597 matches found
GHSA-232P-VWFF-86MP vulnerabilities
Vulnerabilities for packages: apko, bom, helm, melange, ko, ctop, up...
GHSA-33PG-M6JH-5237 vulnerabilities
Vulnerabilities for packages: apko, bom, helm, melange, ko, ctop, up...
GHSA-6WRF-MXFJ-PF5P vulnerabilities
Vulnerabilities for packages: apko, bom, helm, melange, ko, ctop, up...
CVE-2023-25173 vulnerabilities
Vulnerabilities for packages: ctop...
CVE-2023-25153 vulnerabilities
Vulnerabilities for packages: ctop...
SUSE CVE-2018-15756
Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annotated controlle...
GHSA-PWCW-6F5G-GXF8 vulnerabilities
Vulnerabilities for packages: helm...
CVE-2023-25165 vulnerabilities
Vulnerabilities for packages: helm...
Massive Ad Fraud Scheme Targeted Over 11 Million Devices with 1,700 Spoofed Apps
Researchers have shut down an "expansive" ad fraud scheme that spoofed more than 1,700 applications from 120 publishers and impacted roughly 11 million devices. "VASTFLUX was a malvertising attack that injected malicious JavaScript code into digital ad creatives, allowing the fraudsters to stack...
Massive Ad Fraud Scheme Targeted Over 11 Million Devices with 1,700 Spoofed Apps
Researchers have shut down an "expansive" ad fraud scheme that spoofed more than 1,700 applications from 120 publishers and impacted roughly 11 million devices. "VASTFLUX was a malvertising attack that injected malicious JavaScript code into digital ad creatives, allowing the fraudsters to stack...
Gamaredon APT cyber feud strikes Ukrainian entities
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary One of the most ubiquitous, intrusive, consistently active, and laser-focused APTs targeting Ukraine in cyberspace is the Gamaredon group, also known as the Shuckworm. Gamaredon Group has employed fast...
CVE-2022-23525 vulnerabilities
Vulnerabilities for packages: flux-helm-controller-0.37...
CVE-2022-23526 vulnerabilities
Vulnerabilities for packages: flux-helm-controller-0.37...
CVE-2022-23524 vulnerabilities
Vulnerabilities for packages: flux-helm-controller-0.37...
GHSA-67FX-WX78-JX33 vulnerabilities
Vulnerabilities for packages: flux-helm-controller-0.37...
GHSA-6RX9-889Q-VV2R vulnerabilities
Vulnerabilities for packages: flux-helm-controller-0.37...
GHSA-2QJP-425J-52J9 vulnerabilities
Vulnerabilities for packages: ctop...
CVE-2022-23471 vulnerabilities
Vulnerabilities for packages: ctop...
GO-2022-1071 Denial of service in flux controllers in github.com/fluxcd modules
Flux controllers are vulnerable to a denial of service attack. Users that have permissions to change Flux's objects, either through a Flux source or directly within a cluster, can provide invalid data to fields .spec.interval or .spec.timeout and structured variations of these fields, causing the...
CVE-2022-39272
Flux is an open and extensible continuous delivery solution for Kubernetes. Versions prior to 0.35.0 are subject to a Denial of Service. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provide invalid data to fields .spec.interv...