Vulnerabilities for packages: vault-k8s, crossplane-provider-aws, kube-fluentd-operator, prometheus-alertmanager, consul, trust-manager, goreleaser, skaffold, tctl, external-secrets-operator, aactl, falcoctl, metrics-server, mc, sigstore-scaffolding, kpt, prometheus-statsd-exporter,...
6.1CVSS
7.3AI Score
0.001EPSS
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: vault-k8s, kube-bench, newrelic-nri-kube-events, crossplane-provider-aws, kube-fluentd-operator, smarter-device-manager, envoy-ratelimit, consul, prometheus-alertmanager, spicedb, trust-manager, cadvisor, datadog-agent, goreleaser, restic, kargo, skaffold, loki, tctl,....
6.7AI Score
0.0004EPSS
CVE-2024-24784 vulnerabilities
Vulnerabilities for packages: fq, vault-k8s, kube-bench, smarter-device-manager, envoy-ratelimit, consul, prometheus-alertmanager, nri-rabbitmq, cadvisor, datadog-agent, direnv, goreleaser, skaffold, loki, tctl, src-fingerprint, nats-server, temporal-server, yam, metrics-server, nri-kafka,...
7.8AI Score
0.0004EPSS
GHSA-RR6R-CFGF-GC6H vulnerabilities
Vulnerabilities for packages: fq, vault-k8s, kube-bench, smarter-device-manager, envoy-ratelimit, consul, prometheus-alertmanager, nri-rabbitmq, cadvisor, datadog-agent, direnv, goreleaser, skaffold, loki, tctl, src-fingerprint, nats-server, temporal-server, yam, metrics-server, nri-kafka,...
7.5AI Score
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: timestamp-authority, prometheus-operator, airflow, grafana-agent-operator, velero, flux, zot, grafana-mimir, flux-kustomize-controller, sops, rclone, cosign, goreleaser, grafana, ksops, kyverno, loki, rekor, restic, boring-registry, external-secrets-operator,...
5.5CVSS
6.1AI Score
0.0004EPSS
GHSA-M5VV-6R4H-3VJ9 vulnerabilities
Vulnerabilities for packages: timestamp-authority, prometheus-operator, airflow, grafana-agent-operator, velero, flux, zot, grafana-mimir, flux-kustomize-controller, sops, rclone, cosign, goreleaser, grafana, ksops, kyverno, loki, rekor, restic, boring-registry, external-secrets-operator,...
7.5AI Score
CVE-2022-41723 vulnerabilities
Vulnerabilities for packages: falco, gke-gcloud-auth-plugin, grpcurl, wireguard-go, go, k3d, hey, restic,...
7.5CVSS
8.4AI Score
0.024EPSS
GHSA-4V7X-PQXF-CX7M vulnerabilities
Vulnerabilities for packages: node-feature-discovery, prometheus-alertmanager, cadvisor, restic, temporal-server, metrics-server, postgres-operator, nuclei, mc, sigstore-scaffolding, slsa-verifier, gitsign, nsc, govulncheck, kubernetes-dashboard, kubeadm-controlplane-controller,...
7.5AI Score
GHSA-2JWV-JMQ4-4J3R vulnerabilities
Vulnerabilities for packages: vault-k8s, mods, kube-bench, crossplane-provider-aws, smarter-device-manager, node-feature-discovery, prometheus-alertmanager, spicedb, trust-manager, cadvisor, direnv, skaffold, loki, src-fingerprint, external-secrets-operator, aactl, nats-server, falcoctl,...
7.5AI Score
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: vault-k8s, crossplane-provider-aws, kube-fluentd-operator, prometheus-alertmanager, consul, trust-manager, goreleaser, skaffold, tctl, external-secrets-operator, aactl, falcoctl, istio-operator, metrics-server, kubernetes-ingress-defaultbackend, mc,...
7.5CVSS
8.4AI Score
0.002EPSS
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: fq, vault-k8s, kube-bench, smarter-device-manager, envoy-ratelimit, consul, prometheus-alertmanager, nri-rabbitmq, cadvisor, datadog-agent, direnv, goreleaser, skaffold, loki, tctl, src-fingerprint, nats-server, temporal-server, yam, metrics-server, nri-kafka,...
7.5AI Score
GHSA-3Q2C-PVP5-3CQP vulnerabilities
Vulnerabilities for packages: fq, vault-k8s, kube-bench, smarter-device-manager, envoy-ratelimit, consul, prometheus-alertmanager, nri-rabbitmq, cadvisor, datadog-agent, direnv, goreleaser, skaffold, loki, tctl, src-fingerprint, nats-server, temporal-server, yam, metrics-server, nri-kafka,...
