CVE-2023-38489

Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6 affects all Kirby sites with user accounts (unless Kirby's API and Panel are di ...

Continue Reading
Exposure Of Resources To Wrong Sphere

org.apache.inlong is vulnerable to Exposure of Resources to Wrong Sphere. The vulnerability exists due to the lack of permission checks in the `WorkflowApprover` API of the library, which allows an at ...

Continue Reading
(RHSA-2023:4289) Important: OpenShift API for Data Protection (OADP) 1.0.11 security and bug fix update

OpenShift API for Data Protection (OADP) enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both f ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

(RHSA-2023:4293) Moderate: Migration Toolkit for Containers (MTC) 1.7.11 security and bug fix update

The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the M ...

Continue Reading

CVSS3 - HIGH

CVSS2 - HIGH

Incorrect Permission Assignment

gitlab is vulnerable to Incorrect Permission Assignment. The vulnerability exists due to improper access control in the library, which allows an attacker to edit the approval rules via the API by an u ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - MEDIUM

Authentication Bypass

github.com/dapr/dapr is vulnerable to Authentication Bypass. The library allows bypassing of API token authentication, which enables an attacker to send unauthorized HTTP requests via the `Dapr sideca ...

Continue Reading
Remote Code Execution (RCE)

gitlab is vulnerable to Remote Code Execution (RCE). The vulnerability exists due to the lack of input validation of the library, which allows an attacker to inject and execute malicious code via the ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - MEDIUM

(RHSA-2023:4287) Moderate: Red Hat OpenShift Data Foundation 4.12.5 security and bug fix update

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Container Platform. Red Hat OpenShift Data Foundation is a highly scalable, produc ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

Back to Main

Subscribe for the latest news: