BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator Security Vulnerabilities

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: dask-gateway, aws-ebs-csi-driver, nri-rabbitmq, goreleaser, kyverno-policy-reporter, lazygit, prometheus-operator, kubernetes-csi-external-resizer, s5cmd, actions-runner-controller, nri-nginx, nats-server, nats, nri-mssql, kube-rbac-proxy, gitlab-logger, up, gobuster,....

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: dask-gateway, aws-ebs-csi-driver, nri-rabbitmq, goreleaser, kyverno-policy-reporter, lazygit, prometheus-operator, kubernetes-csi-external-resizer, s5cmd, actions-runner-controller, nri-nginx, nats-server, nats, nri-mssql, kube-rbac-proxy, gitlab-logger, up, gobuster,....

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, kubernetes-dns-node-cache, aws-efs-csi-driver, aws-ebs-csi-driver, prometheus-adapter, nodetaint, ip-masq-agent, calico,...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, kubernetes-dns-node-cache, aws-efs-csi-driver, aws-ebs-csi-driver, prometheus-adapter, nodetaint, ip-masq-agent, calico,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: dask-gateway, aws-ebs-csi-driver, nri-rabbitmq, goreleaser, kyverno-policy-reporter, lazygit, prometheus-operator, kubernetes-csi-external-resizer, s5cmd, actions-runner-controller, nri-nginx, nats-server, nats, nri-mssql, kube-rbac-proxy, gitlab-logger, up, gobuster,....

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: dask-gateway, aws-ebs-csi-driver, nri-rabbitmq, goreleaser, kyverno-policy-reporter, lazygit, prometheus-operator, kubernetes-csi-external-resizer, s5cmd, actions-runner-controller, nri-nginx, nats-server, nats, nri-mssql, kube-rbac-proxy, gitlab-logger, up, gobuster,....

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: go-bindata, go-md2man, helm-push, wait-for-port, sops, goreleaser, nsc, nats, aws-flb-cloudwatch, kubernetes-dashboard-metrics-scraper, gitlab-logger, influx, cortex, gobuster, configmap-reload, falco, ip-masq-agent, local-path-provisioner, oras,...

CVE-2023-29402 vulnerabilities

Vulnerabilities for packages: falco, policy-controller,...

CVE-2023-29404 vulnerabilities

Vulnerabilities for packages: falco, policy-controller,...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: helm-operator, cilium-cli, kubescape, zarf, flux-source-controller, helm-push, zot, cert-manager, k8sgpt, flux-helm-controller, eksctl, istio-operator, chartmuseum, k9s, kots, up,...

GHSA-7GPW-8WMC-PM8G vulnerabilities

Vulnerabilities for packages: dask-gateway,...

GHSA-68G3-2P3G-W9PQ vulnerabilities

Vulnerabilities for packages: falco, policy-controller,...

CVE-2024-29903 vulnerabilities

Vulnerabilities for packages: gitsign, goreleaser, melange, falco, neuvector-sigstore-interface, falcoctl, apko, wolfictl, skaffold, kubescape, slsa-verifier, vexctl, tekton-chains, tkn, ko, zarf, zot, flux-source-controller, aactl, policy-controller,...

CVE-2024-29902 vulnerabilities

Vulnerabilities for packages: gitsign, goreleaser, melange, falco, neuvector-sigstore-interface, falcoctl, apko, wolfictl, skaffold, kubescape, slsa-verifier, vexctl, tekton-chains, tkn, ko, zarf, zot, flux-source-controller, aactl, policy-controller,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: go-bindata, go-md2man, helm-push, wait-for-port, sops, goreleaser, nsc, nats, aws-flb-cloudwatch, kubernetes-dashboard-metrics-scraper, gitlab-logger, influx, cortex, gobuster, configmap-reload, falco, ip-masq-agent, local-path-provisioner, oras,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: go-bindata, go-md2man, helm-push, wait-for-port, sops, goreleaser, nsc, nats, aws-flb-cloudwatch, kubernetes-dashboard-metrics-scraper, gitlab-logger, influx, cortex, gobuster, configmap-reload, falco, ip-masq-agent, local-path-provisioner, oras,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: timestamp-authority, containerd, istio-pilot-discovery, terragrunt, flux-kustomize-controller, kargo, dex, oauth2-proxy, gitsign, goreleaser, skopeo, cloudflared, rekor, istio-cni, melange, tekton-pipelines, argo-workflows, frp, falco, step-ca, nerdctl, falcoctl,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, flux-kustomize-controller, oauth2-proxy, goreleaser, prometheus-operator, ollama, kubernetes-csi-external-resizer, crossplane-provider-aws, gobuster, prometheus-bind-exporter, flux-image-automation-controller, prometheus-statsd-exporter, telegraf,.....

