Lucene search
+L

191 matches found

OSV
OSV
added 2025/01/30 4:55 p.m.13 views

MAL-2025-668 Malicious code in jaeger-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f04434e6edf034f78f31f1b79371ae9218b708a68c422adb97016129e0d42b9 Any computer that has this package installed or running should be considered...

7AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2025/01/21 3:04 p.m.10 views

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release

A new version of Red Hat OpenShift distributed tracing platform Jaeger has been released Red Hat OpenShift distributed tracing platform based on Jaeger. Jaeger is a project inspired by Dapper and OpenZipkin. It is a distributed tracing system released as open source by Uber Technologies. It is us...

9.1CVSS6.6AI score0.03153EPSS
SaveExploits2References3
RedHat Linux
RedHat Linux
added 2024/12/11 4:47 p.m.20 views

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release

A new version of Red Hat OpenShift distributed tracing platform Jaeger has been released Red Hat OpenShift distributed tracing platform based on Jaeger. Jaeger is a project inspired by Dapper and OpenZipkin. It is a distributed tracing system released as open source by Uber Technologies. It is us...

8.7CVSS6.6AI score0.01034EPSS
SaveExploits3References10
RedHat Linux
RedHat Linux
added 2024/12/10 11:04 a.m.21 views

Important: Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.4 release

A new version of Red Hat OpenShift distributed tracing platform Jaeger has been released Red Hat OpenShift distributed tracing platform based on Jaeger. Jaeger is a project inspired by Dapper and OpenZipkin. It is a distributed tracing system released as open source by Uber Technologies. It is us...

8.7CVSS6.6AI score0.01034EPSS
SaveExploits3References10
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/16 1:12 p.m.9 views

Malicious code in propagator-jaeger (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/10/16 1:12 p.m.6 views

MAL-2024-9784 Malicious code in propagator-jaeger (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/09/16 3:46 a.m.24 views

RHSA-2020:0972 Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.10 Jaeger and Kiali security update

Bulletin has no description...

7CVSS6.5AI score0.01652EPSS
SaveExploits1References12
OSV
OSV
added 2024/08/21 3:29 p.m.29 views

GO-2022-0834 Information Exposure in jaeger in github.com/jaegertracing/jaeger

Information Exposure in jaeger in github.com/jaegertracing/jaeger...

7.1CVSS6AI score0.00427EPSS
SaveExploits0References6
OSV
OSV
added 2024/06/05 6:15 p.m.18 views

CVE-2024-4008

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

8.8CVSS5.8AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/05 6:15 p.m.32 views

CVE-2024-4009

Replay Attack in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to capture/replay KNX telegram to local KNX Bus-System...

9.2CVSS9AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/05 6:15 p.m.33 views

CVE-2024-4008

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

9.6CVSS9.1AI score0.00274EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/05 5:19 p.m.48 views

CVE-2024-4009 Replay Attack in KNX Secure Devices

Replay Attack in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to capture/replay KNX telegram to local KNX Bus-System...

9.2CVSS9AI score0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/05 5:15 p.m.44 views

CVE-2024-4008 FDSK Leak in KNX Secure Devices

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

9.6CVSS9.1AI score0.00274EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2024/01/15 10:56 a.m.7 views

jaeger-direkt.com Cross Site Scripting vulnerability OBB-3834975

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2023/08/02 10:49 a.m.49 views

CVE-2023-36656

A flaw was found in the jaeger-ui package. A Cross-site scripting vulnerability allows a remote attacker to execute arbitrary code via the KeyValuesTable component...

5.7CVSS7.3AI score0.01113EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/07/17 4:15 p.m.8 views

CVE-2023-36656

Cross Site Scripting XSS vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component...

5.4CVSS6.5AI score0.01113EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/07/17 12:00 a.m.17 views

CVE-2023-36656

Cross Site Scripting XSS vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component...

6.3AI score0.01113EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/07/17 12:00 a.m.15 views

Jaeger UI 跨站脚本漏洞

Jaeger UI is the web interface for Jaeger. A security vulnerability exists in Jaeger UI versions prior to v.1.31.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the KeyValuesTable component...

5.4CVSS6.2AI score0.01113EPSS
SaveExploits1References4
OSV
OSV
added 2023/07/17 12:00 a.m.20 views

CVE-2023-36656

Cross Site Scripting XSS vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via the KeyValuesTable component...

6.6AI score
SaveExploits0References5
CVE
CVE
added 2023/07/17 12:00 a.m.77 views

CVE-2023-36656

CVE-2023-36656 affects Jaeger UI prior to version 1.31.0. The issue is a Cross-Site Scripting (XSS) vulnerability in the KeyValuesTable component that can allow a remote attacker to execute arbitrary code in a victim’s browser. Affected software: Jaeger UI. Root cause: unsanitized input handling ...

5.4CVSS5.4AI score0.01113EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder