CERTFR-2016-ALE-007

creationtimestamp| type| source ---|---|--- 2025-01-29 16:15:46+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvejmqgcv2d...

CERTFR-2024-CTI-009

creationtimestamp| type| source ---|---|--- 2025-01-29 13:51:46+00:00| seen| https://bsky.app/profile/test-cvp.bsky.social/post/3lgv4i5vr332i...

OpenShift GitOps Operator Namespace Isolation Break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

GHSA-58FX-7V9Q-3G56 OpenShift GitOps Operator Namespace Isolation Break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

CVE-2024-13484

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

CVE-2024-13484 Openshift-gitops-operator-container: namespace isolation break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

CVE-2024-13484

Technical details for CVE-2024-13484 are not publicly provided in the connected documents. The SUSE advisories mention the CVE but do not supply affected products/versions or root-cause details. Monitor for updates.

CVE-2024-13484 Openshift-gitops-operator-container: namespace isolation break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

CVE-2024-13484 Openshift-gitops-operator-container: namespace isolation break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

CVE-2024-13484

A flaw was found in ArgoCD. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the rule is rolled out cluster-wi...

CVE-2025-24800

creationtimestamp| type| source ---|---|--- 2025-01-28 15:43:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113906744458245865 2025-01-28 16:16:45+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsu4i3xjh2f 2025-01-28 18:47:17+00:00| seen|...

Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 Operations

Cybersecurity researchers have found that ransomware attacks targeting ESXi systems are also leveraging the access to repurpose the appliances as a conduit to tunnel traffic to command-and-control C2 infrastructure and stay under the radar. "ESXi appliances, which are unmonitored, are increasingl...

Schneider Electric EcoStruxure Power Monitoring Expert 跨站脚本漏洞

The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France for power distribution monitoring in IoT environments. A cross-site scripting vulnerability exists in the Schneider Electric EcoStruxure Power Monitoring Expert, which arises from improper input...

Argo CD 安全漏洞

Argo CD is an Argo open source declarative GitOps continuous delivery tool for Kubernetes. A security vulnerability exists in Argo CD that stems from the fact that the openshift.io/cluster-monitoring tag is automatically applied to all namespaces where ArgoCD CR instances are deployed, allowing t...

PT-2025-2188

Name of the Vulnerable Software and Affected Versions openshift-gitops-operator-container affected versions not specified ArgoCD affected versions not specified Description A flaw was found in the software, allowing a namespace to create a rogue PrometheusRule when the...

CVE-2024-37526

creationtimestamp| type| source ---|---|--- 2025-01-27 21:58:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113902557559561784 2025-01-27 22:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqxpcasxc2b...

CVE-2024-56960

creationtimestamp| type| source ---|---|--- 2025-01-27 19:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnobqxmh27 2025-01-27 19:19:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113901932858609641 2025-01-27 21:52:07+00:00| seen|...

CVE-2024-56948

creationtimestamp| type| source ---|---|--- 2025-01-27 18:49:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113901814745144782 2025-01-27 19:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnnjwp562f 2025-01-27 22:25:00+00:00| seen|...

Virtuozzo Hybrid Infrastructure 6.3 Update 1 (6.3.1-91)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover improvements in the compute service, core and object storage, as well as monitoring and alerting. Additionally, this release delivers stability and security improvements, and addresses issues found in...

CVE-2024-54728

creationtimestamp| type| source ---|---|--- 2025-01-26 15:54:39+00:00| confirmed| https://gist.github.com/xu-yanbo202000460009/00dacd7bfede713a0f052a531da4fabd 2025-01-26 17:57:50+00:00| seen| https://vulnerability.circl.lu/comment/21f63dda-f998-4c51-b7ce-6efc09015c56 2025-01-27 22:23:49+00:00|...