Lucene search

K

All In One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic Security Vulnerabilities

openbugbounty
openbugbounty

statistics.functioncompute.com Open Redirect vulnerability OBB-3939126

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

7AI Score

2024-06-26 03:43 PM
openbugbounty
openbugbounty

troytrojans.com Open Redirect vulnerability OBB-3939125

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

7AI Score

2024-06-26 03:41 PM
wolfi
wolfi

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, kubeflow-katib, aactl, nghttp2, secrets-store-csi-driver, haproxy-ingress, kind, opentofu, influxd, prometheus-elasticsearch-exporter, dynamic-localpv-provisioner, prometheus, dotnet, kubewatch, dex, mc, grype, atlantis, skaffold, hugo,...

7.5CVSS

9AI Score

0.732EPSS

2024-06-26 03:33 PM
609
wolfi
wolfi

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, crossplane-provider-azure, cloud-sql-proxy, prometheus-postgres-exporter, restic, cloudflared, aactl, kubeflow-katib, cilium, secrets-store-csi-driver, haproxy-ingress, opentofu, cri-tools, influxd, prometheus-elasticsearch-exporter,...

7.5AI Score

2024-06-26 03:33 PM
180
wolfi
wolfi

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-nginx, crossplane-provider-azure, cloud-sql-proxy, cni-plugins, docker-cli, prometheus-postgres-exporter, kubeflow-katib, pombump, go-licenses, gops, docker-credential-ecr-login, haproxy-ingress, kind, opentofu, cri-tools, prometheus-elasticsearch-exporter,...

7.8AI Score

0.0004EPSS

2024-06-26 03:33 PM
192
wolfi
wolfi

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: wolfictl, datadog-agent, k3d, buildkitd, syft, telegraf, nerdctl, cadvisor, newrelic-infrastructure-agent, zot, docker, grype, zarf, ctop, runc, k9s, skaffold, k3s, ingress-nginx-controller, kubernetes, kaniko, trivy, kots, nvidia-device-plugin, skopeo,...

8.6CVSS

9.2AI Score

0.051EPSS

2024-06-26 03:33 PM
294
wolfi
wolfi

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: go, dynamic-localpv-provisioner, restic, grpcurl, hey, k3d, wireguard-go, gke-gcloud-auth-plugin,...

7.5AI Score

2024-06-26 03:33 PM
147
wolfi
wolfi

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: step-issuer, docker-cli, kubeflow-katib, pombump, prometheus-elasticsearch-exporter, nri-mongodb, dynamic-localpv-provisioner, velero-plugin-for-csi, kubernetes-dashboard, gostatsd, cert-exporter, kubernetes-ingress-defaultbackend, shfmt, kube-bench, zarf, atlantis,...

6.8AI Score

0.0004EPSS

2024-06-26 03:33 PM
58
wolfi
wolfi

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, cloudflared, aactl, pombump, go-licenses, gops, docker-credential-ecr-login, secrets-store-csi-driver, kind, cri-tools, clusterctl, dynamic-localpv-provisioner, kubernetes-dashboard, nats-server, gostatsd, flannel, trust-manager,...

6.5AI Score

0.0004EPSS

2024-06-26 03:33 PM
21
wolfi
wolfi

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, cloudflared, aactl, pombump, go-licenses, gops, docker-credential-ecr-login, secrets-store-csi-driver, kind, cri-tools, clusterctl, dynamic-localpv-provisioner, kubernetes-dashboard, nats-server, gostatsd, flannel, trust-manager,...

7.5AI Score

2024-06-26 03:33 PM
16
wolfi
wolfi

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: step-issuer, kubeflow-katib, pombump, prometheus-elasticsearch-exporter, nri-mongodb, nerdctl, dynamic-localpv-provisioner, velero-plugin-for-csi, kubernetes-dashboard, gostatsd, cert-exporter, helm-docs, kubernetes-ingress-defaultbackend, shfmt, kube-bench, zarf,...