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, flux-kustomize-controller, oauth2-proxy, goreleaser, prometheus-operator, atlantis, ollama, kubernetes-csi-external-resizer, crossplane-provider-aws, nats, istio-cni, up, gobuster, prometheus-bind-exporter, flux-image-automation-controller,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: terragrunt, flux-kustomize-controller, sops, oauth2-proxy, goreleaser, kyverno-policy-reporter, atlantis, ollama, cloudflared, rekor, actions-runner-controller, crossplane-provider-aws, nats-server, nats, istio-cni, kube-rbac-proxy, nri-mssql, tekton-pipelines, up,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, flux-kustomize-controller, dex, helm, kubeflow-katib, goreleaser, oauth2-proxy, buildkitd, up, cortex, falco, cluster-autoscaler, pulumi-language-dotnet, pulumi-language-yaml, cert-manager, pulumi-language-java, telegraf,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, oauth2-proxy, goreleaser, atlantis, ollama, nats, up, gobuster, prometheus-bind-exporter, telegraf, cue, opentofu, nodetaint, conftest, gke-gcloud-auth-plugin, thanos, grpcurl, kyverno, coredns, kind, keda, ko, haproxy-ingress,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: dask-gateway, aws-ebs-csi-driver, nri-rabbitmq, goreleaser, kyverno-policy-reporter, lazygit, prometheus-operator, kubernetes-csi-external-resizer, s5cmd, actions-runner-controller, nri-nginx, nats-server, nats, nri-mssql, kube-rbac-proxy, gitlab-logger, up, gobuster,....

GHSA-MW99-9CHC-XW7R vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, gitsign, goreleaser, gitness, tekton-pipelines, pulumi-language-dotnet, pulumi-language-yaml, pulumi-language-java, go-licenses, apko, kots, scorecard, gomplate, pulumi-kubernetes-operator, nuclei, argo-cd, kubevela, src-fingerprint, zot,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: istio-pilot-discovery, filebeat, kargo, helm, kubeflow-katib, gitsign, goreleaser, k8sgpt, newrelic-infrastructure-agent, dagger, skopeo, buildkitd, tekton-pipelines, argo-workflows, trivy, up, falco, nerdctl, falcoctl, traefik, cert-manager, telegraf, crane,...

CVE-2023-49568 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, gitsign, goreleaser, gitness, tekton-pipelines, pulumi-language-dotnet, pulumi-language-yaml, pulumi-language-java, go-licenses, apko, kots, scorecard, gomplate, pulumi-kubernetes-operator, nuclei, argo-cd, kubevela, src-fingerprint, zot,...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, kubernetes-dns-node-cache, aws-ebs-csi-driver, nodetaint, kubernetes, node-feature-discovery, local-static-provisioner, kubernetes-csi-driver-hostpath, ip-masq-agent, calico,...

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, skopeo, kubernetes, buildkitd, docker, trivy, nerdctl, telegraf, kots, wolfictl, skaffold, kubescape, cadvisor, kaniko, ctop, k3s, ingress-nginx-controller, runc, zarf, zot, datadog-agent, syft, nvidia-device-plugin, k3d, k9s,...

GHSA-V845-JXX5-VC9F vulnerabilities

Vulnerabilities for packages: dask-gateway, kubeflow-volumes-web-app, kube-downscaler, kubeflow-jupyter-web-app, py3-urllib3,...

CVE-2023-43804 vulnerabilities

Vulnerabilities for packages: dask-gateway, kubeflow-volumes-web-app, kube-downscaler, kubeflow-jupyter-web-app, py3-urllib3,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: dask-gateway, kubecolor, aws-ebs-csi-driver, flux-kustomize-controller, sops, oauth2-proxy, atlantis, lazygit, cloudflared, kubernetes-csi-external-resizer, multus-cni, osv-scanner, crossplane-provider-aws, nats-server, redka, rekor, s5cmd, tekton-pipelines,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: dask-gateway, aws-ebs-csi-driver, nri-rabbitmq, goreleaser, kyverno-policy-reporter, lazygit, prometheus-operator, kubernetes-csi-external-resizer, s5cmd, actions-runner-controller, nri-nginx, nats-server, nats, nri-mssql, kube-rbac-proxy, gitlab-logger, up, gobuster,....

CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-19

CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-19. This CVE either no longer is or was never...

CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-19

CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-19. This CVE either no longer is or was never...

CVE-2023-44487 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-15

CVE-2023-44487 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-15. A patched version of the package is...

Exploit for CVE-2024-24919

CVE_2024_24919 Vulnerability Scanner This Java tool scans a...

Exploit for CVE-2024-24919

CVE_2024_24919 Vulnerability Scanner This Java tool scans a...

CVE-2024-4344 Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery

The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.1.13. This is due to missing or incorrect nonce validation on the exec function. This makes it possible for...

Exploit for Link Following in Git

CVE-2024-32002 漏洞概述(⚠️注意！：请不要clone此仓库！！！⚠️) 描述...

CVE-2024-36041

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be...

Exploit for CVE-2024-24919

CVE-2024-24919 Bulk Scanner CVE-2024-24919 [Check Point...

ip172.ip-51-255-15.eu Cross Site Scripting vulnerability OBB-3932087

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

Exploit for CVE-2024-24919

CVE-2024-24919 Esse projeto tem como objetivo criar uma...

Oracle Linux 8 : container-tools:ol8 (ELSA-2024-3254)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3254 advisory. aardvark-dns buildah [2:1.33.7-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.33 ...

Akaunting 3.1.8 - Server-Side Template Injection (SSTI)

...

Craft CMS Logs Plugin 3.0.3 - Path Traversal (Authenticated)

...

Wipro Holmes Orchestrator 20.4.1 - Log File Disclosure

...

Oracle Linux 8 : idm:DL1 / and / idm:client (ELSA-2024-3267)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3267 advisory. bind-dyndb-ldap custodia ipa [4.9.13-9.0.1] - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674] [9.4.13-9] - dcerpc:...

Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2024-3253)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3253 advisory. hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [8.0.0-23.1.0.1] - Set SOURCE_DATE_EPOCH from changelog...

CVE-2024-34008 moodle: CSRF risk in analytics management of models

Actions in the admin management of analytics models did not include the necessary token to prevent a CSRF...