CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, nodetaint, kubeflow-pipelines, kubernetes-csi-driver-hostpath, spark-operator, local-static-provisioner, ip-masq-agent, argocd-image-updater, aws-efs-csi-driver, kubernetes...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: temporal, kubernetes-csi-external-provisioner, cortex, gitness, aws-flb-kinesis, ferretdb, kubernetes-event-exporter, kwok, helm-operator, kaniko, ctop, guac, kubeflow, crossplane-provider-azure, sonobuoy, crossplane-provider-aws-cloudfront, step-ca, dagger, k3d,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: nri-kubernetes, kubernetes-event-exporter, metrics-server, logstash-exporter, policy-controller, prometheus-postgres-exporter-fips, crossplane-provider-aws-eks, thanos-operator, falcoctl, aws-efs-csi-driver, step, vault-k8s-fips, rekor, certificate-transparency-fips,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, aws-efs-csi-driver-fips, aws-ebs-csi-driver, spark-operator, ip-masq-agent, kubernetes-dns-node-cache, prometheus-adapter, nodetaint...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, nodetaint, spark-operator, prometheus-adapter, ip-masq-agent, aws-efs-csi-driver...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, aws-efs-csi-driver-fips, aws-ebs-csi-driver, spark-operator, ip-masq-agent, kubernetes-dns-node-cache, prometheus-adapter, nodetaint...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, bom, metrics-server, prometheus-node-exporter-fips, flux, prometheus-postgres-exporter-fips, pulumi-language-java, node-problem-detector, kaf, kubernetes-csi-external-provisioner, crossplane-provider-aws, kube-oidc-proxy,...

CVE-2023-41041 User session is still usable after logout in graylog2-server

Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged out, a user session may still be used for API requests until it has reached its original expiry time. Each node maintains an in-memory cache of user sessions. Upon a cache-miss,...

GHSA-C7FC-CM7P-92R2 Openstack ironic-inspector has SQL injection vulnerability in node_cache

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

CVE-2020-13949 vulnerabilities

Vulnerabilities for packages: automq, druid, trino, automq-fips...

The vulnerability of the node_cache.find_node() function in the Ironic Inspector daemon, a hardware self-analysis tool for the OpenStack cloud service creation platform, allows a malicious actor to trigger a service failure.

The vulnerability of the nodecache.findnode function in the Ironic Inspector hardware self-analysis daemon of the OpenStack SDN platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow a malicious actor to cause service...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...

openstack-ironic-inspector SQL Injection Vulnerability

openstack-ironic-inspector is a hardware inspection daemon. The program is mainly used to inspect the hardware properties of nodes managed by OpenStack Ironic. A SQL injection vulnerability exists in the 'nodecache.findnode' function in openstack-ironic-inspector. The vulnerability stems from a...

DEBIAN-CVE-2019-10141

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

PYSEC-2019-152

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

UBUNTU-CVE-2019-10141

A vulnerability was found in openstack-ironic-inspector all versions excluding 5.0.2, 6.0.3, 7.2.4, 8.0.3 and 8.2.1. A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...

openstack-ironic-inspector: SQL Injection vulnerability when receiving introspection data

A SQL-injection vulnerability was found in openstack-ironic-inspector's nodecache.findnode. This function makes a SQL query using unfiltered data from a server reporting inspection results by a POST to the /v1/continue endpoint. Because the API is unauthenticated, the flaw could be exploited by a...