PT-2023-12598 · Treasure Data · Treasure Data Fluent Bit

Name of the Vulnerable Software and Affected Versions: Treasure Data Fluent Bit version 1.7.1 Description: An issue was discovered in Treasure Data Fluent Bit, where erroneous parsing in flb pack msgpack to json format leads to a type confusion bug. This bug interprets whatever is on the stack as...

CVE-2021-46878

An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flbpackmsgpacktojsonformat leads to type confusion bug that interprets whatever is on the stack as msgpack maps and arrays, leading to use-after-free. This can be used by an attacker to craft a specially craft file an...

CVE-2021-46879

An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flbmsgpackgelfvalueext. An attacker can craft a malicious file and tick the victim to open the file with the software, triggering a heap overflow and execute...

PT-2023-12599 · Treasure Data · Treasure Data Fluent Bit

Name of the Vulnerable Software and Affected Versions: Treasure Data Fluent Bit version 1.7.1 Description: An issue was discovered in Treasure Data Fluent Bit, where a wrong variable is used to get the msgpack data, resulting in a heap overflow in flb msgpack gelf value ext. An attacker can craft...

CVE-2020-21514

A flaw was found in Fluentd and fluent-ui. This issue may allow an attacker to gain escalated privileges and execute arbitrary code due to allowing a default password at install time...

GHSA-WRXF-X8RM-6GGG Fluent Fluentd and Fluent-ui use default password

An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password...

Fluent Fluentd and Fluent-ui use default password

An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password...

CVE-2020-21514

An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password...

CVE-2020-21514

An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password...

Default credentials

An issue was discovered in Fluent Fluentd v.1.8.0 and Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password...

CVE-2020-21514

An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password...

CVE-2020-21514

An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password...

CVE-2020-21514

CVE-2020-21514 — Fluent-ui v1.2.2 : A default-password issue allowing attackers to gain escalated privileges and execute arbitrary code. Root cause: default credentials enable unauthorized access; impact is high (CVE score 8.8). The supplied connected documents confirm the affected product and th...

Fluent Fluentd and Fluent-ui use default password

An issue was discovered in Fluent Fluentd v.1.8.0 and Fluent-ui v.1.2.2 that allows attackers to gain escilated privileges and execute arbitrary code due to use of a default password...

Fluent Fluentd and Fluent-ui use default password

An issue was discovered in Fluent Fluentd v.1.8.0 and Fluent-ui v.1.2.2 that allows attackers to gain escilated privileges and execute arbitrary code due to use of a default password...

CBL Mariner 2.0 Security Update: fluent-bit / hvloader (CVE-2021-36647)

The version of fluent-bit / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-36647 advisory. - Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c...

CBL Mariner 2.0 Security Update: fluent-bit (CVE-2022-46392)

The version of fluent-bit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-46392 advisory. - An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to...

Malicious code in fluent-ui-react-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d4f214d34026a7c88fc092754888c5c4c127f5cead75c2e93a25b2a3e3cc403 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-449 Malicious code in fluent-ui-react-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d4f214d34026a7c88fc092754888c5c4c127f5cead75c2e93a25b2a3e3cc403 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview fluent-ui-react-latest is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...