CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: kube-bench, amass, argo-workflows, falcosidekick-fips, wavefront-collector-for-kubernetes, kube-bench-fips, src, trillian, kots, argo-workflows-fips, caddy-fips, trillian-fips, temporal-server-fips, temporal-server, step, kine, spicedb, step-ca, k3s, caddy, ferretdb...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, kubescape, k8ssandra-operator, fulcio-fips, falcosidekick-fips, kube-logging-operator, nri-discovery-kubernetes, temporal, kubernetes, kubernetes-csi-livenessprobe-fips, kube-rbac-proxy-fips, kubeflow, crossplane-provider-aws-route53,...

Amazon Linux 2 : openssl11 (ALAS-2024-2478)

The version of openssl11 installed on the remote host is prior to 1.1.1g-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2478 advisory. Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack The...

GHSA-R3W7-MFPM-C2VW vulnerabilities

Vulnerabilities for packages: k3d...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: kube-bench, amass, argo-workflows, falcosidekick-fips, wavefront-collector-for-kubernetes, kube-bench-fips, src, trillian, kots, argo-workflows-fips, caddy-fips, trillian-fips, temporal-server-fips, temporal-server, step, kine, spicedb, step-ca, k3s, caddy, ferretdb...

CVE-2024-2048 vulnerabilities

Vulnerabilities for packages: k3d...

openSUSE: Security Advisory for mozilla (SUSE-SU-2022:2533-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4469-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-6294-6RGP-FR7R vulnerabilities

Vulnerabilities for packages: jitsucom-bulker...

CVE-2023-50658 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker...

GHSA-JW7R-RXFF-GV24 vulnerabilities

Vulnerabilities for packages: keycloak, opensearch...

CVE-2024-21742 vulnerabilities

Vulnerabilities for packages: keycloak, opensearch...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: chartmuseum, kots, zot, kubescape, flux-source-controller, eksctl, cilium-cli, kubevela, trivy, helm-operator, k9s, up, zarf, flux-helm-controller, helm-push, k8sgpt...

GHSA-24RP-Q3W6-VC56 vulnerabilities

Vulnerabilities for packages: keycloak, mariadb, trino, dependency-track...

GHSA-X989-52FC-4VR4 vulnerabilities

Vulnerabilities for packages: hubble, hubble-ui, hubble-fips...

GHSA-7496-FGV9-XW82 vulnerabilities

Vulnerabilities for packages: hubble, hubble-ui, hubble-fips...

CVE-2024-25630 vulnerabilities

Vulnerabilities for packages: hubble, hubble-ui, hubble-fips...

GHSA-XFG6-62PX-CXC2 vulnerabilities

Vulnerabilities for packages: keycloak-fips, dependency-track, mariadb, keycloak, trino...

nss security update

3.90.0-6 - Fix ecc DER wrapping. 3.90.0-5 - Pick up validated constant time implementations of p256, p384, and p521 from upsream - More Fips indicator changes...

Ubuntu 16.04 LTS / 18.04 LTS : OpenSSL vulnerabilities (USN-6632-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6632-1 advisory. David Benjamin discovered that OpenSSL incorrectly handled excessively long X9.42 DH keys. A remote attacker could possibly use this issue to...