140 matches found
EUVD-2018-10680
Malware in sbrugna...
EUVD-2020-7227
Malware in sbrugna...
EUVD-2021-1578
Malware in sbrugna...
EUVD-2018-10679
Malware in sbrugna...
EUVD-2018-10682
Malware in sbrugna...
EUVD-2018-10683
Malware in sbrugna...
EUVD-2023-26945
Malicious code in bioql PyPI...
EUVD-2025-11857
Malicious code in bioql PyPI...
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: cerbos, cilium-cli, monstache, kubecolor, timescaledb-tune, mockgen, bom, nri-rabbitmq, nuclei, src, falcoctl, dex, wait-for-port, neuvector, headlamp, fulcio, rabbitmq-default-user-credential-updater, teleport, yunikorn-k8shim, kubernetes-dashboard-api, ip-masq-agen...
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: logstash-exporter, cerbos, mig-parted, sqlexporter-fips, extism, cephcsi-fips, hydra, gatekeeper-fips, src, vault-fips, crossplane-provider-sql, prometheus-mysqld-exporter-fips, falco-exporter-fips, vault-secrets-operator, gotestsum, neuvector, gitea-fips, malcontent...
BIT-CONTOUR-2024-36539
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
The vulnerability of Contour.Talk video conferencing software for macOS, related to the use of an insecure search path, allows attackers to escalate their privileges and gain unauthorized access to the system.
The vulnerability of Contour.Talk software for macOS-related video conferencing systems is related to the use of an insecure search path. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to the system...
Structure Disruption: Subverting Malicious Diffusion-Based Inpainting Via Self-Attention Query Perturbation
The rapid advancement of diffusion models has enhanced their image inpainting and editing capabilities but also introduced significant societal risks. Adversaries can exploit user images from social media to generate misleading or harmful content. While adversarial perturbations can disrupt...
CVE-2024-36539
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
CVE-2023-22834
The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create...
CVE-2025-32792 ses's global contour bindings leak into Compartment lexical scope
SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using ses and the Compartment API to evaluate third-party code in an isolated execution environment that hav...
GHSA-QXP5-GWG8-XV66 vulnerabilities
Vulnerabilities for packages: cloud-sql-proxy-fips, azcopy-fips, sqlexporter-fips, hydra, haproxy-ingress, src, crossplane-provider-sql, terraform-provider-pagerduty, falco-exporter-fips, mattmoor-chainit, vault-secrets-operator, rancher-webhook, neuvector, crossplane-provider-aws-sns, cue-fips,...
CVE-2020-15127
In Contour Ingress controller for Kubernetes before version 1.7.0, a bad actor can shut down all instances of Envoy, essentially killing the entire ingress data plane. GET requests to /shutdown on port 8090 of the Envoy pod initiate Envoy's shutdown procedure. The shutdown procedure includes...
GO-2022-0922 ExternalName Services can be used to gain access to Envoy's admin interface in github.com/projectcontour/contour
ExternalName Services can be used to gain access to Envoy's admin interface in github.com/projectcontour/contour...
