730 matches found
CVE-2024-28893
CVE-2024-28893 affects HP SoftPaqs. The issue enables potential arbitrary code execution when a SoftPaq configuration file is modified after extraction, as described by HP’s advisory. The underlying impact is high with local attack vector, requiring user interaction and elevated privileges, and c...
CVE-2024-3154 vulnerabilities
Vulnerabilities for packages: kubernetes, cadvisor-fips, opentelemetry-collector-contrib, opentelemetry-collector-contrib-fips, wolfictl, grype, buildah, cadvisor, ctop, neuvector-scanner...
GHSA-PXHW-596R-RWQ5 vulnerabilities
Vulnerabilities for packages: kubernetes, local-static-provisioner, aws-efs-csi-driver, argocd-image-updater-fips, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, rancher-webhook, kubernetes-csi-driver-hostpath, nodetaint, ip-masq-agent, rancher-webhook-fips, aws-ebs-csi-driver,...
CVE-2024-32650 vulnerabilities
Vulnerabilities for packages: kdash, wasmcloud, samply, cargo-audit, pgcat, xh...
MGASA-2024-0136 Updated puppet packages fix security vulnerabilities
The updated packages fix missing requires for puppet and fix commands in systemd units...
GHSA-MR82-8J83-VXMV vulnerabilities
Vulnerabilities for packages: datadog-agent...
CVE-2024-3772 vulnerabilities
Vulnerabilities for packages: datadog-agent...
GHSA-4V7X-PQXF-CX7M vulnerabilities
Vulnerabilities for packages: scorecard, harbor-registry-fips, kyverno-policy-reporter-kyverno-plugin, wavefront-collector-for-kubernetes, configmap-reload, temporal-server-fips, mkcert, metallb, crossplane-provider-azure-sql, gitsign, dive, crossplane-provider-aws-sns, jsonnet-bundler,...
CVE-2023-45288 vulnerabilities
Vulnerabilities for packages: hugo-extended, grafana-operator, skopeo, flannel-cni-plugin, dgraph, vault-k8s, petname, task, rootlesskit, nri-mssql, k3s, nri-prometheus, nri-haproxy, spqr, step-issuer, docker-credential-ecr-login, pulumi-language-java, trillian, cloudflared,...
MGASA-2024-0093 Updated clojure packages fix security vulnerability
An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service DoS via the clojure.core$partial$fn5920 function. CVE-2024-22871...
GHSA-592J-995H-P23J vulnerabilities
Vulnerabilities for packages: jruby, ruby...
CVE-2024-29018 vulnerabilities
Vulnerabilities for packages: cadvisor-fips, prometheus, dagger, cilium-cli, zot, cadvisor, loki, kaniko, kubescape, conftest-fips, grype, crossplane, ctop, ko, kargo, conftest, docker-compose, up, spire-server, trivy, aactl, wolfictl, buf, melange, syft, tkn, spire-server-fips, buildkitd...
GHSA-G623-JCGG-MHMM vulnerabilities
Vulnerabilities for packages: argo-cd, argo-cd-fips...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: zarf, guac, bank-vaults-fips, temporal-fips, neuvector, gitsign, falcoctl-fips, kube-rbac-proxy, kubescape, nerdctl, temporal, cilium, vault-csi-provider, grpc-health-probe, caddy-fips, aactl, apko, sops, oauth2-proxy, slsa-verifier, gomplate-fips, zot, skaffold,...
GHSA-HJ3V-M684-V259 vulnerabilities
Vulnerabilities for packages: mc, spire-server, falcoctl-fips, mc-fips, spire-server-fips, external-secrets-fips, minio-fips, boring-registry-fips, minio, boring-registry, falcoctl...
CVE-2024-27289 vulnerabilities
Vulnerabilities for packages: argo-workflows-fips, argo-workflows, step, wavefront-collector-for-kubernetes, kots, trillian, step-ca, trillian-fips, caddy, caddy-fips...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: wavefront-collector-for-kubernetes, temporal-server-fips, falcosidekick-fips, argo-workflows-fips, argo-workflows, kube-bench, kots, trillian, caddy, step, kine, kube-bench-fips, k3s, amass, temporal-server, caddy-fips, src, ferretdb, step-ca, trillian-fips, spicedb...
GHSA-H3M7-RQC4-7H9P vulnerabilities
Vulnerabilities for packages: spicedb...