CVE-2023-6917

A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. While certain services operate within the confines of limited PCP user/group privileges, others are granted full root privileges...

Performance Co-Pilot Security Vulnerability

Performance Co-Pilot is an open source software infrastructure for monitoring, visualizing, logging, responding to, and controlling the state, activity, and performance of networks, computers, applications, and servers. A security vulnerability exists in Performance Co-Pilot PCP that stems from t...

PT-2024-6049 · Unknown +5 · Performance Co-Pilot +5

Name of the Vulnerable Software and Affected Versions: Performance Co-Pilot PCP affected versions not specified Description: A vulnerability has been identified in the Performance Co-Pilot PCP package, stemming from the mixed privilege levels utilized by systemd services associated with PCP. This...

academy.pilottraining.ca Cross Site Scripting vulnerability OBB-3860873

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: bom, dagger, vexctl, k3d, loki, flux-image-reflector-controller, eksctl, goreleaser, argo-workflows-fips, ctop, crane, helm-fips, kpt, gitsign, zot, zarf, rancher-machine, falcoctl-fips, kots, kubeflow-katib, k8sgpt, cadvisor-fips, pulumi, falcoctl, k3s,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: bom, dagger, vexctl, k3d, loki, flux-image-reflector-controller, eksctl, goreleaser, argo-workflows-fips, ctop, crane, helm-fips, kpt, gitsign, zot, zarf, rancher-machine, falcoctl-fips, kots, kubeflow-katib, k8sgpt, cadvisor-fips, pulumi, falcoctl, k3s,...

CVE-2024-21664 vulnerabilities

Vulnerabilities for packages: tekton-chains, vexctl, spire-server, mc, falcoctl, boring-registry, gitsign, minio, kubescape...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: tekton-chains, vexctl, falcoctl, gitsign, kubescape...

CVE-2023-49290 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, tekton-chains, vexctl, falcoctl, cosign-fips, gitsign, kubescape...

pilot-watch.de Improper Access Control vulnerability OBB-3780041

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fedora: Security Advisory (FEDORA-2023-3bc3404fc1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: grafana-pcp-5.1.1-4.fc39

This Grafana plugin for Performance Co-Pilot includes data sources for scalable time series from pmseries1 and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace1, as well as several dashboards...

Fedora: Security Advisory for grafana-pcp (FEDORA-2023-00b3e9d551)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: grafana-pcp-5.1.1-4.fc38

This Grafana plugin for Performance Co-Pilot includes data sources for scalable time series from pmseries1 and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace1, as well as several dashboards...

Google Reportedly Disconnecting Employees from the Internet

Supposedly Google is starting a pilot program of disabling Internet connectivity from employee computers: The company will disable internet access on the select desktops, with the exception of internal web-based tools and Google-owned websites like Google Drive and Gmail. Some workers who need th...

Moderate: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

ALSA-2023:2785 Moderate: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: golang: net/http: handle server errors after sending GOAWAY CVE-2022-27664 For...

Netflix MH370: The plane that wasn’t hacked

I’m a sucker for a good documentary, but the recent Netflix MH370: The Plane That Disappeared had me shouting at the screen. The first episode talks about the most widely accepted theory; a tragic pilot-created murder-suicide. However, the second episode goes completely off the rails, discussing ...

Moderate: Red Hat Security Advisory: grafana-pcp security and enhancement update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Moderate: grafana-pcp security and enhancement update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: golang: net/http: handle server errors after sending GOAWAY CVE-2022-27664 For...