38 matches found
InfluxData InfluxDB 安全漏洞
InfluxData InfluxDB is a Go-based development of temporal databases from InfluxData, USA. A security vulnerability exists in InfluxData InfluxDB version 2.7.10 and earlier, which stems from a vulnerability that allows an allAccess administrator to retrieve all raw tokens via the influx auth ls...
CVE-2024-30896
CVE-2024-30896 affects InfluxDB OSS 2.x up to 2.7.11, where the administrative operator token is stored under the default organization. This allows authorized users with read access to the default organization’s authorization resource to retrieve the operator token, enabling potential privilege e...
MAL-2024-2511 Malicious code in influx-query-builder (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: sonobuoy, kubernetes-dashboard-metrics-scraper, prometheus-mongodb-exporter-fips, go-md2man, litestream, neuvector-scanner, render-template, spicedb, cfssl, dex-k8s-authenticator, wave, overmind, opentelemetry-collector-fips, crossplane-provider-aws, multus-cni-fips,...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, kiam, cfssl, gcsfuse, crossplane-provider-aws, cass-operator-fips-no-pvc-delete, pulumi-kubernetes-operator, pgpool2exporter-fips, tigera-operator-fips, crossplane-provider-aws-kinesis, apisix-ingress-controller, crossplane-provider-azure-sql,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, kiam, cfssl, gcsfuse, crossplane-provider-aws, cass-operator-fips-no-pvc-delete, pulumi-kubernetes-operator, pgpool2exporter-fips, tigera-operator-fips, crossplane-provider-aws-kinesis, apisix-ingress-controller, crossplane-provider-azure-sql,...
Grafana Security Vulnerabilities
Grafana is Grafana open source set of open source monitoring tools that provide a visual monitoring interface . The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus. Grafana has a security vulnerability that stems from inadequate cleanup of path parameters provided by...
"An influx of Elons," a hospital visit, and magic men: Becky Holmes shares more romance scams: Lock and Code S04E18
Becky Holmes is a big deal online. Hugh Jackman has invited her to dinner. Prince William has told her she has "such a beautiful name." Once, Ricky Gervais simply needed her photos "I want you to take a snap of yourself and then send it to me on here...Send it to me on here!" he messaged on...
Malicious Package
Overview influx-query-builder is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
Low: virt-v2v security, bug fix, and enhancement update
The virt-v2v package provides a tool for converting virtual machines to use the KVM Kernel-based Virtual Machine hypervisor or AlmaLinux Enterprise Virtualization. The tool modifies both the virtual machine image and its associated libvirt metadata. Also, virt-v2v can configure a guest to use...
Malicious code in ig-influx-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54886c66dcf047ce39d69f2ae2f1e07d4a7219e38fd8e265e16c1e1e32801f93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3790 Malicious code in ig-influx-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54886c66dcf047ce39d69f2ae2f1e07d4a7219e38fd8e265e16c1e1e32801f93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2019-11729 · Jenkins · Jenkins Influxdb Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins InfluxDB Plugin versions 1.21 and earlier Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master. This allows users with access to the master file...
CVE-2018-16742
An issue was discovered in mgetty before 1.2.1. In contrib/scrts.c, a stack-based buffer overflow can be triggered via a command-line parameter...
Multiple CPU Hardware CVE-2017-5754 Information Disclosure Vulnerability
Description Multiple CPU Hardware are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Apple Mac Os X 10.11.6 Apple iOS 11.2 Apple macOS 10.12.6 Apple macOS 10.13.2 Apple tvOS...
Oracle WebLogic wls-wsat RCE(CVE-2017-10271)
漏洞描述 黑客利用WebLogic 反序列化漏洞（CVE-2017-3248）和WebLogic WLS 组件漏洞（CVE-2017-10271）对企业服务器发起大范围远程攻击，有大量企业的服务器被攻陷，且被攻击企业数量呈现明显上升趋势，需要引起高度重视。其中，CVE-2017-10271是一个最新的利用Oracle WebLogic中WLS 组件的远程代码执行漏洞，属于没有公开细节的野外利用漏洞，大量企业尚未及时安装补丁。官方在 2017 年 10 月份发布了该漏洞的补丁。 该漏洞的利用方法较为简单，攻击者只需要发送精心构造的 HTTP...
CVE-2014-3221
Huawei Eudemon8000E firewall with software V200R001C01SPC800 and earlier versions allows users to log in to the device using Telnet or SSH. When an attacker sends to the device a mass of TCP packets with special structure, the logging process becomes slow and users may be unable to log in to the...
