jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin

A flaw was found in the script-security Jenkins Plugin. In affected versions of the script-security plugin, property assignments performed implicitly by the Groovy language runtime when invoking map constructors were not intercepted by the sandbox. This vulnerability allows attackers with...

FreeBSD : Composer -- Code execution and possible privilege escalation (33ba2241-c68e-11ee-9ef3-001999f8d30b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 33ba2241-c68e-11ee-9ef3-001999f8d30b advisory. - Composer is a dependency Manager for the PHP language. In affected versions several files within the...

CVE-2024-24821

Composer is a dependency Manager for the PHP language. In affected versions several files within the local working directory are included during the invocation of Composer and in the context of the executing user. As such, under certain conditions arbitrary code execution may lead to local...

GHSA-3WW4-GG4F-JR7F vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, py3-cassandra-medusa, mitmproxy, az, ggshield...

GHSA-3WW4-GG4F-JR7F vulnerabilities

Vulnerabilities for packages: mitmproxy, py3-cassandra-medusa, ggshield, az, kubeflow-pipelines...

CVE-2023-50782 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, py3-cassandra-medusa, mitmproxy, az, ggshield...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: kots, ko-fips, goreleaser, helm-operator, crane, falcoctl, kubeflow-katib, nerdctl, k8sgpt, docker-credential-gcr, vexctl, buildkitd, argo-workflows, flux, k9s, trivy, bom, timoni, cadvisor, cosign, k3d, kubevela, kpt, scorecard, zot, skopeo, guac,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: kots, ko-fips, goreleaser, helm-operator, crane, falcoctl, kubeflow-katib, nerdctl, k8sgpt, docker-credential-gcr, vexctl, buildkitd, argo-workflows, flux, k9s, trivy, bom, timoni, cadvisor, cosign, k3d, kubevela, kpt, scorecard, zot, skopeo, guac,...

PurpleKeep - Providing Azure Pipelines To Create An Infrastructure And Run Atomic Tests

With the rapidly increasing variety of attack techniques and a simultaneous rise in the number of detection rules offered by EDRs Endpoint Detection and Response and custom-created ones, the need for constant functional testing of detection rules has become evident. However, manually re-running...

GHSA-9V9H-CGJ8-H64P vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, mitmproxy, py3-cassandra-medusa, openssl, az, ggshield...

GHSA-9V9H-CGJ8-H64P vulnerabilities

Vulnerabilities for packages: openssl, mitmproxy, ggshield, py3-cassandra-medusa, az, kubeflow-pipelines...

CVE-2024-0727 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, mitmproxy, py3-cassandra-medusa, openssl, az, ggshield...

CVE-2024-0727 vulnerabilities

Vulnerabilities for packages: openssl, mitmproxy, ggshield, py3-cassandra-medusa, az, kubeflow-pipelines...

PT-2024-2595 · Elastic · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch affected versions not specified Description: A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash. The issue is also relate...

GHSA-JCHW-25XP-JWWC vulnerabilities

Vulnerabilities for packages: configurable-http-proxy, opensearch-dashboards, opensearch-dashboards-fips, lerna, arangodb, kubeflow-pipelines, kubeflow-centraldashboard, kibana...

GHSA-JCHW-25XP-JWWC vulnerabilities

Vulnerabilities for packages: configurable-http-proxy, kubeflow-pipelines, kubeflow-centraldashboard, lerna...

CVE-2023-26159 vulnerabilities

Vulnerabilities for packages: configurable-http-proxy, opensearch-dashboards, opensearch-dashboards-fips, lerna, arangodb, kubeflow-pipelines, kubeflow-centraldashboard, kibana...

CVE-2023-26159 vulnerabilities

Vulnerabilities for packages: configurable-http-proxy, kubeflow-pipelines, kubeflow-centraldashboard, lerna...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: kots, k8sgpt, buildkitd, trivy, melange, kaniko, cilium-cli, gitness, k3d, kubevela, fuse-overlayfs-snapshotter, zot, flux-helm-controller, grype, kubescape, skaffold, up, eksctl, flux-source-controller, newrelic-infrastructure-agent, helm-push, helm, ctop...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.10.6 release and security update

Red Hat OpenShift Pipelines 1.10.6 has been released. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in t...