CVE-2023-39318 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, metrics-server, kind...

CVE-2023-29409 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go, kind...

CVE-2023-29409 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, go...

Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities

Summary IBM Cloud Pak for Security includes components with known vulnerabilities. These have been updated in the latest release and vulnerabilities have been addressed. Please follow the instructions in the Remediation/Fixes section below to update to the latest version of Cloud Pak for Security...

CVE-2023-29406 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, go, kind...

CVE-2023-29406 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, go...

CVE-2023-29405 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

CVE-2023-29402 vulnerabilities

Vulnerabilities for packages: policy-controller, kubeflow-katib, kind...

CVE-2023-29402 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

CVE-2023-29403 vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, policy-controller...

CVE-2023-29403 vulnerabilities

Vulnerabilities for packages: policy-controller, kubeflow-katib, kind...

SUSE CVE-2019-20149

ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': 'name':'Symbol'. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result...

SUSE CVE-2022-1427

Out-of-bounds Read in mrbobjiskindof in in GitHub repository mruby/mruby prior to 3.2. Impact: Possible arbitrary code execution if being exploited...

DEBIAN-CVE-2022-34265

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected...

PYSEC-2022-213

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected...

CVE-2022-34265: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected...

GHSA-P782-XGP4-8HR8 vulnerabilities

Vulnerabilities for packages: kind, ctop, k3d, grpcurl, terraform-provider-sendgrid, kubeflow, dynamic-localpv-provisioner...

GHSA-P782-XGP4-8HR8 vulnerabilities

Vulnerabilities for packages: kubeflow, dynamic-localpv-provisioner, kind, k3d, grpcurl, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips, ctop, terraform-provider-sendgrid...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Linuxfoundation Containerd

PoC for CVE-2022-23648 This is a proof of concept for @fel...

Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit

At least nine entities across the technology, defense, healthcare, energy, and education industries were compromised by leveraging a recently patched critical vulnerability in Zoho's ManageEngine ADSelfService Plus self-service password management and single sign-on SSO solution. The spying...