1431 matches found
BentoML's runner server Vulnerable to Remote Code Execution (RCE) via Insecure Deserialization
Summary There was an insecure deserialization in BentoML's runner server. By setting specific headers and parameters in the POST request, it is possible to execute any unauthorized arbitrary code on the server, which will grant the attackers to have the initial access and information disclosure o...
Security update for google-guest-agent
This update for google-guest-agent fixes the following issues: CVE-2024-45337: golang.org/x/crypto/ssh: Fixed misuse of ServerConfig.PublicKeyCallback leading to authorization bypass bsc1234563. Other fixes: - Updated to version 20250327.01 bsc1239763, bsc1239866 Remove error messages from...
CVE-2025-30204 vulnerabilities
Vulnerabilities for packages: opentofu, cortex, sqlexporter, pulumi, openfga, weaviate, xeol, splunk-otel-collector, terragrunt, kine, flux, kargo, rclone, buildkitd, gitness, minio-operator, external-dns, restic, grafana-agent-operator, kyverno-policy-reporter-ui, atlantis, sftpgo-plugin-kms,...
CVE-2024-9070 Deserialization Vulnerability in BentoML's Runner Server in bentoml/bentoml
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
CVE-2024-9070 Deserialization Vulnerability in BentoML's Runner Server in bentoml/bentoml
A deserialization vulnerability exists in BentoML's runner server in bentoml/bentoml versions =1.3.4.post1. By setting specific parameters, an attacker can execute unauthorized arbitrary code on the server, causing severe harm. The vulnerability is triggered when the args-number parameter is...
forgejo-runner-6.2.2-3.1 on GA media (moderate)
forgejo-runner-6.2.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:14881-1 Rating: moderate Cross-References: CVE-2025-22869 CVSS scores: CVE-2025-22869 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-22869 SUSE : 8.2...
GHSA-WPXF-3MM2-76F8 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-G5QP-3JX2-P69R vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-G5QP-3JX2-P69R vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
GHSA-WPXF-3MM2-76F8 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
OPENSUSE-SU-2025:14881-1 forgejo-runner-6.2.2-3.1 on GA media
These are all security issues fixed in the forgejo-runner-6.2.2-3.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-0475 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2025-0475 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
CVE-2024-8186 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
CVE-2024-8186 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-7WRW-R4P8-38RX vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws, influx, docker-credential-acr-env, volume-modifier-for-k8s, litestream, secrets-store-csi-driver-provider-aws, kube-vip, kustomize, bom, restic, haproxy-ingress, prometheus-adapter, wire-go, lazydocker, multus-cni, sftpgo-plugin-eventstore,...
GHSA-V84C-53C6-XMMP vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips...
GHSA-R3MM-QXV5-X23H vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips...