GHSA-GWC9-M7RH-J2WW vulnerabilities

Vulnerabilities for packages: kubeflow, k3d, terraform-provider-sendgrid-fips, kubeflow-fips, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, dynamic-localpv-provisioner...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, terraform-provider-sendgrid, kubeflow-katib, kubeflow, k3d, terraform-provider-sendgrid-fips, hey, kubeflow-fips, dynamic-localpv-provisioner-fips, wireguard-go, grpcurl, dynamic-localpv-provisioner...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: kube-state-metrics, terraform-provider-sendgrid, kubeflow-katib, kubeflow, k3d, terraform-provider-sendgrid-fips, hey, kubeflow-fips, dynamic-localpv-provisioner-fips, wireguard-go, grpcurl, dynamic-localpv-provisioner...

CVE-2021-43565 vulnerabilities

Vulnerabilities for packages: kubeflow, k3d, terraform-provider-sendgrid-fips, kubeflow-fips, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, dynamic-localpv-provisioner...

GHSA-P782-XGP4-8HR8 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, kubeflow, k3d, terraform-provider-sendgrid-fips, kind, dynamic-localpv-provisioner-fips, grpcurl, dynamic-localpv-provisioner, ctop...

GHSA-F4W6-3RH6-6Q4Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner...

GHSA-HP87-P4GW-J4GQ vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, thanos-operator, dynamic-localpv-provisioner-fips, thanos-operator-fips...

CVE-2022-28948 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, thanos-operator, dynamic-localpv-provisioner-fips, thanos-operator-fips...

new packages: python-distro

An update is available for python-distro. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

GHSA-8C26-WMH5-6G9V vulnerabilities

Vulnerabilities for packages: kubeflow, k3d, terraform-provider-sendgrid-fips, kubeflow-fips, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, dynamic-localpv-provisioner...

GHSA-CG3Q-J54F-5P7P vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

CVE-2022-21698 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...

openSUSE: Security Advisory for libdnf (openSUSE-SU-2021:2685-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for salt (openSUSE-SU-2021:0899-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Open Distro for Elasticsearch SSRF漏洞（CVE-2021-31828）

SSRF in Open Distro for Elasticsearch CVE-2021-31828 Rotem Bar Published on May 11, 2021 7 min read After an interesting adventure, it's now possible to announce a new CVE-2021-31828 which effects Open Distro for ElasticSearch ODFE , versions until 1.12.0.2. Open Distro is a plugin for...

CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

Server side request forgery (ssrf)

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

CVE-2021-31828

An SSRF issue in Open Distro for Elasticsearch ODFE before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope...

CVE-2021-31828

CVE-2021-31828 (ODFE SSRF) affects Open Distro for Elasticsearch (ODFE) until version 1.13.1.0. The issue is an SSRF in the Alerting module that allows an authenticated, existing privileged user to enumerate listening services or interact with configured resources by issuing HTTP requests beyond ...

Elasticsearch 代码问题漏洞

Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON . A code issue vulnerability exists in Elasticsearch ODFE Open Distro versions prior...