1752 matches found
ingress-nginx controller - configuration injection via unsanitized mirror annotations
A security issue was discovered in ingress-nginx where the mirror-target and mirror-host Ingress annotations can be used to inject arbitrary configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to...
CVE-2025-24514 ingress-nginx controller - configuration injection via unsanitized auth-url annotation
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...
AMI MegaRAC SPx Redfish Authentication Bypass - Lenovo Support US
No description provided...
Multi-Vendor BIOS Security Vulnerabilities (March 2025) - Lenovo Support US
No description provided...
MediaTek wLAN AP Firmware Vulnerability - Lenovo Support US
No description provided...
AMD GPU Cross-Process Memory Disclosure - Lenovo Support US
No description provided...
CVE-2025-21806 net: let net.core.dev_weight always be non-zero
In the Linux kernel, the following vulnerability has been resolved: net: let net.core.devweight always be non-zero The following problem was encountered during stability test: NULL netdevice: NAPI poll function processbacklog+0x0/0x530 \ returned 1, exceeding its budget of 0. ------------ cut her...
Avahi: avahi wide-area dns predictable transaction ids
...
CVE-2024-10405
Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no...
Multi-Vendor BIOS Security Vulnerabilities (February 2025) - Lenovo Support US
No description provided...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: ICMP messages are rate-limited. After the committed changes, the two rate limiters are applied in this order: 1 Host-wide rate limit icmpglobalallow 2 Per-destination rate limit inetpeer-based To avoid side-channel attacks, we ne...
Intel Graphics Software Advisory - Lenovo Support US
No description provided...
AMD Graphics Driver Vulnerabilities – February 2025 - Lenovo Support US
No description provided...
AMD GPU Security Vulnerabilities - Lenovo Support US
No description provided...
RealTek SD Card Reader Vulnerabilities - Lenovo Support US
No description provided...
NVIDIA ConnectX and BlueField - October 2024 - Lenovo Support US
No description provided...
NVIDIA GPU Display Driver - January 2025 - Lenovo Support US
No description provided...
Intel Wireless Bluetooth and Killer Bluetooth - Lenovo Support US
No description provided...