-
Hello,
During a recent security scan, we identified multiple vulnerabilities related to OpenSSL in the MicroK8s Core20 snaps. These vulnerabilities are still present and have not been addressed in …
-
## CVE-2023-2898 - Medium Severity Vulnerability
Vulnerable Libraries - linuxlinux-4.6, linuxlinux-4.6, linuxlinux-4.6
Vulnerability Details
There is a null-pointer-dereference flaw foun…
-
## CVE-2023-2898 - Medium Severity Vulnerability
Vulnerable Libraries - linux-yoctov5.4.51, linux-yoctov5.4.51, linux-yoctov5.4.51
Vulnerability Details
There is a null-pointer-dereferen…
-
The **dependencies.gradle** file specifies numerous Java libraries which Ratpack depends on. Each of these may have transitive dependencies as well. I searched for known vulnerabilities among these …
-
## CVE-2023-2898 - Medium Severity Vulnerability
Vulnerable Libraries - linux-stable-rtv4.1.33, linux-stable-rtv4.1.33, linux-stable-rtv4.1.33
Vulnerability Details
There is a null-point…
-
### Definition of Done / Acceptance Criteria
We will have demonstrated to the best of our knowledge that the (micro-)services we are running:
* have the minimum exposure necessary to perform their…
-
From a discussion on Slack, better document how to reject a CVE ID.
An example: https://github.com/CVEProject/cvelist/pull/8836
1. There are Services API calls
2. How is the description text ge…
-
Looks like exploit is still showing as N/A for cves in cve.live. Is this expected?
![Image](https://user-images.githubusercontent.com/59809184/230442247-7f69efbf-26d2-4b3d-ad61-7706eb24121b.png)
-
## CVE-2023-3269 - High Severity Vulnerability
Vulnerable Libraries - linuxlinux-4.6, linuxlinux-4.6, linuxlinux-4.6
Vulnerability Details
A vulnerability exists in the memory management…
-
## CVE-2023-3269 - High Severity Vulnerability
Vulnerable Libraries - linuxlinux-4.6, linuxlinux-4.6, linuxlinux-4.6
Vulnerability Details
A vulnerability exists in the memory management…