CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....
6.5AI Score
0.0004EPSS
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-infra-operator, nri-kubernetes, prometheus-pushgateway, temporal, gcsfuse, cluster-proportional-autoscaler, gitsign, oauth2-proxy, kube-bench, sops, temporal-ui-server, kubernetes-csi-external-resizer,...
7.5AI Score
CVE-2023-45285 vulnerabilities
Vulnerabilities for packages: mage, docker-cli, go-md2man, aactl, gosu, cni-plugins, sops, nri-discovery-kubernetes, kind, cass-operator, oras, ctop, go-licenses, hey, ip-masq-agent, gitlab-logger, protoc-gen-go-grpc, goreleaser, gops, k3d, gobuster, sbom-scorecard, helm-push,...
8.2AI Score
0.001EPSS
GHSA-RR6R-CFGF-GC6H vulnerabilities
Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....
7.5AI Score
CVE-2024-24784 vulnerabilities
Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....
6.5AI Score
0.0004EPSS
CVE-2023-45288 vulnerabilities
Vulnerabilities for packages: gcsfuse, gosu, sops, kyverno-policy-reporter-kyverno-plugin, grafana-agent-operator, grpc-health-probe, prometheus-redis-exporter, kubeadm-controlplane-controller, nsc, aws-flb-firehose, mods, kaf, spegel, supercronic, neuvector-sigstore-interface, nats,...
7AI Score
0.0004EPSS
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-ui, newrelic-infra-operator, nri-kubernetes, prometheus-pushgateway, temporal, gcsfuse, cluster-proportional-autoscaler, gitsign, oauth2-proxy, kube-bench, sops, temporal-ui-server, kubernetes-csi-external-resizer,...
6.7AI Score
0.0004EPSS
GHSA-4V7X-PQXF-CX7M vulnerabilities
Vulnerabilities for packages: gcsfuse, gosu, sops, kyverno-policy-reporter-kyverno-plugin, grafana-agent-operator, grpc-health-probe, prometheus-redis-exporter, kubeadm-controlplane-controller, nsc, aws-flb-firehose, mods, kaf, spegel, supercronic, neuvector-sigstore-interface, nats,...
7.5AI Score
GHSA-3Q2C-PVP5-3CQP vulnerabilities
Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....
7.5AI Score
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....
7.5AI Score
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....
7.5AI Score
GHSA-5F94-VHJQ-RPG8 vulnerabilities
Vulnerabilities for packages: mage, docker-cli, go-md2man, aactl, gosu, cni-plugins, sops, nri-discovery-kubernetes, kind, cass-operator, oras, ctop, go-licenses, hey, ip-masq-agent, gitlab-logger, protoc-gen-go-grpc, goreleaser, gops, k3d, gobuster, sbom-scorecard, helm-push,...
7.5AI Score
GHSA-9F76-WG39-X86H vulnerabilities
Vulnerabilities for packages: mage, docker-cli, go-md2man, aactl, gosu, cni-plugins, sops, nri-discovery-kubernetes, kind, cass-operator, oras, ctop, go-licenses, hey, ip-masq-agent, gitlab-logger, protoc-gen-go-grpc, goreleaser, gops, k3d, gobuster, sbom-scorecard, helm-push,...
7.5AI Score
GHSA-32CH-6X54-Q4H9 vulnerabilities
Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....
7.5AI Score
CVE-2024-24783 vulnerabilities
Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....
6.5AI Score
0.0004EPSS
CVE-2024-24785 vulnerabilities
Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....
6.5AI Score
0.0004EPSS
CVE-2023-39326 vulnerabilities
Vulnerabilities for packages: mage, docker-cli, go-md2man, aactl, gosu, cni-plugins, sops, nri-discovery-kubernetes, kind, cass-operator, oras, ctop, go-licenses, hey, ip-masq-agent, gitlab-logger, protoc-gen-go-grpc, goreleaser, gops, k3d, gobuster, sbom-scorecard, helm-push,...
7.4AI Score
0.001EPSS
CVE-2023-45290 vulnerabilities
Vulnerabilities for packages: mage, newrelic-infra-operator, prometheus-pushgateway, temporal, nri-f5, go-md2man, paranoia, gcsfuse, gosu, cluster-proportional-autoscaler, kube-bench, temporal-ui-server, kubernetes-csi-external-resizer, kyverno-policy-reporter-kyverno-plugin, ctop, gitlab-logger,.....
6.5AI Score
0.0004EPSS
In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than one device doing reset in parallel, the first device will call kfd_suspend_all_processes() to evict all processes on all devices, this call...
7.4AI Score
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable [WHY] dynamic memory safety error detector (KASAN) catches and generates error messages "BUG: KASAN: slab-out-of-bounds" as writeback connector does not support certain...
7.6AI Score
CVE-2024-36949 amd/amdkfd: sync all devices to wait all processes being evicted
In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: sync all devices to wait all processes being evicted If there are more than one device doing reset in parallel, the first device will call kfd_suspend_all_processes() to evict all processes on all devices, this call...
7.2AI Score
CVE-2024-36914 drm/amd/display: Skip on writeback when it's not applicable
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable [WHY] dynamic memory safety error detector (KASAN) catches and generates error messages "BUG: KASAN: slab-out-of-bounds" as writeback connector does not support certain...
7.4AI Score
CVE-2024-36897 drm/amd/display: Atom Integrated System Info v2_2 for DCN35
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Atom Integrated System Info v2_2 for DCN35 New request from KMD/VBIOS in order to support new UMA carveout model. This fixes a null dereference from accessing Ctx->dc_bios->integrated_info while it was NULL. ...
7.1AI Score
CVE-2024-36026 drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11
In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11 While doing multiple S4 stress tests, GC/RLC/PMFW get into an invalid state resulting into hard hangs. Adding a GFX reset as workaround just before sending the MP1_UNLOAD...
