F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, PEM, PSM Security Vulnerabilities

Exploit for CVE-2024-22120

CVE-2024-22120-RCE Affected Version/s ``` 6.0.0 - 6.0.27...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: containerd, crossplane-provider-aws, ferretdb, logstash-exporter, nats, osv-scanner, goreleaser, k8ssandra-operator, secrets-store-csi-driver-provider-gcp, tflint, loki, prometheus-pushgateway, supercronic, kubernetes-csi-livenessprobe, prometheus-nats-exporter, up,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: aactl, goreleaser, apko, kubescape, zarf, zot, tekton-chains, slsa-verifier, gitsign, flux-source-controller, policy-controller, ko, wolfictl, spire-server, falcoctl, falco, tkn, skaffold,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: aactl, vexctl, cosign, cert-manager, argo-workflows, flux-kustomize-controller, vault, kubescape, fulcio, cilium-envoy, keda, tekton-chains, kyverno, cloudflared, kots, slsa-verifier, gitsign, flux-source-controller, tekton-pipelines, sops, istio-pilot-discovery,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nats, ferretdb, logstash-exporter, regclient, vexctl, goreleaser, k8ssandra-operator, secrets-store-csi-driver-provider-gcp, tflint, loki, prometheus-pushgateway, supercronic, kubernetes-csi-livenessprobe, hey, up, docker-credential-acr-env, go-licenses, gobuster,...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, melange, argo-workflows, flux-notification-controller,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: spark-operator, cluster-autoscaler, kubernetes-dns-node-cache, kubernetes, calico, kubeflow-pipelines, kubernetes-csi-driver-hostpath, local-static-provisioner, aws-ebs-csi-driver, node-feature-discovery, nodetaint,...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: k3d, harbor-scanner-trivy, helm-push, prometheus, wolfictl, docker, buf, grype, tekton-pipelines, docker-compose, cri-tools, dagger, policy-controller, melange, kaniko, syft,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: nerdctl, ingress-nginx-controller, grype, kubescape, zarf, syft, kaniko, zot, k3d, kots, telegraf, newrelic-infrastructure-agent, buildkitd, runc, wolfictl, ctop, trivy, nvidia-device-plugin, cadvisor, k3s, k9s, docker, skopeo, kubernetes, datadog-agent,...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: cert-manager, up, grype, kubescape, kubevela, kaniko, zot, eksctl, k3d, helm-push, kots, telegraf, newrelic-infrastructure-agent, flux-source-controller, tekton-pipelines, fuse-overlayfs-snapshotter, cilium-cli, flux-helm-controller, ctop, trivy, helm, gitness,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: k9s, chartmuseum, helm-push, kots, zot, flux-helm-controller, cert-manager, trivy, flux-source-controller, up, kubescape, zarf, helm-operator, cilium-cli, k8sgpt, istio-operator,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: k9s, chartmuseum, helm-push, kots, zot, flux-helm-controller, cert-manager, trivy, flux-source-controller, up, kubescape, zarf, helm-operator, cilium-cli, k8sgpt, istio-operator,...

GHSA-888H-RM2R-VRC7 vulnerabilities

Vulnerabilities for packages: falco, kind,...

CVE-2023-5043 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: nats, secrets-store-csi-driver-provider-gcp, up, kubernetes-csi-livenessprobe, flux-kustomize-controller, hey, gobuster, kubeflow-katib, cilium-envoy, kots, newrelic-infrastructure-agent, wireguard-go, flux-source-controller, fuse-overlayfs-snapshotter, frp,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: prometheus, aactl, istio-pilot-agent, cosign, goreleaser, nerdctl, cert-manager, argo-workflows, loki, up, gitlab-runner, kubeflow-katib, kubescape, kubevela, helm-operator, zarf, zot, scorecard, eksctl, tekton-chains, kyverno, kots, telegraf, docker-credential-gcr,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: containerd, crossplane-provider-aws, ferretdb, logstash-exporter, nats, osv-scanner, goreleaser, k8ssandra-operator, secrets-store-csi-driver-provider-gcp, tflint, loki, prometheus-pushgateway, supercronic, kubernetes-csi-livenessprobe, prometheus-nats-exporter, up,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nats, ferretdb, logstash-exporter, regclient, vexctl, goreleaser, k8ssandra-operator, secrets-store-csi-driver-provider-gcp, tflint, loki, prometheus-pushgateway, supercronic, kubernetes-csi-livenessprobe, hey, up, docker-credential-acr-env, go-licenses, gobuster,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nats, ferretdb, logstash-exporter, regclient, vexctl, goreleaser, k8ssandra-operator, secrets-store-csi-driver-provider-gcp, tflint, loki, prometheus-pushgateway, supercronic, kubernetes-csi-livenessprobe, hey, up, docker-credential-acr-env, go-licenses, gobuster,...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, melange, argo-workflows, flux-notification-controller,...

