Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
H Observable Timing Discrepancy	pypqc [0.0.6,)	pip	6 Jun 2024
H Improper Restriction of Operations within the Bounds of a Memory Buffer	go.opentelemetry.io/collector/config/confighttp <0.102.0	Go	6 Jun 2024
H Improper Restriction of Operations within the Bounds of a Memory Buffer	github.com/open-telemetry/opentelemetry-collector/config/confighttp <0.102.0	Go	6 Jun 2024
H Improper Restriction of Operations within the Bounds of a Memory Buffer	go.opentelemetry.io/collector/config/configgrpc <0.102.1	Go	6 Jun 2024
H Improper Restriction of Operations within the Bounds of a Memory Buffer	github.com/open-telemetry/opentelemetry-collector/config/configgrpc <0.102.1	Go	6 Jun 2024
M Improper Authentication	github.com/piraeusdatastore/piraeus-operator/v2 *	Go	6 Jun 2024
M Improper Authentication	github.com/piraeusdatastore/piraeus-operator *	Go	6 Jun 2024
H Integer Overflow or Wraparound	aom [,3.9.0)	Unmanaged (C/C++)	6 Jun 2024
M Authentication Bypass by Spoofing	k8s.io/kubernetes/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/oidc <1.30.0-beta.0	Go	6 Jun 2024
M Authentication Bypass by Spoofing	k8s.io/kubernetes/pkg/serviceaccount <1.30.0-beta.0	Go	6 Jun 2024
M Authentication Bypass by Spoofing	github.com/kubernetes/kubernetes/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/oidc <1.30.0-beta.0	Go	6 Jun 2024
M Authentication Bypass by Spoofing	github.com/kubernetes/kubernetes/pkg/serviceaccount <1.30.0-beta.0	Go	6 Jun 2024
M Authentication Bypass by Spoofing	github.com/openshift/telemeter/pkg/authorize/jwt *	Go	6 Jun 2024
C Malicious Package	com.unity.cloud.gltfast *	npm	6 Jun 2024
L Inadequate Encryption Strength	github.com/nats-io/nats-server/v2/server <2.2.3	Go	5 Jun 2024
H Path Traversal	github.com/stakater/forecastle/v1 *	Go	5 Jun 2024
H Uncontrolled resource consumption	org.webjars.bowergithub.micromatch:braces [0,]	Maven	5 Jun 2024
H Uncontrolled resource consumption	org.webjars.npm:braces [0,]	Maven	5 Jun 2024
H Inefficient Regular Expression Complexity	org.webjars.bowergithub.micromatch:micromatch [0,]	Maven	5 Jun 2024
H Inefficient Regular Expression Complexity	org.webjars.npm:micromatch [0,]	Maven	5 Jun 2024
M Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	org.webjars.npm:tileserver-gl [0,]	Maven	5 Jun 2024
L Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	org.webjars.npm:vxe-table [0,]	Maven	5 Jun 2024
M Insertion of Sensitive Information into Log File	sigs.k8s.io/azurefile-csi-driver/pkg/csi-common <1.29.4 >=1.30.0 <1.30.1	Go	5 Jun 2024
M SQL Injection	github.com/layer5io/meshery/server/models <0.7.22	Go	5 Jun 2024
M SQL Injection	github.com/layer5io/meshery/server/handlers <0.7.22	Go	5 Jun 2024
H Exposure of Sensitive Information to an Unauthorized Actor	chainguard.dev/apko/pkg/build/types <0.14.5	Go	5 Jun 2024
H Deserialization of Untrusted Data	mlflow [1.27.0,]	pip	5 Jun 2024
H Deserialization of Untrusted Data	mlflow [0.5.0,]	pip	5 Jun 2024
H Improper Control of Generation of Code ('Code Injection')	mlflow [1.11.0,]	pip	5 Jun 2024
H Deserialization of Untrusted Data	mlflow [2.5.0,]	pip	5 Jun 2024

APPLICATION

OPERATING SYSTEM