7.5AI Score
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: fq, vault-k8s, kube-bench, smarter-device-manager, envoy-ratelimit, consul, prometheus-alertmanager, nri-rabbitmq, cadvisor, datadog-agent, direnv, goreleaser, skaffold, loki, tctl, src-fingerprint, nats-server, temporal-server, yam, metrics-server, nri-kafka,...
7.5AI Score
CVE-2024-24790 vulnerabilities
Vulnerabilities for packages: node-feature-discovery, prometheus-alertmanager, cadvisor, restic, metrics-server, postgres-operator, mc, sigstore-scaffolding, slsa-verifier, gitsign, nsc, govulncheck, kubernetes-dashboard, kubeadm-controlplane-controller, secrets-store-csi-driver-provider-aws,...
6.5AI Score
0.0004EPSS
GHSA-49GW-VXVF-FC2G vulnerabilities
Vulnerabilities for packages: node-feature-discovery, prometheus-alertmanager, cadvisor, restic, metrics-server, postgres-operator, mc, sigstore-scaffolding, slsa-verifier, gitsign, nsc, govulncheck, kubernetes-dashboard, kubeadm-controlplane-controller, secrets-store-csi-driver-provider-aws,...
7.5AI Score
GHSA-5F94-VHJQ-RPG8 vulnerabilities
Vulnerabilities for packages: configmap-reload, cass-operator, gke-gcloud-auth-plugin, helm-push, smarter-device-manager, gobuster, ip-masq-agent, sops, oras, sbom-scorecard, protoc-gen-go-grpc, vertical-pod-autoscaler, goreleaser, nri-discovery-kubernetes, aactl, docker-cli, grpcurl, cortex,...
7.5AI Score
GHSA-9F76-WG39-X86H vulnerabilities
Vulnerabilities for packages: configmap-reload, cass-operator, gke-gcloud-auth-plugin, helm-push, smarter-device-manager, gobuster, ip-masq-agent, sops, oras, sbom-scorecard, protoc-gen-go-grpc, vertical-pod-autoscaler, goreleaser, nri-discovery-kubernetes, aactl, docker-cli, grpcurl, cortex,...
7.5AI Score
CVE-2023-39326 vulnerabilities
Vulnerabilities for packages: configmap-reload, cass-operator, gke-gcloud-auth-plugin, helm-push, smarter-device-manager, gobuster, ip-masq-agent, sops, oras, sbom-scorecard, protoc-gen-go-grpc, vertical-pod-autoscaler, goreleaser, nri-discovery-kubernetes, aactl, docker-cli, grpcurl, cortex,...
5.3CVSS
7.2AI Score
0.001EPSS
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: vault-k8s, crossplane-provider-aws, kube-fluentd-operator, prometheus-alertmanager, consul, trust-manager, goreleaser, skaffold, tctl, external-secrets-operator, aactl, falcoctl, istio-operator, metrics-server, kubernetes-ingress-defaultbackend, mc,...
7.5AI Score
GHSA-2WRH-6PVC-2JM9 vulnerabilities
Vulnerabilities for packages: vault-k8s, crossplane-provider-aws, kube-fluentd-operator, prometheus-alertmanager, consul, trust-manager, goreleaser, skaffold, tctl, external-secrets-operator, aactl, falcoctl, metrics-server, mc, sigstore-scaffolding, kpt, prometheus-statsd-exporter,...
7.5AI Score
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: minio, ko, src, grype, helm, flux-notification-controller, envoy-ratelimit, pulumi-kubernetes-operator, flux-kustomize-controller, vault-csi-provider, gitlab-pages, terraform-provider-azurerm, cosign, goreleaser, tctl, aws-efs-csi-driver, aactl, gatekeeper, telegraf,.....
7.5AI Score
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: envoy-ratelimit, goreleaser, skaffold, tctl, aactl, metrics-server, mc, sigstore-scaffolding, kpt, atlantis, kind, prometheus-stackdriver-exporter, oauth2-proxy, haproxy-ingress, slsa-verifier, nodetaint, cilium-envoy, kubeflow-katib, keda, argo-cd,...
7.5AI Score
CVE-2024-24783 vulnerabilities
Vulnerabilities for packages: fq, vault-k8s, kube-bench, smarter-device-manager, envoy-ratelimit, consul, prometheus-alertmanager, nri-rabbitmq, cadvisor, datadog-agent, direnv, goreleaser, skaffold, loki, tctl, src-fingerprint, nats-server, temporal-server, yam, metrics-server, nri-kafka,...
7.8AI Score
0.0004EPSS
CVE-2024-24785 vulnerabilities
Vulnerabilities for packages: fq, vault-k8s, kube-bench, smarter-device-manager, envoy-ratelimit, consul, prometheus-alertmanager, nri-rabbitmq, cadvisor, datadog-agent, direnv, goreleaser, skaffold, loki, tctl, src-fingerprint, nats-server, temporal-server, yam, metrics-server, nri-kafka,...