GHSA-F2CJ-5636-4J38 vulnerabilities

Vulnerabilities for packages: falco, kind,...

GHSA-RXX3-4978-3CC9 vulnerabilities

Vulnerabilities for packages: falco, kind,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: harbor-registry, goreleaser, k8ssandra-operator, loki, flux-kustomize-controller, gobuster, kaniko, hubble-ui, wireguard-go, nri-rabbitmq, tempo, aws-load-balancer-controller, ollama, kubernetes-dashboard-metrics-scraper, flux-helm-controller,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: containerd, crossplane-provider-aws, extism, ferretdb, osv-scanner, harbor-registry, regclient, wave, secrets-store-csi-driver-provider-gcp, kubernetes-csi-livenessprobe, flux-kustomize-controller, hey, docker-credential-acr-env, go-licenses, prometheus-nats-exporter,....

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: containerd, crossplane-provider-aws, extism, ferretdb, osv-scanner, harbor-registry, regclient, wave, secrets-store-csi-driver-provider-gcp, kubernetes-csi-livenessprobe, flux-kustomize-controller, hey, docker-credential-acr-env, go-licenses, prometheus-nats-exporter,....

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: nats, gops, aactl, cass-operator, gke-gcloud-auth-plugin, grpcurl, goreleaser, protoc-gen-go-grpc, wait-for-port, aws-flb-cloudwatch, hey, gobuster, go-licenses, metrics-server, cilium-envoy, ip-masq-agent, dgraph, k3d, oras, nsc, helm-push, scorecard, slsa-verifier,.....

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: containerd, crossplane-provider-aws, secrets-store-csi-driver-provider-gcp, prometheus-pushgateway, kubernetes-csi-livenessprobe, apko, flux-kustomize-controller, gobuster, hey, kubeflow-katib, vault, cloud-sql-proxy, kots, newrelic-infrastructure-agent, wireguard-go,....

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: containerd, crossplane-provider-aws, ferretdb, nats, loki, up, apko, flux-kustomize-controller, docker-credential-acr-env, go-licenses, gobuster, kubeflow-katib, prometheus-nats-exporter, vault, cloud-sql-proxy, eksctl, kots, wireguard-go, flux-source-controller,...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: k3d, harbor-scanner-trivy, helm-push, prometheus, wolfictl, docker, buf, grype, tekton-pipelines, docker-compose, cri-tools, dagger, policy-controller, melange, kaniko, syft,...

CVE-2023-29403 vulnerabilities

Vulnerabilities for packages: falco, kind,...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: aactl, goreleaser, apko, kubescape, zarf, zot, tekton-chains, slsa-verifier, gitsign, flux-source-controller, policy-controller, ko, wolfictl, spire-server, falcoctl, falco, tkn, skaffold,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: harbor-registry, goreleaser, k8ssandra-operator, loki, flux-kustomize-controller, gobuster, kaniko, hubble-ui, wireguard-go, nri-rabbitmq, tempo, aws-load-balancer-controller, ollama, kubernetes-dashboard-metrics-scraper, flux-helm-controller,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: containerd, crossplane-provider-aws, nats, secrets-store-csi-driver-provider-gcp, prometheus-pushgateway, up, kubernetes-csi-livenessprobe, apko, flux-kustomize-controller, gobuster, hey, kubeflow-katib, vault, cloud-sql-proxy, kots, newrelic-infrastructure-agent,...

GHSA-VFP6-JRW2-99G9 vulnerabilities

Vulnerabilities for packages: aactl, slsa-verifier, cosign, falco, apko, spire-server, kubescape, policy-controller, tkn, skaffold, melange, ko,...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: aactl, slsa-verifier, cosign, falco, apko, spire-server, kubescape, policy-controller, tkn, skaffold, melange, ko,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: timestamp-authority, grpc-health-probe, aactl, istio-pilot-agent, cosign, goreleaser, nerdctl, cert-manager, argo-workflows, apko, flux-kustomize-controller, vault, kubescape, zarf, fulcio, zot, istio-cni, keda, step, kyverno, grafana, cloudflared, bank-vaults, kots,.....