5.5CVSS

6.1AI Score

0.0004EPSS

2024-06-26 03:33 PM
24
wolfi
wolfi

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: petname, cass-operator, gosu, nats, cni-plugins, go-md2man, docker-cli, slsa-verifier, aactl, k3d, go-licenses, gobuster, gops, ip-masq-agent, docker-credential-ecr-login, influx, nsc, kind, prometheus-bind-exporter, render-template, aws-flb-cloudwatch, dgraph,...

7.5CVSS

7.9AI Score

0.001EPSS

2024-06-26 03:33 PM
59
wolfi
wolfi

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, cloud-sql-proxy, prometheus-postgres-exporter, kubeflow-katib, aactl, secrets-store-csi-driver, haproxy-ingress, opentofu, influxd, prometheus-elasticsearch-exporter, dynamic-localpv-provisioner, kubernetes-dashboard, prometheus,...

6.1CVSS

7.3AI Score

0.001EPSS

2024-06-26 03:33 PM
94
wolfi
wolfi

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nri-nginx, crossplane-provider-azure, cloud-sql-proxy, cni-plugins, docker-cli, prometheus-postgres-exporter, kubeflow-katib, pombump, go-licenses, gops, docker-credential-ecr-login, haproxy-ingress, kind, opentofu, cri-tools, prometheus-elasticsearch-exporter,...

7.8AI Score

0.0004EPSS

2024-06-26 03:33 PM
42
wolfi
wolfi

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nri-nginx, crossplane-provider-azure, cloud-sql-proxy, cni-plugins, docker-cli, prometheus-postgres-exporter, kubeflow-katib, pombump, go-licenses, gops, docker-credential-ecr-login, haproxy-ingress, kind, opentofu, cri-tools, prometheus-elasticsearch-exporter,...

7.5AI Score

2024-06-26 03:33 PM
28
wolfi
wolfi

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, flux-kustomize-controller, fluent-bit-plugin-loki, external-dns, nuclei, cert-manager, restic, falcoctl, guac, step, sigstore-scaffolding, cosign, filebeat, py3-azure-identity, tempo, timestamp-authority, buildkitd, keda, teleport, rclone,...

5.5CVSS

6AI Score

0.0004EPSS

2024-06-26 03:33 PM
15
wolfi
wolfi

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: external-secrets-operator, flux-kustomize-controller, fluent-bit-plugin-loki, external-dns, nuclei, cert-manager, restic, falcoctl, guac, step, sigstore-scaffolding, cosign, filebeat, py3-azure-identity, tempo, timestamp-authority, buildkitd, keda, teleport, rclone,...

7.5AI Score

2024-06-26 03:33 PM
7
wolfi
wolfi

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: go, dynamic-localpv-provisioner, restic, grpcurl, hey, k3d, wireguard-go, gke-gcloud-auth-plugin,...

7.5CVSS

8.4AI Score

0.024EPSS

2024-06-26 03:33 PM
25
wolfi
wolfi

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, crossplane-provider-azure, cloud-sql-proxy, prometheus-postgres-exporter, restic, cloudflared, aactl, kubeflow-katib, cilium, secrets-store-csi-driver, haproxy-ingress, opentofu, cri-tools, influxd, prometheus-elasticsearch-exporter,...

6.8AI Score

0.0004EPSS

2024-06-26 03:33 PM
30
wolfi
wolfi

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, cloudflared, aactl, pombump, go-licenses, gops, docker-credential-ecr-login, secrets-store-csi-driver, kind, cri-tools, clusterctl, dynamic-localpv-provisioner, kubernetes-dashboard, nats-server, gostatsd, flannel, trust-manager,...