7.8AI Score
0.0004EPSS
GHSA-32CH-6X54-Q4H9 vulnerabilities
Vulnerabilities for packages: fq, vault-k8s, kube-bench, smarter-device-manager, envoy-ratelimit, consul, prometheus-alertmanager, nri-rabbitmq, cadvisor, datadog-agent, direnv, goreleaser, skaffold, loki, tctl, src-fingerprint, nats-server, temporal-server, yam, metrics-server, nri-kafka,...
7.5AI Score
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: vault-k8s, mods, kube-bench, crossplane-provider-aws, smarter-device-manager, node-feature-discovery, prometheus-alertmanager, spicedb, trust-manager, cadvisor, direnv, skaffold, loki, src-fingerprint, external-secrets-operator, aactl, nats-server, falcoctl,...
6.5AI Score
0.0004EPSS
GHSA-236W-P7WF-5PH8 vulnerabilities
Vulnerabilities for packages: node-feature-discovery, prometheus-alertmanager, cadvisor, restic, metrics-server, postgres-operator, mc, sigstore-scaffolding, slsa-verifier, gitsign, nsc, govulncheck, kubernetes-dashboard, kubeadm-controlplane-controller, secrets-store-csi-driver-provider-aws,...
7.5AI Score
CVE-2023-45290 vulnerabilities
Vulnerabilities for packages: fq, vault-k8s, kube-bench, smarter-device-manager, envoy-ratelimit, consul, prometheus-alertmanager, nri-rabbitmq, cadvisor, datadog-agent, direnv, goreleaser, skaffold, loki, tctl, src-fingerprint, nats-server, temporal-server, yam, metrics-server, nri-kafka,...
5.9AI Score
0.0004EPSS
GHSA-XR7R-F8XQ-VFVV vulnerabilities
Vulnerabilities for packages: kaniko, nerdctl, docker, grype, zot, syft, cadvisor, datadog-agent, skaffold, telegraf, nvidia-device-plugin, zarf, ctop, skopeo, k9s, k3s, ingress-nginx-controller, k3d, newrelic-infrastructure-agent, runc, trivy, kubernetes, wolfictl, buildkitd, kubescape,...
7.5AI Score
CVE-2023-44487 affecting package sriov-network-device-plugin for versions less than 3.5.1-2
CVE-2023-44487 affecting package sriov-network-device-plugin for versions less than 3.5.1-2. An upgraded version of the package is available that resolves this...
7.5CVSS
8.8AI Score
0.732EPSS
langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for...
EPSS
In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartext as part of the URL parameters in the logs (such as SonarQube Access Logs, Proxy Logs,...
4.9CVSS
7AI Score
EPSS
In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartext as part of the URL parameters in the logs (such as SonarQube Access Logs, Proxy Logs,...
4.9CVSS
EPSS
langchain_experimental (aka LangChain Experimental) before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for...
7AI Score
EPSS
htags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is untrusted, because shell metacharacters may be...
EPSS
htags in GNU Global through 6.6.12 allows code execution in situations where dbpath (aka -d) is untrusted, because shell metacharacters may be...
7.5AI Score
EPSS
Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in afp_mapname in...
EPSS
C/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use cases such as sorting an array of 50...
7AI Score
EPSS
Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in...
7.6AI Score
EPSS
Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of incorrectly using FPLoginExt in BN_bin2bn in...
EPSS
C/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use cases such as sorting an array of 50...
EPSS
Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[len] to '\0' in FPMapName in afp_mapname in...
7.6AI Score
EPSS
Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of setting ibuf[PASSWDLEN] to '\0' in FPLoginExt in login in...
EPSS
Netatalk 3.2.0 has an off-by-one error and resultant heap-based buffer overflow because of incorrectly using FPLoginExt in BN_bin2bn in...
7.7AI Score
EPSS
alt.hennweb.de Cross Site Scripting vulnerability OBB-3935503
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...
6.2AI Score
mangafoxfull.com Cross Site Scripting vulnerability OBB-3935501
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...
6.2AI Score
How to Spot a Business Email Compromise Scam
In this common email scam, a criminal pretending to be your boss or coworker emails you asking for a favor involving money. Here's what do to when a bad actor lands in your...
7.2AI Score
interculturemap.org Cross Site Scripting vulnerability OBB-3935498
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...
6.2AI Score
mastersflyingschool.com Cross Site Scripting vulnerability OBB-3935495
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...
6.2AI Score
sweetzies.co.uk Cross Site Scripting vulnerability OBB-3935494
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...
6.2AI Score