CVE-2024-4540 vulnerabilities

Vulnerabilities for packages: keycloak-fips...

GHSA-973X-65J7-XCF4 vulnerabilities

Vulnerabilities for packages: apache-nifi, druid, spark, trino...

CVE-2024-31989 vulnerabilities

Vulnerabilities for packages: argo-cd...

CVE-2024-36039 vulnerabilities

Vulnerabilities for packages: py3-pymysql...

CVE-2024-35195 vulnerabilities

Vulnerabilities for packages: mlflow, py3-cassandra-medusa, kubeflow-pipelines, reflex, ggshield, checkov, py3-pipenv, apache-beam-python-3.11-sdk, patroni, nvidia-nsight-compute-13.1, confluent-docker-utils, nvidia-nsight-compute-13.2, kubeflow-katib, kubeflow-volumes-web-app,...

GHSA-XCQ4-M2R3-CMRJ vulnerabilities

Vulnerabilities for packages: k8sgpt, kubescape, zot...

GHSA-9WX4-H78V-VM56 vulnerabilities

Vulnerabilities for packages: mlflow, py3-cassandra-medusa, kubeflow-pipelines, reflex, ggshield, checkov, py3-pipenv, apache-beam-python-3.11-sdk, patroni, nvidia-nsight-compute-13.1, confluent-docker-utils, nvidia-nsight-compute-13.2, kubeflow-katib, kubeflow-volumes-web-app,...

GHSA-952P-6RRQ-RCJV vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, gitlab-rails-ce-fips, lerna, opensearch-dashboards, kibana, ts-patch, py3-captum, kubeflow-katib, kubeflow-pipelines, semaphore, opensearch-dashboards-fips, renovate...

GHSA-GRV7-FG5C-XMJG vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, lerna, opensearch-dashboards, kibana, arangodb, py3-captum, gitlab-rails-ce-fips, kubeflow-pipelines, opensearch-dashboards-fips...

CVE-2024-4067 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, gitlab-rails-ce-fips, lerna, opensearch-dashboards, kibana, ts-patch, py3-captum, kubeflow-katib, kubeflow-pipelines, semaphore, opensearch-dashboards-fips, renovate...

GHSA-P343-9QWP-PQXV vulnerabilities

Vulnerabilities for packages: neo4j...

CVE-2024-28893

Certain HP software packages SoftPaqs are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages SoftPaqs...

CVE-2024-28893

CVE-2024-28893 affects HP SoftPaqs. The issue enables potential arbitrary code execution when a SoftPaq configuration file is modified after extraction, as described by HP’s advisory. The underlying impact is high with local attack vector, requiring user interaction and elevated privileges, and c...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: ctop, cadvisor, opentelemetry-collector-contrib-fips, opentelemetry-collector-contrib, buildah, kubernetes, cadvisor-fips, wolfictl, neuvector-scanner, grype...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, spark-operator, ip-masq-agent, kubernetes-csi-driver-hostpath, local-static-provisioner, argocd-image-updater, argocd-image-updater-fips, kubernetes, rancher-webhook-fips, rancher-webhook, kubeflow-pipelines, nodetaint,...

CVE-2024-32650 vulnerabilities

Vulnerabilities for packages: xh, cargo-audit, kdash, pgcat, wasmcloud, samply...

MGASA-2024-0136 Updated puppet packages fix security vulnerabilities

The updated packages fix missing requires for puppet and fix commands in systemd units...

GHSA-MR82-8J83-VXMV vulnerabilities

Vulnerabilities for packages: datadog-agent...

CVE-2024-3772 vulnerabilities

Vulnerabilities for packages: datadog-agent...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: sonobuoy, hubble-fips, kyverno-policy-reporter-ui, go-bindata, metrics-server-fips, mkcert, dockerize-fips, prometheus-node-exporter, go-md2man, argo-workflows-fips, terraform-provider-pagerduty, helm-operator-fips, chezmoi, crossplane-provider-azure-authorization,...