11 matches found
EUVD-2022-4688
Malicious code in bioql PyPI...
Helm Unsafe Link Following
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...
GHSA-P5PC-M4Q7-7QM9 Helm Unsafe Link Following
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...
Secure containerized environments with updated threat matrix for Kubernetes
Last April, we released the first version of the threat matrix for Kubernetes. It was the first attempt to systematically map the threat landscape of Kubernetes. As we described in the previous post, we chose to adapt the structure of MITRE ATT&CK® framework which, became almost an industry...
CVE-2019-18658
In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciously designed chart to include sensitive content such as /etc/passwd, or to execute a denial of service DoS via a special file such as /dev/urandom, via...
Security update for helm (moderate)
openSUSE Security Update: Security update for helm Announcement ID: openSUSE-SU-2019:1703-1 Rating: moderate References: 1118897 1118898 1118899 Cross-References: CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 An update that fixes thr...
E-TILLER期刊采编系统/ch/reader/wait_published_articles.aspx等8处 POST注入漏洞
No description provided by source...
E-TILLER期刊采编系统 留言登录处/ch/guestbook/Login.aspx 参数GM_NAME POST注入漏洞
No description provided by source...
E-TILLER期刊采编系统 /ch/reader/inner_key_query_article_list.aspx等2处 POST注入漏洞
No description provided by source...
e-tiller 8 /cn/reader/appraise.aspx SQL注入漏洞
No description provided by source...
E-tiller /reader/key_query.aspx SQL注入漏洞
No description provided by source...