6th And 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M V5 And V6 Processor Families, And Intel Xeon E3-1200 V5 And V6 Product Families. Security Vulnerabilities

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS RM3/CRS dispenser firmware (all versions up to and including 41128 1002 RM3_CRS.BTR + 170329 2332 RM3_CRS.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5 CMDv5 dispenser firmware (all versions up to and including 141128 1002 CD5_ATM.BTR + 170329 2332 CD5_ATM.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

CVE-2024-4492

A vulnerability, which was classified as critical, has been found in Tenda i21 1.0.0.14(4656). This issue affects the function formOfflineSet of the file /goform/setStaOffline. The manipulation of the argument GO/ssidIndex leads to stack-based buffer overflow. The attack may be initiated remotely.....

CVE-2024-34478

btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failures. Specifically, it uses the transaction version as a signed integer when it is supposed to be treated as unsigned. There can be a chain split and loss of...

service.y2k.it Cross Site Scripting vulnerability OBB-3925954

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

zapahuira.uta.cl Cross Site Scripting vulnerability OBB-3925953

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

dreamhouse.it Cross Site Scripting vulnerability OBB-3925952

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-4491

A vulnerability classified as critical was found in Tenda i21 1.0.0.14(4656). This vulnerability affects the function formGetDiagnoseInfo. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the...

dreamhouse.agency Cross Site Scripting vulnerability OBB-3925951

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

digitalsmartfluidics.com Cross Site Scripting vulnerability OBB-3925950

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

kii.agency Cross Site Scripting vulnerability OBB-3925949

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: py3-seldon-core, falco, restic, seldon-core-operator, dynamic-localpv-provisioner, go, hey, k3d, grpcurl, wireguard-go, dynamic-localpv-provisioner-fips, gke-gcloud-auth-plugin, eks-distro-coredns, kyverno,...

GHSA-69CH-W2M2-3VJP vulnerabilities

Vulnerabilities for packages: vt-cli, py3-seldon-core, gitleaks, seldon-core-operator, dynamic-localpv-provisioner, hey, k3d, grpcurl, dynamic-localpv-provisioner-fips, eks-distro-coredns,...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: py3-seldon-core, falco, restic, seldon-core-operator, dynamic-localpv-provisioner, go, hey, k3d, grpcurl, wireguard-go, dynamic-localpv-provisioner-fips, gke-gcloud-auth-plugin, eks-distro-coredns, kyverno,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, nri-kafka, aws-flb-cloudwatch, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, velero, protoc-gen-go-grpc, gosu, vt-cli, calico, kube-bench,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, nri-kafka, aws-flb-cloudwatch, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, velero, protoc-gen-go-grpc, gosu, vt-cli, calico, kube-bench,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, nri-kafka, aws-flb-cloudwatch, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, velero, protoc-gen-go-grpc, gosu, vt-cli, calico, kube-bench,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: grafana-operator, terraform-provider-aws, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, velero, calico, rekor-fips, kube-bench, flux-image-automation-controller, gh, stakater-reloader, k9s, istio-fips,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, kubernetes-csi-external-attacher, dive, bank-vaults-fips, kube-oidc-proxy, thanos, flux-source-controller, tctl, cluster-autoscaler-fips, kyverno, trust-manager, atlantis, flux-source-controller-0.37, prometheus-adapter, vault,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, tomcat, bank-vaults-fips, kube-oidc-proxy, terraform-provider-aws, thanos, flux-source-controller, tctl, cluster-autoscaler-fips, kyverno, atlantis, prometheus-adapter, kyverno-policy-reporter, prometheus-bind-exporter, influxd, mc,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: bank-vaults-fips, petname, aws-flb-cloudwatch, nsc, cluster-autoscaler-fips, kyverno, newrelic-nri-kube-events, kyverno-policy-reporter, prometheus-bind-exporter, protoc-gen-go-grpc, prometheus-redis-exporter-fips, kubernetes-csi-livenessprobe-fips, cni-plugins,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: grafana-operator, terraform-provider-aws, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, velero, calico, rekor-fips, kube-bench, flux-image-automation-controller, gh, stakater-reloader, k9s, istio-fips,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, nri-kafka, aws-flb-cloudwatch, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, velero, protoc-gen-go-grpc, gosu, vt-cli, calico, kube-bench,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, aws-flb-cloudwatch, tctl-fips, tctl, newrelic-nri-statsd, croc, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, gitlab-kas, protoc-gen-go-grpc, nri-postgresql, apko, gosu,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, nri-kafka, aws-flb-cloudwatch, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, velero, protoc-gen-go-grpc, gosu, vt-cli, calico, kube-bench,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, nri-kafka, aws-flb-cloudwatch, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, velero, protoc-gen-go-grpc, gosu, vt-cli, calico, kube-bench,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: bank-vaults-fips, petname, aws-flb-cloudwatch, nsc, cluster-autoscaler-fips, kyverno, newrelic-nri-kube-events, kyverno-policy-reporter, prometheus-bind-exporter, protoc-gen-go-grpc, prometheus-redis-exporter-fips, kubernetes-csi-livenessprobe-fips, cni-plugins,...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: py3-seldon-core, seldon-core-operator, dynamic-localpv-provisioner, hey, k3d, grpcurl, wireguard-go, dynamic-localpv-provisioner-fips, eks-distro-coredns,...