7.5AI Score

2024-06-26 03:33 PM
21
wolfi
wolfi

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: step-issuer, docker-cli, kubeflow-katib, pombump, prometheus-elasticsearch-exporter, nri-mongodb, dynamic-localpv-provisioner, velero-plugin-for-csi, kubernetes-dashboard, gostatsd, cert-exporter, kubernetes-ingress-defaultbackend, shfmt, kube-bench, zarf, atlantis,...

7.5AI Score

2024-06-26 03:33 PM
20
wolfi
wolfi

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: step-issuer, kubeflow-katib, pombump, prometheus-elasticsearch-exporter, nri-mongodb, nerdctl, dynamic-localpv-provisioner, velero-plugin-for-csi, kubernetes-dashboard, gostatsd, cert-exporter, helm-docs, kubernetes-ingress-defaultbackend, shfmt, kube-bench, zarf,...

9.8CVSS

9.8AI Score

0.001EPSS

2024-06-26 03:33 PM
49
wolfi
wolfi

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, cloud-sql-proxy, prometheus-postgres-exporter, kubeflow-katib, aactl, secrets-store-csi-driver, haproxy-ingress, kind, opentofu, influxd, prometheus-elasticsearch-exporter, dynamic-localpv-provisioner, kubernetes-dashboard, prometheus,...

7.5CVSS

8.4AI Score

0.002EPSS

2024-06-26 03:33 PM
49
wolfi
wolfi

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: nri-nginx, crossplane-provider-azure, cloud-sql-proxy, cni-plugins, docker-cli, prometheus-postgres-exporter, kubeflow-katib, pombump, go-licenses, gops, docker-credential-ecr-login, haproxy-ingress, kind, opentofu, cri-tools, prometheus-elasticsearch-exporter,...

7.5AI Score

2024-06-26 03:33 PM
22
wolfi
wolfi

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-nginx, crossplane-provider-azure, cloud-sql-proxy, cni-plugins, docker-cli, prometheus-postgres-exporter, kubeflow-katib, pombump, go-licenses, gops, docker-credential-ecr-login, haproxy-ingress, kind, opentofu, cri-tools, prometheus-elasticsearch-exporter,...

7.5AI Score

2024-06-26 03:33 PM
24
wolfi
wolfi

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-nginx, crossplane-provider-azure, cloud-sql-proxy, cni-plugins, docker-cli, prometheus-postgres-exporter, kubeflow-katib, pombump, go-licenses, gops, docker-credential-ecr-login, haproxy-ingress, kind, opentofu, cri-tools, prometheus-elasticsearch-exporter,...

7.5AI Score

2024-06-26 03:33 PM
21
wolfi
wolfi

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: step-issuer, kubeflow-katib, pombump, prometheus-elasticsearch-exporter, nri-mongodb, nerdctl, dynamic-localpv-provisioner, velero-plugin-for-csi, kubernetes-dashboard, gostatsd, cert-exporter, helm-docs, kubernetes-ingress-defaultbackend, shfmt, kube-bench, zarf,...

7.5AI Score

2024-06-26 03:33 PM
3
wolfi
wolfi

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: petname, cass-operator, gosu, nats, cni-plugins, go-md2man, docker-cli, slsa-verifier, aactl, k3d, go-licenses, gobuster, gops, ip-masq-agent, docker-credential-ecr-login, influx, nsc, kind, prometheus-bind-exporter, render-template, aws-flb-cloudwatch, dgraph,...

5.3CVSS

7.2AI Score

0.001EPSS

2024-06-26 03:33 PM
28
wolfi
wolfi

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: petname, cass-operator, gosu, nats, cni-plugins, go-md2man, docker-cli, slsa-verifier, aactl, k3d, go-licenses, gobuster, gops, ip-masq-agent, docker-credential-ecr-login, influx, nsc, kind, prometheus-bind-exporter, render-template, aws-flb-cloudwatch, dgraph,...

