199 matches found
Amazon EKS vs Azure Kubernetes Service
Managed Kubernetes services help organizations deploy, configure, and manage Kubernetes clusters. This article compares two of the biggest service providers: Amazon EKS and Azure Kubernetes Services...
GHSA-F4W6-3RH6-6Q4Q vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-provisioner...
GHSA-HP87-P4GW-J4GQ vulnerabilities
Vulnerabilities for packages: thanos-operator-fips, thanos-operator, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...
CVE-2022-28948 vulnerabilities
Vulnerabilities for packages: thanos-operator-fips, thanos-operator, dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...
GHSA-8C26-WMH5-6G9V vulnerabilities
Vulnerabilities for packages: kubeflow, terraform-provider-sendgrid, k3d, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner, kubeflow-fips, dynamic-localpv-provisioner-fips...
GHSA-CG3Q-J54F-5P7P vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...
CVE-2022-21698 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner, dynamic-localpv-provisioner-fips...
Kubernetes: Authenticated kubernetes principal with restricted permissions can retrieve ingress-nginx serviceaccount token and secrets across all namespaces
Summary: Retrieving ingress-nginx serviceaccount token ingress-nginx allows adding custom snippets of nginx configuration to Kubernetes ingress objects. These snippets can be applied to either the relevant location or server blocks with the following annotations, respectively...
Sifchain: Open S3 Bucket | information leakage
Hi I found an Open S3 Bucket. - POC : aws s3 ls s3://amazon-eks/ Source : https://github.com/Sifchain/sifnode/blob/bebbe9883560bbde4f452f81a2d85bdbc243636a/deploy/rake/dependencies.rake21 regards oos Impact information leakage...
Information Leakage Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.
Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. An information leakage vulnerability exists in the employment information management syste...
Unauthorized Access Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.
Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. An unauthorized access vulnerability exists in the Employment Information Management Syste...
SQL Injection Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.
Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. A SQL injection vulnerability exists in the Employment Information Management System of...
Information Leakage Vulnerability in Chengdu EKS Information Industry Co.
Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. There is an information leakage vulnerability in Chengdu ECOSYS Information Industry Co.,...
CVE-2020-13318
A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack...
CVE-2020-13318
A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack...
UBUNTU-CVE-2020-13318
A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack...
CVE-2020-13318
A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack...
Cross site scripting
A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack...
