Поиск уязвимостей
Количество 169
Количество 169
SUSE-SU-2024:0539-1
Security update for libssh
SUSE-SU-2024:0525-1
Security update for libssh
ROS-20240805-03
Множественные уязвимости consul
ALT-PU-2024-4252
ALT-PU-2024-4252: package `dropbear` update to version 2022.83-alt2
CVE-2024-28180
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3.
CVE-2024-28180
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3.
CVE-2024-28180
Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3.
CVE-2024-28180
CVE-2024-28180
Package jose aims to provide an implementation of the Javascript Objec ...
SUSE-SU-2024:3656-1
Security update for etcd
SUSE-SU-2024:3094-1
Security update for kubernetes1.26
ALT-PU-2024-7269
ALT-PU-2024-7269: package `openssh-gostcrypto` update to version 9.6p1-alt1.gost
GHSA-2cgq-h8xw-2v5j
CRI-O vulnerable to an arbitrary systemd property injection
BDU:2024-04112
Уязвимость прикладного программного интерфейса CRI-O Container Engine программного средства управления кластерами виртуальных машин Kubernetes, связанная с неправильной нейтрализацией специальных элементов, позволяющая нарушителю выполнить произвольное действие в хост-системе
SUSE-SU-2024:3344-1
Security update for kubernetes1.25
SUSE-SU-2024:3342-1
Security update for kubernetes1.24
SUSE-SU-2024:3098-1
Security update for kubernetes1.27
SUSE-SU-2024:3097-1
Security update for kubernetes1.28
ALT-PU-2024-4646
ALT-PU-2024-4646: package `buildah` update to version 1.34.3-alt0.p10
ALT-PU-2024-13881
ALT-PU-2024-13881: package `etcd` update to version 3.5.15-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2024:0539-1 Security update for libssh | больше 2 лет назад | ||
| SUSE-SU-2024:0525-1 Security update for libssh | больше 2 лет назад | ||
 | ROS-20240805-03 Множественные уязвимости consul | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-4252 ALT-PU-2024-4252: package `dropbear` update to version 2022.83-alt2 | CVSS3: 9.8 | больше 2 лет назад | |
 | CVE-2024-28180 Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3. | CVSS3: 4.3 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-28180 Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3. | CVSS3: 4.3 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-28180 Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). This vulnerability has been patched in versions 4.0.1, 3.0.3 and 2.6.3. | CVSS3: 4.3 | 2% Низкий | больше 2 лет назад |
 | CVSS3: 4.3 | 2% Низкий | около 2 лет назад | |
| CVE-2024-28180 Package jose aims to provide an implementation of the Javascript Objec ... | CVSS3: 4.3 | 2% Низкий | больше 2 лет назад |
| SUSE-SU-2024:3656-1 Security update for etcd | около 2 лет назад | ||
| SUSE-SU-2024:3094-1 Security update for kubernetes1.26 | около 2 лет назад | ||
| ALT-PU-2024-7269 ALT-PU-2024-7269: package `openssh-gostcrypto` update to version 9.6p1-alt1.gost | CVSS3: 9.8 | больше 2 лет назад | |
| GHSA-2cgq-h8xw-2v5j CRI-O vulnerable to an arbitrary systemd property injection | CVSS3: 7.2 | 1% Низкий | больше 2 лет назад |
 | BDU:2024-04112 Уязвимость прикладного программного интерфейса CRI-O Container Engine программного средства управления кластерами виртуальных машин Kubernetes, связанная с неправильной нейтрализацией специальных элементов, позволяющая нарушителю выполнить произвольное действие в хост-системе | CVSS3: 7.2 | 1% Низкий | больше 2 лет назад |
| SUSE-SU-2024:3344-1 Security update for kubernetes1.25 | около 2 лет назад | ||
| SUSE-SU-2024:3342-1 Security update for kubernetes1.24 | около 2 лет назад | ||
| SUSE-SU-2024:3098-1 Security update for kubernetes1.27 | около 2 лет назад | ||
| SUSE-SU-2024:3097-1 Security update for kubernetes1.28 | около 2 лет назад | ||
| ALT-PU-2024-4646 ALT-PU-2024-4646: package `buildah` update to version 1.34.3-alt0.p10 | CVSS3: 8.6 | больше 2 лет назад | |
| ALT-PU-2024-13881 ALT-PU-2024-13881: package `etcd` update to version 3.5.15-alt1 | CVSS3: 7.5 | около 2 лет назад |
Уязвимостей на страницу