GHSA-R48Q-9G5R-8Q2H vulnerabilities

Vulnerabilities for packages: py3-seldon-core, seldon-core-operator,...

GHSA-8C26-WMH5-6G9V vulnerabilities

Vulnerabilities for packages: py3-seldon-core, seldon-core-operator, dynamic-localpv-provisioner, k3d, dynamic-localpv-provisioner-fips,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, aws-flb-cloudwatch, tctl-fips, tctl, newrelic-nri-statsd, croc, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, gitlab-kas, protoc-gen-go-grpc, nri-postgresql, apko, gosu,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, nri-kafka, aws-flb-cloudwatch, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, velero, protoc-gen-go-grpc, gosu, vt-cli, calico, kube-bench,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, nri-kafka, aws-flb-cloudwatch, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, velero, protoc-gen-go-grpc, gosu, vt-cli, calico, kube-bench,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, nri-kafka, aws-flb-cloudwatch, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, velero, protoc-gen-go-grpc, gosu, vt-cli, calico, kube-bench,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: bank-vaults-fips, petname, aws-flb-cloudwatch, nsc, cluster-autoscaler-fips, kyverno, newrelic-nri-kube-events, kyverno-policy-reporter, prometheus-bind-exporter, protoc-gen-go-grpc, prometheus-redis-exporter-fips, kubernetes-csi-livenessprobe-fips, cni-plugins,...

CVE-2022-41721 vulnerabilities

Vulnerabilities for packages: kyverno, seldon-core-operator,...

CVE-2022-32149 vulnerabilities

Vulnerabilities for packages: vt-cli, py3-seldon-core, gitleaks, seldon-core-operator, dynamic-localpv-provisioner, hey, k3d, grpcurl, dynamic-localpv-provisioner-fips, eks-distro-coredns,...

GHSA-FXG5-WQ6X-VR4W vulnerabilities

Vulnerabilities for packages: kyverno, seldon-core-operator,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, kubernetes-csi-external-attacher, dive, bank-vaults-fips, kube-oidc-proxy, thanos, flux-source-controller, tctl, cluster-autoscaler-fips, kyverno, trust-manager, atlantis, flux-source-controller-0.37, prometheus-adapter, vault,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, istio-operator-fips, bank-vaults-fips, kube-oidc-proxy, terraform-provider-aws, nri-kafka, thanos, flux-source-controller, kubeflow-pipelines, nsc, cluster-autoscaler-fips, flux-kustomize-controller-2.0, kyverno, atlantis,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, istio-operator-fips, bank-vaults-fips, kube-oidc-proxy, terraform-provider-aws, nri-kafka, thanos, flux-source-controller, kubeflow-pipelines, nsc, cluster-autoscaler-fips, flux-kustomize-controller-2.0, kyverno, atlantis,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, kubernetes-csi-external-attacher, dive, bank-vaults-fips, kube-oidc-proxy, thanos, flux-source-controller, tctl, cluster-autoscaler-fips, kyverno, trust-manager, flux-source-controller-0.37, prometheus-adapter, vault,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: paranoia, grafana-operator, nri-kafka, aws-flb-cloudwatch, tctl-fips, tctl, prometheus-adapter, eks-distro-kubernetes-csi-node-driver-registrar, k8ssandra-operator-fips, fq, velero, protoc-gen-go-grpc, gosu, vt-cli, calico, kube-bench,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, kubernetes-csi-external-attacher, dive, bank-vaults-fips, kube-oidc-proxy, thanos, flux-source-controller, tctl, cluster-autoscaler-fips, kyverno, trust-manager, flux-source-controller-0.37, prometheus-adapter, vault,...

CVE-2022-27191 vulnerabilities

Vulnerabilities for packages: py3-seldon-core, seldon-core-operator, dynamic-localpv-provisioner, k3d, dynamic-localpv-provisioner-fips,...

GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: py3-seldon-core, seldon-core-operator, dynamic-localpv-provisioner, hey, k3d, grpcurl, wireguard-go, dynamic-localpv-provisioner-fips, eks-distro-coredns,...

CVE-2022-1996 vulnerabilities

Vulnerabilities for packages: py3-seldon-core, seldon-core-operator,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher, tomcat, bank-vaults-fips, kube-oidc-proxy, terraform-provider-aws, thanos, flux-source-controller, tctl, cluster-autoscaler-fips, kyverno, atlantis, prometheus-adapter, kyverno-policy-reporter, prometheus-bind-exporter, influxd, mc,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: bank-vaults-fips, petname, aws-flb-cloudwatch, nsc, cluster-autoscaler-fips, kyverno, newrelic-nri-kube-events, kyverno-policy-reporter, prometheus-bind-exporter, protoc-gen-go-grpc, prometheus-redis-exporter-fips, kubernetes-csi-livenessprobe-fips, cni-plugins,...

lm2i.fr Cross Site Scripting vulnerability OBB-3925948

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...