MongoDB Enterprise Kubernetes Operator 1.2.5

Common Vulnerabilities and Exposures Container Security Security

MongoDB Enterprise Kubernetes Operator 1.2.5

Overview : X.509 certificates generated by the MongoDB Enterprise Kubernetes Operator may allow an attacker with access to the Kubernetes

Common Vulnerabilities and Exposures Container Security

The Argo Project is an open source provider of Kubernetes CI/CD workflows, facilitating Infrastructure as Code.

Overview : In Argo versions prior to v1.5.0-rc1, it was possible for authenticated Argo users to submit API calls to

Common Vulnerabilities and Exposures Container Security Security

Multiple vulnerabilities in EasyBlocks IPv6

Overview : Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and Enterprise Ver. 2.0.1 and earlier

Common Vulnerabilities and Exposures Container Security cyber security news WAF News

Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioning a privileged container. Fixed in MicroK8s 1.15.3.

Overview : Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to

Common Vulnerabilities and Exposures Container Security Security solutions

Vulnerabilities Discovered in CIPAce Enterprise Platform

Overview : A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP

Common Vulnerabilities and Exposures Security solutions

Data Center Security Privilege Escalation

Overview : Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege

Container Security Security solutions

PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers

Overview : PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server

Common Vulnerabilities and Exposures Container Security Security

security restriction bypass vulnerability has been discovered in Revive Adserver version < 5.0.5 by HackerOne user hoangn144.

Overview : A security restriction bypass vulnerability has been discovered in Revive Adserver version < 5.0.5 by HackerOne user hoangn144.

Common Vulnerabilities and Exposures Security solutions

The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula.

Overview : The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be

cyber security news Security solutions

PRTG-Network-Monitor-Information-Disclosure

Overview : PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server

Common Vulnerabilities and Exposures Security solutions

unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.

Overview : An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by

Common Vulnerabilities and Exposures Security

Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection

Overview : In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually

Common Vulnerabilities and Exposures cyber security news

Apache HTTP Server 2.4 vulnerabilities

Overview : In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might

Common Vulnerabilities and Exposures cyber security news Professional Services Security solutions

Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys.

Overview : Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker

Common Vulnerabilities and Exposures Container Security cyber security news

Leantime before versions 2.0.15 and 2.1-beta3 has a SQL Injection vulnerability.

Overview : Leantime before versions 2.0.15 and 2.1-beta3 has a SQL Injection vulnerability. The impact is high. Malicious users/attackers can

Common Vulnerabilities and Exposures Security solutions

CRLF/HTML entity injection with most recent version of PHPMyAdmin #16056

Overview : ** DISPUTED ** phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences

Common Vulnerabilities and Exposures Container Security Security

In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.

Overview : In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.codeBeamer versions 9.5

Common Vulnerabilities and Exposures solutions

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution

Common Vulnerabilities and Exposures Security solutions

Kubelet component in versions 1.15.0-1.15.9

Overview : The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial

Common Vulnerabilities and Exposures Container Security Security solutions

NGINX Controller versions prior to 3.2.0,

Overview : In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can

Common Vulnerabilities and Exposures Security solutions

TMM may crash or stop processing new traffic with the DPDK/ENA driver on AWS systems while sending traffic. This issue does not affect any other platforms,

Overview : On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.2, under certain conditions, TMM may crash or stop processing new traffic with

Common Vulnerabilities and Exposures Container Security solutions

MongoDB Enterprise Kubernetes Operator 1.2.5