7.5AI Score

2024-06-26 03:33 PM
21
wolfi
wolfi

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, kubeflow-katib, aactl, nghttp2, secrets-store-csi-driver, haproxy-ingress, kind, opentofu, influxd, prometheus-elasticsearch-exporter, dynamic-localpv-provisioner, prometheus, dotnet, kubewatch, dex, mc, grype, atlantis, skaffold, hugo,...

7.5AI Score

2024-06-26 03:33 PM
26
wolfi
wolfi

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: nri-nginx, crossplane-provider-azure, cloud-sql-proxy, cni-plugins, docker-cli, prometheus-postgres-exporter, kubeflow-katib, pombump, go-licenses, gops, docker-credential-ecr-login, haproxy-ingress, kind, opentofu, cri-tools, prometheus-elasticsearch-exporter,...

7.8AI Score

0.0004EPSS

2024-06-26 03:33 PM
19
wolfi
wolfi

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: nri-nginx, crossplane-provider-azure, cloud-sql-proxy, cni-plugins, docker-cli, prometheus-postgres-exporter, kubeflow-katib, pombump, go-licenses, gops, docker-credential-ecr-login, haproxy-ingress, kind, opentofu, cri-tools, prometheus-elasticsearch-exporter,...

7.5AI Score

2024-06-26 03:33 PM
24
wolfi
wolfi

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: nri-nginx, crossplane-provider-azure, cloud-sql-proxy, cni-plugins, docker-cli, prometheus-postgres-exporter, kubeflow-katib, pombump, go-licenses, gops, docker-credential-ecr-login, haproxy-ingress, kind, opentofu, cri-tools, prometheus-elasticsearch-exporter,...

7.8AI Score

0.0004EPSS

2024-06-26 03:33 PM
21
wolfi
wolfi

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: petname, cass-operator, gosu, nats, cni-plugins, go-md2man, docker-cli, slsa-verifier, aactl, k3d, go-licenses, gobuster, gops, ip-masq-agent, docker-credential-ecr-login, influx, nsc, kind, prometheus-bind-exporter, render-template, aws-flb-cloudwatch, dgraph,...

7.5AI Score

2024-06-26 03:33 PM
20
wolfi
wolfi

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, cloud-sql-proxy, prometheus-postgres-exporter, kubeflow-katib, aactl, secrets-store-csi-driver, haproxy-ingress, kind, opentofu, influxd, prometheus-elasticsearch-exporter, dynamic-localpv-provisioner, kubernetes-dashboard, prometheus,...

7.5AI Score

2024-06-26 03:33 PM
19
wolfi
wolfi

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, cloud-sql-proxy, prometheus-postgres-exporter, kubeflow-katib, aactl, secrets-store-csi-driver, haproxy-ingress, opentofu, influxd, prometheus-elasticsearch-exporter, dynamic-localpv-provisioner, kubernetes-dashboard, prometheus,...

7.5AI Score

2024-06-26 03:33 PM
28
wolfi
wolfi

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, pulumi-language-yaml, prometheus-blackbox-exporter, flux-kustomize-controller, cluster-autoscaler, external-dns, prometheus-adapter, slsa-verifier, kubevela, cert-manager, minio, kubeflow-katib, aactl, k3d, cosign, flux-notification-controller,....

7.5AI Score

2024-06-26 03:33 PM
96
wolfi
wolfi

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, cloudflared, aactl, pombump, go-licenses, gops, docker-credential-ecr-login, secrets-store-csi-driver, kind, cri-tools, clusterctl, dynamic-localpv-provisioner, kubernetes-dashboard, nats-server, gostatsd, flannel, trust-manager,...

6.5AI Score

0.0004EPSS

2024-06-26 03:33 PM
18
wolfi
wolfi

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: step-issuer, kubeflow-katib, pombump, prometheus-elasticsearch-exporter, nri-mongodb, nerdctl, dynamic-localpv-provisioner, velero-plugin-for-csi, kubernetes-dashboard, gostatsd, cert-exporter, helm-docs, kubernetes-ingress-defaultbackend, shfmt, kube-bench, zarf,...

