10766 matches found
CVE-2023-45290 vulnerabilities
Vulnerabilities for packages: eksctl, s5cmd, k8ssandra-operator, metrics-server, docker-credential-acr-env, scorecard, nri-nginx, falcoctl-fips, sonobuoy, nri-nagios, thanos, grpcurl, wire-go, grype, kubernetes-dashboard-fips, kyverno-policy-reporter-kyverno-plugin, actions-runner-controller,...
CVE-2024-24784 vulnerabilities
Vulnerabilities for packages: eksctl, s5cmd, k8ssandra-operator, metrics-server, docker-credential-acr-env, scorecard, nri-nginx, falcoctl-fips, sonobuoy, nri-nagios, thanos, grpcurl, wire-go, grype, kubernetes-dashboard-fips, kyverno-policy-reporter-kyverno-plugin, actions-runner-controller,...
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: eksctl, s5cmd, k8ssandra-operator, metrics-server, docker-credential-acr-env, scorecard, nri-nginx, falcoctl-fips, sonobuoy, nri-nagios, thanos, grpcurl, wire-go, grype, kubernetes-dashboard-fips, kyverno-policy-reporter-kyverno-plugin, actions-runner-controller,...
CVE-2024-24785 vulnerabilities
Vulnerabilities for packages: eksctl, s5cmd, k8ssandra-operator, metrics-server, docker-credential-acr-env, scorecard, nri-nginx, falcoctl-fips, sonobuoy, nri-nagios, thanos, grpcurl, wire-go, grype, kubernetes-dashboard-fips, kyverno-policy-reporter-kyverno-plugin, actions-runner-controller,...
CVE-2023-45290 vulnerabilities
Vulnerabilities for packages: dataplaneapi, kubeflow-pipelines, yq, envoy-ratelimit, flux-image-reflector-controller, kube-logging-operator, go-md2man, kaf, dockerize, nri-f5, govulncheck, controller-gen, flux, gcsfuse, flux-helm-controller, trillian, aws-flb-kinesis, nri-apache, nri-cassandra,...
AZL-35662 CVE-2024-24786 affecting package kubernetes for versions less than 1.30.1-1
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
CVE-2024-24783 vulnerabilities
Vulnerabilities for packages: dataplaneapi, kubeflow-pipelines, yq, envoy-ratelimit, flux-image-reflector-controller, kube-logging-operator, go-md2man, kaf, dockerize, nri-f5, govulncheck, controller-gen, flux, gcsfuse, flux-helm-controller, trillian, aws-flb-kinesis, nri-apache, nri-cassandra,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: docker, rook, actions-runner-controller, grafana-agent-operator, slsa-verifier, temporal, kubernetes-dashboard, step, hubble, terraform-provider-aws, crossplane-provider-azure-sql, prometheus-operator, oauth2-proxy, tkn, step-ca, kyverno-policy-reporter-ui, ferretdb,...
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: dataplaneapi, kubeflow-pipelines, yq, envoy-ratelimit, flux-image-reflector-controller, kube-logging-operator, go-md2man, kaf, dockerize, nri-f5, govulncheck, controller-gen, flux, gcsfuse, flux-helm-controller, trillian, aws-flb-kinesis, nri-apache, nri-cassandra,...
CVE-2024-24785 vulnerabilities
Vulnerabilities for packages: dataplaneapi, kubeflow-pipelines, yq, envoy-ratelimit, flux-image-reflector-controller, kube-logging-operator, go-md2man, kaf, dockerize, nri-f5, govulncheck, controller-gen, flux, gcsfuse, flux-helm-controller, trillian, aws-flb-kinesis, nri-apache, nri-cassandra,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, envoy-ratelimit, flux-image-reflector-controller, kube-logging-operator, kaf, cilium-cli, cosign, grpc-health-probe, crossplane-provider-aws-cloudfront, crossplane-provider-aws-rds, terraform-provider-azurerm, flux, gcsfuse, flux-helm-controller,...
CVE-2024-24783 vulnerabilities
Vulnerabilities for packages: eksctl, s5cmd, k8ssandra-operator, metrics-server, docker-credential-acr-env, scorecard, nri-nginx, falcoctl-fips, sonobuoy, nri-nagios, thanos, grpcurl, wire-go, grype, kubernetes-dashboard-fips, kyverno-policy-reporter-kyverno-plugin, actions-runner-controller,...
AZL-35580 CVE-2024-24786 affecting package kubernetes for versions less than 1.28.4-12
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...
CVE-2023-48795 affecting package kubernetes for versions less than 1.28.4-4
CVE-2023-48795 affecting package kubernetes for versions less than 1.28.4-4. A patched version of the package is available...
Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 3 (6.0.1-89)
This update provides stability improvements. Vulnerability id: VSTOR-82695 Deploying a Kubernetes cluster may take longer than expected. Vulnerability id: VSTOR-82730 Restarting libvirtd causes EFI VMs to reboot...
GHSA-MRWW-27VC-GGHV vulnerabilities
Vulnerabilities for packages: kine, falcosidekick-fips, src, spicedb, trillian, wavefront-collector-for-kubernetes, kots, kube-bench, step, k3s, temporal-server, argo-workflows, caddy, temporal-server-fips, argo-workflows-fips, amass, step-ca, caddy-fips, kube-bench-fips, trillian-fips, ferretdb...
GHSA-M7WR-2XF7-CM9P vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, step-ca, argo-workflows, caddy-fips, trillian, caddy, kots, trillian-fips, step, argo-workflows-fips...
openSUSE: Security Advisory for podman (SUSE-SU-2023:0187-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Helm Security Vulnerabilities
Helm is a Kubernetes package manager. A security vulnerability exists in Helm 3.13.3 and earlier versions, which stems from displaying confidential information with the --dry-run option in plaintext...
Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a runc security vulnerability (CVE-2024-21626)
Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability found in the runc component where an attacker could gain unauthorized access to the host filesystem CVE-2024-21626. Vulnerability Details CVEID: CVE-2024-21626 Description: Open Container Initiative runc could allow a...