CBL Mariner 2.0 Security Update: azcopy / blobfuse2 / cert-manager / cf-cli (CVE-2024-24786)

The version of azcopy / blobfuse2 / cert-manager / cf-cli installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24786 advisory. - The protojson.Unmarshal function can enter an infinite loop when...

CVE-2024-1728

creationtimestamp| type| source ---|---|--- 2024-04-12 06:48:58+00:00| seen| https://t.me/arpsyndicate/4544 2024-10-09 22:49:03+00:00| published-proof-of-concept| https://t.me/codeb0ss/1613 2025-02-05 16:00:09+00:00| published-proof-of-concept| Telegram/DvuDNxzeYZP63w5nmwzbWYZFvCKfCkB4qbONMONwQIS...

CVE-2024-2029

creationtimestamp| type| source ---|---|--- 2024-04-12 05:26:43+00:00| seen| https://t.me/arpsyndicate/4526 2025-07-21 18:57:10+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/localaicve20242029...

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2

CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2. A patched version of the package is available...

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.17-2. An upgraded version of the package is available that resolves this issue...

AZL-39505 CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.17-3

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

AZL-38575 CVE-2023-45288 affecting package node-problem-detector for versions less than 0.8.15-4

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

Exploit for Embedded Malicious Code in Tukaani Xz

CVE-2024-3094 XZ Backdoor Tools This repository contains to...

CVE-2024-31139

In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector...

CVE-2024-31139

In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector...

CVE-2023-6014

creationtimestamp| type| source ---|---|--- 2024-03-27 16:42:02+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/mlflowcve20236014...

PT-2024-2543 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.03 Description: The issue is related to incorrect restriction of XML external entity references in the continuous integration and delivery system. This could allow a remote attacker to conduct XXE...

CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2021-44716 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2022-29526 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2022-32149 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.15-1

CVE-2022-21698 affecting package node-problem-detector for versions less than 0.8.15-1. An upgraded version of the package is available that resolves this issue...

SUSE CVE-2021-47133

In the Linux kernel, the following vulnerability has been resolved: HID: amdsfh: Fix memory leak in amdsfhwork Kmemleak tool detected a memory leak in the amdsfh driver. ==================== unreferenced object 0xffff88810228ada0 size 32: comm "insmod", pid 3968, jiffies 4295056001 age 775.792s h...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: apisix-ingress-controller, crossplane-provider-azure-authorization, velero, kube-bench, hugo, rqlite, crossplane-provider-aws-kms, memcached-exporter, configmap-reload, php-fpmexporter, envoy-ratelimit, rook, eksctl, certificate-transparency, hubble-ui, nuclei,...

AZL-37119 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35667 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.15-2

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...