GHSA-C2F5-JXJV-2HH8 vulnerabilities

Vulnerabilities for packages: wizer, zed, wasmtime, wash, wasmcloud...

GHSA-HXF5-99XG-86HW

creationtimestamp| type| source ---|---|--- 2024-11-05 22:09:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113432631517028864...

GHSA-53XH-MJMQ-J35P

creationtimestamp| type| source ---|---|--- 2024-11-05 18:47:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113431835985090910...

Malicious code in puppeteerextraadblocker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea15982594b3c0ee11b75fafa2d53989ad4886431573b72c71fe97a48dc7541 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-29WX-VH33-7X7R vulnerabilities

Vulnerabilities for packages: argo-rollouts, goreleaser, trivy, nuclei, crossplane-provider-azure-managedidentity, skaffold, gitsign, aactl, buildkitd, bank-vaults, grafana-alloy, tekton-chains, docker, crossplane-provider-azure, gitea, terraform-provider-azurerm, minio, flyte, temporal-server,...

MAL-2024-10344 Malicious code in puppeteer-req-interceptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ace3c3ef68e8cff62f0dfa94786912c5a2f0c8b74608de84e77f01aa897734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-F686-HW9C-XW9C vulnerabilities

Vulnerabilities for packages: trino...

GHSA-F748-7HPG-88CH vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GHSA-6M59-8FMV-M5F9 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-R9PP-R4XF-597R

creationtimestamp| type| source ---|---|--- 2024-10-28 19:39:46+00:00| seen| None...

GHSA-C4Q5-6C82-3QPW vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi...

GHSA-7H65-4P22-39J6 vulnerabilities

Vulnerabilities for packages: crossplane...

GHSA-X7XJ-JVWP-97RV RKE2 allows privilege escalation in Windows nodes due to Insecure Access Control Lists

Impact A vulnerability has been identified whereby RKE2 deployments in Windows nodes have weak Access Control Lists ACL, allowing BUILTIN\Users or NT AUTHORITY\Authenticated Users to view or edit sensitive files which could lead to privilege escalation. The affected files include binaries, script...

RKE2 allows privilege escalation in Windows nodes due to Insecure Access Control Lists

Impact A vulnerability has been identified whereby RKE2 deployments in Windows nodes have weak Access Control Lists ACL, allowing BUILTIN\Users or NT AUTHORITY\Authenticated Users to view or edit sensitive files which could lead to privilege escalation. The affected files include binaries, script...

Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists

Impact A vulnerability has been identified whereby Rancher Manager deployments containing Windows nodes have weak Access Control Lists ACL, allowing BUILTIN\Users or NT AUTHORITY\Authenticated Users to view or edit sensitive files which could lead to privilege escalation. The affected files inclu...

GHSA-7H8M-PVW3-5GH4 Rancher allows privilege escalation in Windows nodes due to Insecure Access Control Lists

Impact A vulnerability has been identified whereby Rancher Manager deployments containing Windows nodes have weak Access Control Lists ACL, allowing BUILTIN\Users or NT AUTHORITY\Authenticated Users to view or edit sensitive files which could lead to privilege escalation. The affected files inclu...

GHSA-5VVG-PVHP-HV2M vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-69F9-H8F9-7VJF vulnerabilities

Vulnerabilities for packages: snyk-cli...

Eclipse Jetty DoS Vulnerability (GHSA-r7m4-f9h5-gr79) - Windows

Eclipse Jetty is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...

Eclipse Jetty DoS Vulnerability (GHSA-r7m4-f9h5-gr79) - Linux

Eclipse Jetty is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty";...