CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nri-apache, nri-redis, aws-efs-csi-driver, docker-cli-buildx, grafana-operator, newrelic-infrastructure-agent, kyverno-notation-aws, addon-resizer, mailpit, cue, kubernetes-dashboard, vault-env, polaris, nri-elasticsearch, flux-source-controller, sonobuoy, regclient,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: kapp-controller, nri-apache, nri-redis, buildkitd, headlamp, docker-cli-buildx, kor, cni-plugins, dive, ko, step-kms-plugin, kyverno-notation-aws, kubernetes-dashboard, amazon-cloudwatch-agent-operator, azure-service-operator, helm-set-status, k3s, chart-testing,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: k8sgpt, kapp, amazon-cloudwatch-agent-operator, opa, fzf, azuredisk-csi, fulcio, teleport, falcoctl, rclone, cg, cloud-provider-vsphere, flux-operator, kube-bench, neuvector-sigstore-interface, tigera-operator, kpt, gcp-compute-persistent-disk-csi-driver,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: k8sgpt, kubernetes-dashboard-fips, nri-prometheus, caddy-fips, overmind, certificate-transparency-fips, opa, chainctl, fulcio, timoni, terraform-docs, secrets-store-csi-driver-provider-gcp, falcoctl, cortex-fips, rclone, kube-bench, prometheus-pushgateway,...

CVE-2021-0279

Juniper Networks Contrail Cloud CC releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of RabbitMQ are used when coordinating operations and status information among Contrail services. An attacker with access to an administrative...

Juniper Networks Contrail Cloud 信任管理问题漏洞

Juniper Networks Contrail Cloud is a fully managed telecom cloud operation solution from Juniper Networks, Inc. A security vulnerability previously existed in Juniper Networks Contrail Cloud 13.6.0 that stemmed from enabling the RabbitMQ service by default and using hard-coded credentials. An...