61 matches found
PT-2025-22064 Ā· Unknown Ā· Gardener External Dns ManagementĀ +1
Name of the Vulnerable Software and Affected Versions: Gardener External DNS Management versions prior to 0.23.6 gardener/gardener-extension-shoot-dns-service extension versions = v1.60.0 Description: A security issue was discovered in Gardener's External DNS Management that could allow a user wi...
SUSE-SU-2025:0992-1 Security update for docker
This update for docker fixes the following issues: Update to Docker 27.5.1-ce bsc1237335: - CVE-2024-29018: External DNS requests from 'internal' networks could lead to data exfiltration bsc1234089...
CVE-2025-30204 vulnerabilities
Vulnerabilities for packages: flux, timestamp-authority, sigstore-scaffolding, weaviate, rclone, amazon-cloudwatch-agent-operator, cosign, grafana-mimir, restic, mongo-tools, git-sync, gitea, trufflehog, sftpgo-plugin-pubsub, crossplane-provider-family-azure, amazon-cloudwatch-agent, buildkitd,...
GHSA-MH63-6H87-95CP vulnerabilities
Vulnerabilities for packages: flux, timestamp-authority, sigstore-scaffolding, weaviate, rclone, amazon-cloudwatch-agent-operator, cosign, grafana-mimir, restic, mongo-tools, git-sync, gitea, trufflehog, sftpgo-plugin-pubsub, crossplane-provider-family-azure, amazon-cloudwatch-agent, buildkitd,...
openSUSE Security Advisory (SUSE-SU-2025:0776-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-V6V8-XJ6M-XWQH vulnerabilities
Vulnerabilities for packages: k3d, rook, zarf, gitsign, gh, snyk-cli, grafana-mimir, flux-source-controller, spire-server, zot, falcoctl-fips, falcoctl, opentelemetry-collector-fips, crossplane-provider-azure-sql, gomplate, kubescape, fulcio-fips, scorecard, buildkitd, flux-kustomize-controller,...
CVE-2024-6104 vulnerabilities
Vulnerabilities for packages: k3d, rook, zarf, gitsign, gh, snyk-cli, grafana-mimir, flux-source-controller, spire-server, zot, falcoctl-fips, falcoctl, opentelemetry-collector-fips, crossplane-provider-azure-sql, gomplate, kubescape, fulcio-fips, scorecard, buildkitd, flux-kustomize-controller,...
GHSA-2HMF-46V7-V6FX vulnerabilities
Vulnerabilities for packages: zot, melange, dagger, guac...
CVE-2023-49559 vulnerabilities
Vulnerabilities for packages: zot, melange, dagger, guac...
GHSA-M5VV-6R4H-3VJ9 vulnerabilities
Vulnerabilities for packages: prometheus-operator, rook, zarf, step-fips, trivy, grafana-mimir, thanos-fips, flux-source-controller, spire-server, zot, falcoctl-fips, falcoctl, opentelemetry-collector-fips, rclone, hugo-extended, kubescape, external-secrets-fips, argo-workflows, fulcio-fips,...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: flux, prometheus-operator, timestamp-authority, step-ca, sigstore-scaffolding, rclone, goreleaser, cosign, grafana-mimir, restic, grafana-agent-operator, flux-image-reflector-controller, nuclei, hugo-extended, py3-azure-identity, hugo, kubescape, pulumi, druid,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: vault-k8s-fips, crossplane-provider-aws, influx, k3d, prometheus-elasticsearch-exporter, conftest, temporal-server, weaviate, secrets-store-csi-driver, gitsign, pulumi-language-dotnet, prometheus-mongodb-exporter, dynamic-localpv-provisioner, logstash-exporter-fips,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kubeflow, vault-csi-provider, src, plutono-fips, slsa-verifier, kubevela, k3d, timestamp-authority-fips, up, terraform-provider-sendgrid, kube-oidc-proxy, aactl, kubernetes-csi-livenessprobe, spark-operator, dynamic-localpv-provisioner-fips, conftest-fips,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: k3d, slsa-verifier, aactl, kubeflow, kubescape, terraform-provider-sendgrid, buildkitd, up, spark-operator, kubevela, cortex, dgraph, scorecard, src...
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: kubeflow, vault-k8s-fips, timoni, runc, k8sgpt-operator, src, kubernetes-csi-external-provisioner, crossplane-provider-aws, vault-k8s, k3d, prometheus-elasticsearch-exporter, prometheus-operator, dive, metacontroller, kind, kpt, chartmuseum, weaviate,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, sigstore-scaffolding, weaviate, amass, hey, cosign, git-lfs, kpt, nghttp2, terraform-provider-sendgrid, flux-helm-controller, metacontroller, slsa-verifier, kubeflow, pulumi-language-java, buildkitd, atlantis,...
Zyxel Gateway / Access Point External DNS Request Vulnerability
Some Zyxel Access Points are prone to an information disclosure vulnerability where external DNS requests can be made. This VT has been deprecated and replaced by various device specific VTs. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced...
Zyxel USG/UAG/ATP/VPN/NXC External DNS Requests
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: External DNS Requests product: Zyxel USG/UAG/ATP/VPN/NXC series vulnerable version: see "Vulnerable / tested version" fixed version: see "Solution" CVE number: - impact:...
Asset Inventory for Network Perimeter: from Declarations to Active Scanning
In the previous post, I shared some of my thoughts about the good Asset Inventory system. Of course, for me as a Security Specialist, it would be great if IT will provide such magical system. But such an ideal situation is rarely possible. So now let's see how to build an Asset Inventory system...
Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction
Exploit Title: Microsoft Forefront Unified Access Gateway 2010 External DNS Interaction Vendor Homepage: https://www.microsoft.com/ Version: 2010 CVE : CVE-2018-12571 Proof of Concept 1 Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for...