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws, pulumi-kubernetes-operator, aactl, cosign, goreleaser, apko, flux-kustomize-controller, vault, kubescape, kubevela, zarf, kaniko, zot, keda, scorecard, tekton-chains, grafana, pulumi-language-java, slsa-verifier, melange, gitsign,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: nats, ferretdb, logstash-exporter, regclient, vexctl, goreleaser, k8ssandra-operator, secrets-store-csi-driver-provider-gcp, tflint, loki, prometheus-pushgateway, supercronic, kubernetes-csi-livenessprobe, hey, up, docker-credential-acr-env, go-licenses, gobuster,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nats, ferretdb, logstash-exporter, regclient, vexctl, goreleaser, k8ssandra-operator, secrets-store-csi-driver-provider-gcp, tflint, loki, prometheus-pushgateway, supercronic, kubernetes-csi-livenessprobe, hey, up, docker-credential-acr-env, go-licenses, gobuster,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nats, ferretdb, logstash-exporter, regclient, vexctl, goreleaser, k8ssandra-operator, secrets-store-csi-driver-provider-gcp, tflint, loki, prometheus-pushgateway, supercronic, kubernetes-csi-livenessprobe, hey, up, docker-credential-acr-env, go-licenses, gobuster,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: spark-operator, aws-efs-csi-driver, cluster-autoscaler, kubernetes-dns-node-cache, calico, prometheus-adapter, aws-ebs-csi-driver, nodetaint,...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: spark-operator, aws-efs-csi-driver, cluster-autoscaler, kubernetes-dns-node-cache, calico, prometheus-adapter, aws-ebs-csi-driver, nodetaint,...

CVE-2024-26147 vulnerabilities

Vulnerabilities for packages: k9s, chartmuseum, helm-push, kots, zot, flux-helm-controller, cert-manager, trivy, flux-source-controller, up, kubescape, zarf, helm-operator, cilium-cli, k8sgpt, istio-operator,...

CVE-2023-29405 vulnerabilities

Vulnerabilities for packages: falco, kind,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: containerd, crossplane-provider-aws, extism, ferretdb, osv-scanner, harbor-registry, regclient, wave, secrets-store-csi-driver-provider-gcp, kubernetes-csi-livenessprobe, flux-kustomize-controller, hey, docker-credential-acr-env, go-licenses, prometheus-nats-exporter,....

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: aactl, goreleaser, apko, kubescape, zarf, zot, tekton-chains, slsa-verifier, gitsign, flux-source-controller, policy-controller, ko, wolfictl, spire-server, falcoctl, falco, tkn, skaffold,...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: aactl, goreleaser, apko, kubescape, zarf, zot, tekton-chains, slsa-verifier, gitsign, flux-source-controller, policy-controller, ko, wolfictl, spire-server, falcoctl, falco, tkn, skaffold,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: nats, gops, aactl, cass-operator, gke-gcloud-auth-plugin, grpcurl, goreleaser, protoc-gen-go-grpc, wait-for-port, aws-flb-cloudwatch, hey, gobuster, go-licenses, metrics-server, cilium-envoy, ip-masq-agent, dgraph, k3d, oras, nsc, helm-push, scorecard, slsa-verifier,.....

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: nats, gops, aactl, cass-operator, gke-gcloud-auth-plugin, grpcurl, goreleaser, protoc-gen-go-grpc, wait-for-port, aws-flb-cloudwatch, hey, gobuster, go-licenses, metrics-server, cilium-envoy, ip-masq-agent, dgraph, k3d, oras, nsc, helm-push, scorecard, slsa-verifier,.....

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: nats, gops, aactl, cass-operator, gke-gcloud-auth-plugin, grpcurl, goreleaser, protoc-gen-go-grpc, wait-for-port, aws-flb-cloudwatch, hey, gobuster, go-licenses, metrics-server, cilium-envoy, ip-masq-agent, dgraph, k3d, oras, nsc, helm-push, scorecard, slsa-verifier,.....