5480 matches found
GHSA-3669-72X9-R9P3 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, zot, harbor-scanner-trivy-fips...
CVE-2024-37298 vulnerabilities
Vulnerabilities for packages: harbor-scanner-trivy, zot, harbor-scanner-trivy-fips...
AZL-78567 CVE-2024-5535 affecting package openssl-fips-provider 3.1.2-1
Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or ...
CVE-2024-5535
CBL-Mariner advisory CVE-2024-5535 affects package hvloader for versions older than 1.0.1-6. An upgraded hvloader (1.0.1-6 or newer) resolves the issue. The advisory notes that a newer version is available to address the vulnerability.
CVE-2024-5535 SSL_select_next_proto buffer overread
Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or ...
OpenSSL 3.1.0 < 3.1.7 Vulnerability
The version of OpenSSL installed on the remote host is prior to 3.1.7. It is, therefore, affected by a vulnerability as referenced in the 3.1.7 advisory. - Issue summary: Calling the OpenSSL API function SSLselectnextproto with an empty supported client protocols buffer may cause a crash or memor...
XAES-256-GCM
About a year ago I wrote that “I want to use XAES-256-GCM/11, which has a number of nice properties and only the annoying defect of not existing.” Well, there is now an XAES-256-GCM specification. Had to give up on the /11 part, but that was just a performance optimization. XAES-256-GCM is an...
GHSA-XFHP-JF8P-MH5W vulnerabilities
Vulnerabilities for packages: snyk-cli, conftest-fips, wolfictl, conftest, trivy-fips, zarf, k9s, kots, kubescape, tflint, trivy, zot, terraform, terragrunt, tfsec, grype...
CVE-2024-6257 vulnerabilities
Vulnerabilities for packages: snyk-cli, conftest-fips, wolfictl, conftest, trivy-fips, zarf, k9s, kots, kubescape, tflint, trivy, zot, terraform, terragrunt, tfsec, grype...
EulerOS 2.0 SP11 : openssl (EulerOS-SA-2024-1842)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An...
GHSA-C25H-C27Q-5QPV vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-RVJ4-Q8Q5-8GRF vulnerabilities
Vulnerabilities for packages: traefik-fips, traefik...
CVE-2024-5967 vulnerabilities
Vulnerabilities for packages: keycloak...
Rocky Linux 8 : grafana (RLSA-2024:3265)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3265 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 grafana: vulnerable to authorization bypass CVE-2024-1313...
GHSA-4Q22-422G-M4PJ vulnerabilities
Vulnerabilities for packages: sonarqube-10...
CVE-2024-37280 vulnerabilities
Vulnerabilities for packages: sonarqube-10...
GHSA-32CJ-5WX4-GQ8P vulnerabilities
Vulnerabilities for packages: vault...
GHSA-2HMF-46V7-V6FX vulnerabilities
Vulnerabilities for packages: melange, dagger, zot, guac...