fc36
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...
Fedora: Security Advisory for slurm (FEDORA-2022-eeeff46680)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
new packages: sap-cluster-connector
An update is available for sap-cluster-connector. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...
Eucalyptus Unauthorized Access to CC/NC Log Files
The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the 1 Cluster Controller CC or 2 Node Controller NC component...
Apache Hadoop allows impersonation of arbitrary cluster user accounts
The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to...
GHSA-2GW6-73WC-X88F Apache Geode information disclosure vulnerability
Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL query that exposes data stored in the...
Injection in Apache NiFi
In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node...
The vulnerabilities of the Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck components of the PostgreSQL database management system allow attackers to execute arbitrary SQL functions under the user’s account.
The vulnerabilities of the Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pgamcheck components of the PostgreSQL database management system are related to errors that occur when one user manipulates objects for another user. Exploiting these vulnerabilities allows a...
The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Cluster Shared Volumes file system in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Cluster Shared Volumes file system in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows attackers to increase their privileges and gain unauthorized access to protected information.
The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges and gain unauthorized access to protected information...