Security Vulnerability fixed in Firefox 131.0.3 — Mozilla

When manipulating the selection node cache, an attacker may have been able to cause unexpected behavior, potentially leading to an exploitable crash...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, ip-masq-agent, local-static-provisioner, nodetaint, kubernetes-dns-node-cache, kubeflow-pipelines, kubernetes, spark-operator, kubernetes-csi-driver-hostpath, argocd-image-updater...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, ip-masq-agent, local-static-provisioner, nodetaint, kubernetes-dns-node-cache, kubeflow-pipelines, kubernetes, spark-operator, kubernetes-csi-driver-hostpath, argocd-image-updater...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: boring-registry, pulumi, cri-tools, terraform-docs, terraform-provider-aws, aws-load-balancer-controller, docker, frp, kubevela, stakater-reloader, crossplane-provider-aws-cloudformation, ferretdb, volume-modifier-for-k8s, prometheus-operator, ctop, sops, influx,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, kube-state-metrics, nerdctl, nodetaint, crossplane-provider-azure-authorization, kubevela, trillian-fips, vault-k8s-fips, secrets-store-csi-driver-provider-gcp, grpc-health-probe, sops, kube-rbac-proxy-fips, prometheus-mongodb-exporter,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, aws-efs-csi-driver, nodetaint, prometheus-adapter, kubernetes-dns-node-cache, spark-operator, ip-masq-agent, aws-ebs-csi-driver...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, ip-masq-agent, prometheus-adapter, nodetaint, kubernetes-dns-node-cache, spark-operator...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, aws-efs-csi-driver, nodetaint, prometheus-adapter, kubernetes-dns-node-cache, spark-operator, ip-masq-agent, aws-ebs-csi-driver...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, metrics-server-fips, kube-state-metrics, kubernetes-csi-livenessprobe, nodetaint, kubevela, k3d, flux-notification-controller, gke-gcloud-auth-plugin, ollama, smarter-device-manager-fips, bank-vaults, gitness, sigstore-scaffolding, tekton-chains,...

CVE-2023-41041 User session is still usable after logout in graylog2-server

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss,...

GHSA-C7FC-CM7P-92R2 Openstack ironic-inspector has SQL injection vulnerability in node_cache

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

CVE-2020-13949 vulnerabilities

Vulnerabilities for packages: druid, trino...

The vulnerability of the node_cache.find_node() function in the Ironic Inspector daemon, a hardware self-analysis tool for the OpenStack cloud service creation platform, allows a malicious actor to trigger a service failure.

The vulnerability of the nodecache.findnode function in the Ironic Inspector hardware self-analysis daemon of the OpenStack SDN platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow a malicious actor to cause service...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...

openstack-ironic-inspector SQL Injection Vulnerability

openstack-ironic-inspector is a hardware inspection daemon. The program is mainly used to inspect the hardware properties of nodes managed by OpenStack Ironic. A SQL injection vulnerability exists in the 'nodecache.findnode' function in openstack-ironic-inspector. The vulnerability stems from a...

DEBIAN-CVE-2019-10141

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

PYSEC-2019-152

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

UBUNTU-CVE-2019-10141

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...