CVE-2024-3913

An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable for short time after system startup...

Cilium 安全漏洞

Cilium is an open source software. It is used to provide and transparently secure network connectivity and load balancing between application workloads such as application containers or processes. A security vulnerability exists in Cilium version 1.13.0 that stems from a short period of time when...

PT-2023-21235 · Cilium · Cilium

Name of the Vulnerable Software and Affected Versions: Cilium version 1.13.0 Description: Cilium is a networking, observability, and security solution with an eBPF-based dataplane. When Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this...

CVE-2022-42951

An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server node, there is a small window of time before the cluster management authentication has started where an attacker can connect to the cluster...

Couchbase Server 竞争条件问题漏洞

Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase Inc. in the U.S. It mainly supports data querying, full-text search and active global replication. A security vulnerability in Couchbase Server versions 6.5.x prior to 6.6.6 and 6.6.x, 7.x prior to 7.0.5, a...

GHSA-99HJ-PPG3-2XWC Cross-Site Request Forgery in Jenkins

A race condition during Jenkins 2.94 and earlier; 2.89.1 and earlier startup could result in the wrong order of execution of commands during initialization. There is a very short window of time after startup during which Jenkins may no longer show the 'Please wait while Jenkins is getting ready t...