7.5AI Score

2024-06-26 03:33 PM
4
wolfi
wolfi

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: nri-nginx, crossplane-provider-azure, cloud-sql-proxy, cni-plugins, docker-cli, prometheus-postgres-exporter, kubeflow-katib, pombump, go-licenses, gops, docker-credential-ecr-login, haproxy-ingress, kind, opentofu, cri-tools, prometheus-elasticsearch-exporter,...

6AI Score

0.0004EPSS

2024-06-26 03:33 PM
19
wolfi
wolfi

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: wolfictl, datadog-agent, k3d, buildkitd, syft, telegraf, nerdctl, cadvisor, newrelic-infrastructure-agent, zot, docker, grype, zarf, ctop, runc, k9s, skaffold, k3s, ingress-nginx-controller, kubernetes, kaniko, trivy, kots, nvidia-device-plugin, skopeo,...

7.5AI Score

2024-06-26 03:33 PM
15
openbugbounty
openbugbounty

api.ffm.to Open Redirect vulnerability OBB-3939124

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

7AI Score

2024-06-26 03:33 PM
cve
cve

CVE-2024-38272 Auth Bypass in Quickshare

There exists a vulnerability in Quickshare/Nearby where an attacker can bypass the accept file dialog on QuickShare Windows. Normally in QuickShare Windows app we can't send a file without the user accept from the receiving device if the visibility is set to everyone mode or contacts mode. We...

6.5AI Score

EPSS

2024-06-26 03:19 PM
cvelist
cvelist

CVE-2024-38272 Auth Bypass in Quickshare

There exists a vulnerability in Quickshare/Nearby where an attacker can bypass the accept file dialog on QuickShare Windows. Normally in QuickShare Windows app we can't send a file without the user accept from the receiving device if the visibility is set to everyone mode or contacts mode. We...

EPSS

2024-06-26 03:19 PM
cve
cve

CVE-2024-38271 Denial of Service in Quickshare

There exists a vulnerability in Quickshare/Nearby where an attacker can force the a victim to stay connected to a temporary hotspot created for the share. As part of the sequence of packets in a QuickShare connection over Bluetooth, the attacker forces the victim to connect to the attacker’s WiFi.....

6.5AI Score

EPSS

2024-06-26 03:19 PM
cvelist
cvelist

CVE-2024-38271 Denial of Service in Quickshare

There exists a vulnerability in Quickshare/Nearby where an attacker can force the a victim to stay connected to a temporary hotspot created for the share. As part of the sequence of packets in a QuickShare connection over Bluetooth, the attacker forces the victim to connect to the attacker’s WiFi.....

EPSS

2024-06-26 03:19 PM
cve
cve

CVE-2024-4604

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Magarsus Consultancy SSO (Single Sign On) allows Manipulating Hidden Fields.This issue affects SSO (Single Sign On): from 1.0 before...

6.1CVSS

6.2AI Score

EPSS

2024-06-26 03:15 PM
nvd
nvd

CVE-2024-4604

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Magarsus Consultancy SSO (Single Sign On) allows Manipulating Hidden Fields.This issue affects SSO (Single Sign On): from 1.0 before...

6.1CVSS

EPSS

2024-06-26 03:15 PM
cve
cve

CVE-2024-4228

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insufficiently Protected Credentials vulnerability in Magarsus Consultancy SSO (Single Sign On) allows SQL Injection.This issue.....

9.8CVSS

9.8AI Score

EPSS

2024-06-26 03:15 PM
3
nvd
nvd

CVE-2024-4228

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor, CWE - 522 - Insufficiently Protected Credentials vulnerability in Magarsus Consultancy SSO (Single Sign On) allows SQL Injection.This issue.....

9.8CVSS

EPSS

2024-06-26 03:15 PM
Total number of security vulnerabilities2743648