7.2AI Score
CVE-2024-36024 drm/amd/display: Disable idle reallow as part of command/gpint execution
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Disable idle reallow as part of command/gpint execution [Why] Workaroud for a race condition where DMCUB is in the process of committing to IPS1 during the handshake causing us to miss the transition into IPS2 and....
7.1AI Score
6.8AI Score
0.001EPSS
intel-microcode vulnerabilities
It was discovered that some 3rd and 4th Generation Intel® Xeon® Processors did not properly restrict access to certain hardware features when using Intel® SGX or Intel® TDX. This may allow a privileged local user to potentially further escalate their privileges on the system. This issue only...
7.3AI Score
0.001EPSS
7.3AI Score
0.0005EPSS
Security Bulletin: Triton Inference Server - May 2024
NVIDIA has released a software update for NVIDIA Triton Inference Server to address the issue disclosed in this bulletin. To protect your system, install the latest release from the Triton Inference Server Releases page on GitHub, and view the Secure Deployment Considerations Guide. Go to NVIDIA...
8AI Score
Intel Microcode vulnerabilities
Releases Ubuntu 24.04 LTS Ubuntu 23.10 Ubuntu 22.04 LTS Ubuntu 20.04 LTS Ubuntu 18.04 ESM Ubuntu 16.04 ESM Packages intel-microcode - Processor microcode for Intel CPUs Details It was discovered that some 3rd and 4th Generation Intel® Xeon® Processors did not properly restrict access to...
7.4AI Score
0.001EPSS
pcTattleTale spyware leaks database containing victim screenshots, gets website defaced
The idea behind the software is simple. When the spying party installs the stalkerware, they grant permission to record what happens on the targeted Android or Windows device. The observer can then log in on an online portal and activate recording, at which point a screen capture is taken on the...
7.2AI Score
Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Monitoring.
Summary Vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped as part of multiple IBM Tivoli Monitoring (ITM) components. CVEs: CVE-2023-38264, CVE-2024-21011, CVE-2024-21085 and CVE-2024-21094 Vulnerability Details ** CVEID: CVE-2024-21094 DESCRIPTION: **An unspecified...
6.7AI Score
0.001EPSS
linux-intel-iotg vulnerabilities
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically proximate attacker could possibly use this to cause a denial of service (system crash). (CVE-2023-47233) It was....
7AI Score
0.0005EPSS
CVE-2024-4429 Cross Site Request Forgery vulnerability in iManager
Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to sensitive information...
6.6AI Score
CVE-2024-3969 XML External Entity injection vulnerability in iManager
XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML...
8.3AI Score
(RHSA-2024:3421) Important: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): kernel: Marvin vulnerability side-channel leakage in the RSA decryption operation (CVE-2023-6240) kernel: nf_tables: use-after-free vulnerability in the nft_verdict_init() function...
7.1AI Score
0.001EPSS
Pyrit - The Famous WPA Precomputed Cracker
Pyrit allows you to create massive databases of pre-computed WPA/WPA2-PSK authentication phase in a space-time-tradeoff. By using the computational power of Multi-Core CPUs and other platforms through ATI-Stream,Nvidia CUDA and OpenCL, it is currently by far the most powerful attack against one of....
7.2AI Score
pug is vulnerable to Code execution. The vulnerability is due to the lack of proper input validation for the name option in the compileClient, compileFileClient, or compileClientWithDependenciesTracked functions, which allows attackers to execute arbitrary JavaScript code in the context of the...
7.6AI Score
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:1787-1)
The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1787-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. This update...
7.2AI Score
Linux kernel (Intel IoTG) vulnerabilities
Releases Ubuntu 22.04 LTS Packages linux-intel-iotg - Linux kernel for Intel IoT platforms Details Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux kernel contained a race condition during device removal, leading to a use- after-free vulnerability. A physically...
7.5AI Score
0.0005EPSS
In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again In SRIOV configuration, the reset may failed to bring asic back to normal but stop cpsch already been called, the start_cpsch will not be called since...
6.4AI Score
0.0004EPSS
In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpu_get_xgmi_hive, when kobject_init_and_add failed There is a potential memleak if not call...
6.6AI Score
0.0004EPSS
7.4AI Score
7.4AI Score
[SECURITY] Fedora 39 Update: crosswords-0.3.13-1.fc39
A simple and fun game of crosswords. Load your crossword files, or play one of the included games. Features include: - Support for shaped and colored crosswords - Loading .ipuz and .puz files - Hint support, such as showing mistakes and suggesting words - Dark mode support - Locally installed...
7.4AI Score
[SECURITY] Fedora 40 Update: crosswords-0.3.13-1.fc40
A simple and fun game of crosswords. Load your crossword files, or play one of the included games. Features include: - Support for shaped and colored crosswords - Loading .ipuz and .puz files - Hint support, such as showing mistakes and suggesting words - Dark mode support - Locally installed...
7.4AI Score
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ucode-intel (SUSE-SU-2024:1771-1)
The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1771-1 advisory. Intel CPU Microcode was updated to the 20240514 release (bsc#1224277) - CVE-2023-45733: Fixed...
7.8AI Score
In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpu_get_xgmi_hive, when kobject_init_and_add failed There is a potential memleak if not call...
6.7AI Score
0.0004EPSS
In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: fix potential memleak In function amdgpu_get_xgmi_hive, when kobject_init_and_add failed There is a potential memleak if not call...
7.4AI Score
0.0004EPSS
In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again In SRIOV configuration, the reset may failed to bring asic back to normal but stop cpsch already been called, the start_cpsch will not be called since...
6.5AI Score
0.0004EPSS