132 matches found
Apple macOS 安全漏洞
Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS version 15, which originated when an attacker with physical access to a Sidecar-enabled macOS device may be able to bypass the lock screen...
GHSA-CX63-2MW6-8HW5 vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-katib, request-1276, py3-pipenv, py3.9-setuptools, py3-torchvision-cuda-11.8, az, k8s-sidecar, nemo, nvidia-nsight-compute-13.2, py3-cassandra-medusa, reflex, airflow, superset, nvidia-nsight-compute-13.1...
CVE-2024-6345 vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-katib, request-1276, py3-pipenv, py3.9-setuptools, py3-torchvision-cuda-11.8, az, k8s-sidecar, nemo, nvidia-nsight-compute-13.2, py3-cassandra-medusa, reflex, airflow, superset, nvidia-nsight-compute-13.1...
CVE-2024-3651 vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-katib, kserve, jwt-tool, kubeflow-pipelines-visualization-server, nvidia-nsight-compute-13.1, request-1276, py3-pipenv, az, confluent-docker-utils, k8s-sidecar, py3-cassandra-medusa, ggshield, nvidia-nsight-compute-13.2, py3-idna,...
GHSA-248V-346W-9CWC vulnerabilities
Vulnerabilities for packages: az, confluent-docker-utils, superset, py3-certifi, kubeflow-pipelines, kubeflow-pipelines-visualization-server, checkov, patroni, reflex, kubeflow-volumes-web-app, k8s-sidecar, kubeflow-jupyter-web-app, dask-gateway, py3-pipenv, jwt-tool, airflow, mlflow,...
CVE-2024-39689 vulnerabilities
Vulnerabilities for packages: az, confluent-docker-utils, superset, py3-certifi, kubeflow-pipelines, kubeflow-pipelines-visualization-server, checkov, patroni, reflex, kubeflow-volumes-web-app, k8s-sidecar, kubeflow-jupyter-web-app, dask-gateway, py3-pipenv, jwt-tool, airflow, mlflow,...
CVE-2024-35195 vulnerabilities
Vulnerabilities for packages: kubeflow-jupyter-web-app, ggshield, checkov, py3-pipenv, az, confluent-docker-utils, mlflow, patroni, jwt-tool, reflex, superset, kubeflow-volumes-web-app, airflow, py3-cassandra-medusa, k8s-sidecar, kubeflow-pipelines, kubeflow-pipelines-visualization-server,...
GHSA-9WX4-H78V-VM56 vulnerabilities
Vulnerabilities for packages: kubeflow-jupyter-web-app, ggshield, checkov, py3-pipenv, az, confluent-docker-utils, mlflow, patroni, jwt-tool, reflex, superset, kubeflow-volumes-web-app, airflow, py3-cassandra-medusa, k8s-sidecar, kubeflow-pipelines, kubeflow-pipelines-visualization-server,...
GHSA-JJG7-2V4V-X38H vulnerabilities
Vulnerabilities for packages: checkov, kubeflow-katib, kserve, jwt-tool, kubeflow-pipelines-visualization-server, nvidia-nsight-compute-13.1, request-1276, py3-pipenv, az, confluent-docker-utils, k8s-sidecar, py3-cassandra-medusa, ggshield, nvidia-nsight-compute-13.2, py3-idna,...
@gun-vue/relay (>=0.4.2 <=0.5.0), @mimik/configuration (>=4.4.10 <=5.0.11) +5 more potentially affected by CVE-2023-42282 via ip (=2.0.0)
ip NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ip and may be impacted: - @gun-vue/relay =0.4.2, =4.4.10, =1.0.0, =1.0.19, =1.0.0, =1.0.3 Source cves: CVE-2023-42282 Source advisory: OSV:GHSA-78XJ-CGH5-2H22...
GHSA-MQ26-G339-26XF vulnerabilities
Vulnerabilities for packages: k8s-sidecar, jwt-tool...
CVE-2023-5752 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, jwt-tool...
GHSA-G4MX-Q9VG-27P4 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, request-1276, py3-pipenv, py3-torchvision-cuda-11.8, py3-tensorflow-serving-api, az, k8s-sidecar, py3-cassandra-medusa, nvidia-nsight-compute-13.2, py3.13-scanner-test-libraries, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, jwt-tool,...
CVE-2023-45803 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, request-1276, py3-pipenv, py3-torchvision-cuda-11.8, py3-tensorflow-serving-api, az, k8s-sidecar, py3-cassandra-medusa, nvidia-nsight-compute-13.2, py3.13-scanner-test-libraries, kubeflow-volumes-web-app, kubeflow-jupyter-web-app, jwt-tool,...
CVE-2023-45226
The BIG-IP SPK TMM Traffic Management Module f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credentials that may allow an attacker with the ability to intercept traffic to impersonate the SPK Secure Shell SSH server on those containers. This is only exposed when ssh debug is...
CVE-2023-45226
CVE-2023-45226 affects BIG-IP Next SPK, specifically the f5-debug-sidecar and f5-debug-sshd containers in SPK TMM. The issue is hardcoded credentials that could let an attacker intercept traffic and impersonate the SPK SSH server when ssh debug is enabled. Exposure is documented in multiple sourc...
PT-2023-8552 · F5 · Big-Ip
Name of the Vulnerable Software and Affected Versions: BIG-IP versions prior to the fixed version Description: The BIG-IP SPK TMM contains hardcoded credentials in the f5-debug-sidecar and f5-debug-sshd containers. This may allow an attacker to impersonate the SPK Secure Shell SSH server on those...
The Liquidity mining callpath sidecar owner can pull native tokens from the Dex
Lines of code Vulnerability details Impact The owner of liquidity mining sidecar can pull the native coins that are stored in the CrocSwapDex to reward the users. Proof of Concept The setConcRewards and setAmbRewards functions doesn't check if the quoted amount of rewards are actually sent by the...