736 matches found
MGASA-2024-0093 Updated clojure packages fix security vulnerability
An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service DoS via the clojure.core$partial$fn5920 function. CVE-2024-22871...
GHSA-592J-995H-P23J vulnerabilities
Vulnerabilities for packages: ruby, jruby...
CVE-2024-29018 vulnerabilities
Vulnerabilities for packages: crossplane, tkn, buildkitd, wolfictl, aactl, kubescape, spire-server, kaniko, cadvisor, up, cilium-cli, docker-compose, zot, buf, trivy, ko, melange, conftest, conftest-fips, cadvisor-fips, loki, syft, spire-server-fips, kargo, prometheus, dagger, ctop, grype...
GHSA-G623-JCGG-MHMM vulnerabilities
Vulnerabilities for packages: argo-cd, argo-cd-fips...
CVE-2024-28180 vulnerabilities
Vulnerabilities for packages: grpc-health-probe, minio, tekton-chains, aactl, kubescape, sops, bank-vaults-fips, rekor, sigstore-scaffolding-fips, caddy-fips, melange, temporal-fips, temporal-ui-server, vault, apko, gomplate, guac, flux-kustomize-controller, vexctl, rancher-agent, ko-fips,...
GHSA-HJ3V-M684-V259 vulnerabilities
Vulnerabilities for packages: falcoctl-fips, mc, minio, minio-fips, falcoctl, mc-fips, boring-registry-fips, spire-server-fips, boring-registry, spire-server, external-secrets-fips...
CVE-2024-27304 vulnerabilities
Vulnerabilities for packages: temporal-server-fips, trillian-fips, caddy, amass, src, ferretdb, temporal-server, kine, wavefront-collector-for-kubernetes, caddy-fips, trillian, step, kube-bench-fips, argo-workflows-fips, k3s, spicedb, kube-bench, kots, argo-workflows, falcosidekick-fips, step-ca...
CVE-2024-27289 vulnerabilities
Vulnerabilities for packages: trillian, step, trillian-fips, kots, argo-workflows, caddy, argo-workflows-fips, wavefront-collector-for-kubernetes, step-ca, caddy-fips...
GHSA-H3M7-RQC4-7H9P vulnerabilities
Vulnerabilities for packages: spicedb...
GHSA-6VQW-3V5J-54X4 vulnerabilities
Vulnerabilities for packages: mitmproxy, py3-cassandra-medusa, ggshield, kubeflow-pipelines, airflow, request-1276, py3-cryptography, az...
GHSA-X989-52FC-4VR4 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble, hubble-fips...
MGASA-2024-0045 Updated wireshark packages fix security vulnerabilities
The updated packages fix security vulnerabilities: RTPS dissector memory leak. CVE-2023-5371 SSH dissector invalid read of memory blocks. CVE-2023-6174 NetScreen File Parsing Heap-based Buffer Overflow. CVE-2023-6175 GVCP dissector crash via packet injection or crafted capture file. CVE-2024-0208...
CVE-2024-20982 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2024-20923 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-11-openj9...
CVE-2024-25620 vulnerabilities
Vulnerabilities for packages: flux-source-controller, chartmuseum, up, cilium-cli, eksctl, zarf, flux-helm-controller, helm-push, helm-operator, k8sgpt, k9s, kots, zot, trivy, kubescape, kubevela...
CVE-2024-25062 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-26-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-8-openj9, openjdk-11-openj9...
GHSA-J86V-2VJR-FG8F vulnerabilities
Vulnerabilities for packages: etcd, dgraph, etcd-fips...
CVE-2024-24557 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, docker-credential-gcr, kubeflow-katib, tekton-chains, zarf, flux-helm-controller, skaffold, buildkitd, slsa-verifier, aactl, cri-tools, kubescape, goreleaser, timoni, crane, falcoctl-fips, cadvisor, chartmuseum, up, helm-operator-fips...
GHSA-XR7R-F8XQ-VFVV vulnerabilities
Vulnerabilities for packages: zarf, skaffold, buildkitd, kubernetes, wolfictl, kubescape, kaniko, cadvisor, k9s, zot, runc, nerdctl, docker, trivy, syft, podman, newrelic-infrastructure-agent, k3s, skopeo, kots, ctop, k3d, grype...