55 matches found
GHSA-J5PM-7495-QMR3 vulnerabilities
Vulnerabilities for packages: gatekeeper-fips, kube-logging-operator, logstash, packer, cluster-api-helm-controller, timestamp-authority-fips, fuse-overlayfs-snapshotter, karpenter, trivy-fips, azurefile-csi, cilium, aws-sigv4-proxy, kubernetes-csi-external-provisioner-fips,...
CVE-2021-29370
A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: fq, kustomize, vault-k8s, nuclei, hello-world-golang, kpt, prometheus-adapter, oras, helm-push, newrelic-infrastructure-agent, nri-mysql, docker-cli, docker-credential-ecr-login, ytt, aws-efs-csi-driver, nri-nagios, controller-gen, k8sgpt, prometheus-operator,...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: fq, kustomize, vault-k8s, nuclei, hello-world-golang, kpt, prometheus-adapter, oras, helm-push, newrelic-infrastructure-agent, nri-mysql, docker-cli, docker-credential-ecr-login, ytt, aws-efs-csi-driver, nri-nagios, controller-gen, k8sgpt, prometheus-operator,...
Moderate: Red Hat Security Advisory: Cluster Observability Operator 0.4.1
The Cluster Observability Operator is a Kubernetes operator which enables the management of Monitoring/Alerting stacks through Kubernetes CRDs. Cluster Observability Operator Security Fixes: coo-prometheus-container: go-retryablehttp: url might write sensitive information to log file coo-0...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: tekton-chains, goreleaser, nuclei, argo-workflows, timestamp-authority, ksops, policy-controller, harbor-registry, boring-registry, falcoctl, flux-image-reflector-controller, flux-source-controller, guac, py3-cassandra-medusa, druid, sigstore-scaffolding, terragrunt,...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: chartmuseum, trust-manager-fips, pombump, wire-go, rekor-fips, aws-flb-kinesis-fips, kubernetes-dashboard, timestamp-authority-fips, fuse-overlayfs-snapshotter, karpenter, grafana-operator, kube-state-metrics, addon-resizer-fips, cert-exporter,...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: hubble, syft, kustomize, vault-k8s, nuclei, kubernetes, crossplane, kpt, prometheus-adapter, timestamp-authority, falcosidekick, newrelic-nri-kube-events, metacontroller, helm-push, newrelic-infrastructure-agent, guac, sigstore-scaffolding, tkn, aws-efs-csi-driver,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: chartmuseum, kube-logging-operator, timestamp-authority-fips, fuse-overlayfs-snapshotter, cilium, kargo, request-1279, kpt, crossplane-provider-aws-cloudformation, gomplate, crossplane-provider-aws-dynamodb, kubernetes-event-exporter, velero, melange, nri-kubernetes,...
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: fq, kustomize, vault-k8s, nuclei, hello-world-golang, kpt, prometheus-adapter, oras, helm-push, newrelic-infrastructure-agent, nri-mysql, docker-cli, docker-credential-ecr-login, ytt, aws-efs-csi-driver, nri-nagios, controller-gen, k8sgpt, prometheus-operator,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kubeflow-fips, volume-modifier-for-k8s-fips, timestamp-authority-fips, aws-efs-csi-driver-fips, up, kiam, metrics-server-fips, vault-csi-provider, dgraph, spark-operator, dynamic-localpv-provisioner-fips, kubernetes-csi-livenessprobe-fips, scorecard, kubeflow,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: dgraph, k3d, cortex, aactl, spark-operator, slsa-verifier, kubescape, buildkitd, src, kubeflow, terraform-provider-sendgrid, kubevela, up, scorecard...
GHSA-RCJV-MGP8-QVMR vulnerabilities
Vulnerabilities for packages: kubernetes, k3s, kubevela, prometheus-adapter, rancher-webhook-fips, rancher-webhook, caddy, kubernetes-fips, up, buildkitd, kube-oidc-proxy, metrics-server-fips...
CVE-2023-45142 vulnerabilities
Vulnerabilities for packages: kubernetes, k3s, kubevela, prometheus-adapter, rancher-webhook-fips, rancher-webhook, caddy, kubernetes-fips, up, buildkitd, kube-oidc-proxy, metrics-server-fips...
CVE-2023-45142 vulnerabilities
Vulnerabilities for packages: k3s, caddy, kubernetes, prometheus-adapter, buildkitd, kubevela, up...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: chartmuseum, kube-logging-operator, kubernetes-dashboard, fuse-overlayfs-snapshotter, kube-state-metrics, node-problem-detector, vault-csi-provider, kpt, kubernetes-csi-external-provisioner, aws-load-balancer-controller, skaffold, rqlite, gomplate, buildkitd,...
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: chartmuseum, kube-logging-operator, kubernetes-dashboard, fuse-overlayfs-snapshotter, kube-state-metrics, node-problem-detector, vault-csi-provider, kpt, kubernetes-csi-external-provisioner, aws-load-balancer-controller, skaffold, rqlite, gomplate, buildkitd,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: kpt, prometheus-adapter, metacontroller, newrelic-infrastructure-agent, sigstore-scaffolding, aws-efs-csi-driver, pulumi-language-yaml, kubeflow, stakater-reloader, flux-notification-controller, minio, pulumi-kubernetes-operator, nodetaint,...
Prometheus ransomware’s flaws inspired researchers to try to build a near-universal decryption tool
This blog is part of our live coverage from RSA Conference 2022: Prometheus—a ransomware build based on Thanos that locked up victims’ computers in the summer of 2021—included a major “vulnerability” that led security researchers at IBM to try and build a one-size-fits-all ransomware decryptor th...