Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. This database management system provides data management, distributed processing, and other functions. A security vulnerability exists in Fleet Patching and Provisioning versions 19.3 through 19.26 of...

CVE-2025-30702: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the Fleet Patching and amp; Provisioning component of Oracle Database Server. Supported versions that are affected are 19.3-19.26. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Fleet Patching and amp; Provisioning...

agentic-fleet (0.1.6), composio (0.1.1) +41 more potentially affected by CVE-2024-8955 via composio-core (>=0.3.13, <=0.7.21)

composio-core PYPI version =0.3.13, =0.7.1, =0.3.13, =0.3.17, =0.3.13, =0.3.13, =0.7.1, =0.5.26, =0.3.13, =0.3.13, =0.3.13, =0.3.24, =0.7.15, =0.3.13, =0.7.20 and more Source cves: CVE-2024-8955 Source advisory: SNYK:PYTHON-COMPOSIOCORE-9637812...

CVE-2024-40635 vulnerabilities

Vulnerabilities for packages: zarf, cert-manager-cmctl, trivy, dagger, grype, cilium-cli, buildkitd, nerdctl, k8sgpt, ctop, kots, newrelic-infrastructure-agent, fuse-overlayfs-snapshotter, flux-source-controller, kubevela, k3s, wolfictl, k8ssandra-client, opa, rancher-fleet, docker-compose,...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: zarf, cert-manager-cmctl, trivy, dagger, grype, cilium-cli, buildkitd, nerdctl, k8sgpt, ctop, kots, newrelic-infrastructure-agent, fuse-overlayfs-snapshotter, flux-source-controller, kubevela, k3s, wolfictl, k8ssandra-client, opa, rancher-fleet, docker-compose,...

SUSE CVE-2025-27509

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

GO-2025-3505 Fleet has SAML authentication vulnerability due to improper SAML response validation in github.com/fleetdm/fleet

Fleet has SAML authentication vulnerability due to improper SAML response validation in github.com/fleetdm/fleet. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

CVE-2025-27509

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

CVE-2025-27509

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

CVE-2025-27509

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

CVE-2025-27509 SAML authentication vulnerability due to improper SAML response validation

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

CVE-2025-27509

Fleet has a SAML authentication vulnerability (CVE-2025-27509) due to improper SAML response validation in fleetdm/fleet. In vulnerable versions, an attacker could forge authentication assertions, potentially provisioning a new administrative user under JIT provisioning or creating accounts tied ...

Fleet 授权问题漏洞

Fleet is an open source device management platform from Fleet that supports a wide range of operating systems and devices to help IT and security teams with device management, vulnerability reporting, MDM, and more, free and flexible. An authorization issue vulnerability exists in Fleet versions...

PT-2025-9999

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.64.2 Fleet versions prior to 4.63.2 Fleet versions prior to 4.62.4 Fleet versions prior to 4.58.1 Description The issue allows an attacker to craft a specially-formed SAML response to forge authentication assertions...

CVE-2025-27509: Improper Authorization

fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time JIT provisioning is enabled, or create new...

GHSA-JGFP-53C3-624W vulnerabilities

Vulnerabilities for packages: argo-cd-fips, rancher-fleet, kapp, azuredisk-csi, aws-ebs-csi-driver, local-static-provisioner-fips, yunikorn-k8shim, yunikorn-k8shim-fips, kubernetes-csi-driver-nfs-fips, nodetaint, ip-masq-agent, kubernetes-fips, argo-rollouts, rancher-agent, kubernetes, calico,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: argo-rollouts, aws-efs-csi-driver, ip-masq-agent, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, kapp, yunikorn-k8shim, argocd-image-updater, local-static-provisioner, spark-operator, nodetaint, kubernetes, vcluster, emissary, kubernetes-csi-driver-nfs,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, rancher-fleet, kapp, azuredisk-csi, aws-ebs-csi-driver, local-static-provisioner-fips, yunikorn-k8shim, yunikorn-k8shim-fips, kubernetes-csi-driver-nfs-fips, nodetaint, ip-masq-agent, kubernetes-fips, argo-rollouts, rancher-agent, kubernetes, calico,...

CVE-2020-26276

Fleet is an open source osquery manager. In Fleet before version 3.5.1, due to issues in Go's standard library XML parsing, a valid SAML response may be mutated by an attacker to modify the trusted document. This can result in allowing unverified logins from a SAML IdP. Users that configure Fleet...

The vulnerability of the server software for managing Elastic Agent agents, known as Elastic Fleet Server, stems from deficiencies in access control. This allows a malicious individual to disclose sensitive information that is protected by this system.

The vulnerability of the server software for managing Elastic Agent agents in Elastic Fleet Server is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...