CVE-2023-39318 vulnerabilities

Vulnerabilities for packages: metrics-server, kind, kubeflow-katib...

CVE-2023-39320 vulnerabilities

Vulnerabilities for packages: metrics-server...

Malicious code in mattermost-metrics-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ba6f13c504cc5c8f8eb5e6e5c39a3c91dd5017ddab1919bb2503162fa90d553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4499 Malicious code in mattermost-metrics-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ba6f13c504cc5c8f8eb5e6e5c39a3c91dd5017ddab1919bb2503162fa90d553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Kubernetes: SSRF vulnerability can be exploited when a hijacked aggregated api server such as metrics-server returns 30X

Report Submission Form Summary: This report uses metrics-server as example, but it should be applicable to any aggregated api server. When metrics-server is hijacked, either by modifying the container image directly or by running another pods using the same label selector in kube-system namespace...

CVE-2020-5422

BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM through ps or looking at process details...

CVE-2020-5422 UAA password may appear in BOSH System Metrics Server process arguments

BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM through ps or looking at process details...

CVE-2020-5422

CVE-2020-5422 : BOSH System Metrics Server releases prior to 0.1.0 expose the UAA password as a flag in a process argument on the BOSH director, making the password readable by any user/process on the same VM (e.g., via ps or examining process details). Affected product: BOSH System Metrics Serve...

CVE-2020-5422

BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM through ps or looking at process details...

CVE-2020-5422: UAA password may appear in BOSH System Metrics Server process arguments | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Description BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to any user or process with access to the same VM through ps or looking at process...

Tor Servers Hacked

Two of the seven directory authority servers that the Tor Project uses to run its anonymous browsing service have been compromised, along with a new server that the project uses to host metrics and graphs. The project’s organizers discovered the attack earlier this month and are advising users wh...