Browse CVEs

HIGH 7.8 CVE-2024-25545 An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the nwjs framework component. Weave Desktop after 7.84.1 Fix from $1,9502024-04-12 MEDIUM 6.5 CVE-2023-34236 Weave GitOps Terraform Controller (aka Weave TF-controller) is a controller for Flux to reconcile Terraform resources in a GitOps way. A vulnerabilit… Gitops Terraform Controller 0.14.4+ Fix from $1,6002023-07-14 MEDIUM 6.0 CVE-2022-23509 Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. GitOps r… Weave Gitops 0.12.0+ Fix from $1,6002023-01-09 HIGH 7.8 CVE-2022-23508 Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulne… Weave Gitops 0.12.0+ Fix from $1,9502023-01-09 CRITICAL 9.8 CVE-2022-35976 The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A specially crafted kubeconfig leads to… Gitops Tools after 0.20.9 Fix from $2,3002022-08-18 CRITICAL 9.8 CVE-2022-35975 The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow for remote code execution … Gitops Tools after 0.20.2 Fix from $2,3002022-08-18 HIGH 7.5 CVE-2022-31098 Weave GitOps is a simple open source developer platform for people who want cloud native applications, without needing Kubernetes expertise. A vulner… Weave Gitops 0.8.1+ Fix from $1,9502022-06-27 HIGH 8.0 CVE-2020-26278 Weave Net is open source software which creates a virtual network that connects Docker containers across multiple hosts and enables their automatic d… Weave 2.8.0+ Fix from $1,9502021-01-20 CRITICAL 9.8 CVE-2020-35464 Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weav… Cloud Agent Mitigation only Fix from $2,3002020-12-15 MEDIUM 5.8 CVE-2020-11091 In Weave Net before version 2.6.3, an attacker able to run a process as root in a container is able to respond to DNS requests from the host and ther… Weave Net 2.6.3+ Fix from $1,6002020-06-03