BookingPress – Appointments Booking Calendar Plugin And Online Scheduling Plugin Security Vulnerabilities

CVE-2024-6045

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the....

CVE-2024-6046

SECOM WRTR-304GN-304TW-UPSC V02(unsupported-when-assigned) does not properly filter user input in the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the...

CVE-2024-6046

SECOM WRTR-304GN-304TW-UPSC V02(unsupported-when-assigned) does not properly filter user input in the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the...

CVE-2024-6045

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the....

CVE-2024-6046 SECOM WRTR-304GN-304TW-UPSC - OS Command Injection

SECOM WRTR-304GN-304TW-UPSC V02(unsupported-when-assigned) does not properly filter user input in the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the...

CVE-2024-5163

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security...

CVE-2024-5163

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security...

CVE-2024-6045 D-Link router - Hidden Backdoor

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the....

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, wireguard-go, grpcurl, gke-gcloud-auth-plugin, hey, go, k3d, falco,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: metacontroller, flux-helm-controller, opentofu, skaffold, cosign, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller, cluster-autoscaler, kpt, mc, pulumi-kubernetes-operator, buildkitd, scorecard, metrics-server, hey, pulumi-language-yaml,....

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, clusterctl, etcd, flux-helm-controller, terraform-docs, opentofu, skaffold, tekton-chains, containerd, cosign, certificate-transparency, kubevela, istio-operator, fuse-overlayfs-snapshotter, skopeo, prometheus, src, ingress-nginx-controller,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: runc, k9s, kubescape, ctop, skaffold, wolfictl, nvidia-device-plugin, nerdctl, skopeo, cadvisor, syft, ingress-nginx-controller, datadog-agent, kubernetes, telegraf, buildkitd, newrelic-infrastructure-agent, k3s, k3d, trivy, zot, docker, kaniko, zarf, grype,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, terraform-docs, skaffold, tekton-chains, kafka-proxy, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: terraform-docs, skaffold, tekton-chains, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure, nri-memcached, metrics-server, chezmoi,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, local-static-provisioner, clusterctl, etcd, src-fingerprint, terraform-docs, skaffold, grafana-rollout-operator, nvidia-container-toolkit, containerd, tekton-chains, tempo, cosign, certificate-transparency, skopeo, istio-operator,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: runc, metacontroller, local-static-provisioner, clusterctl, etcd, src-fingerprint, terraform-docs, skaffold, grafana-rollout-operator, nvidia-container-toolkit, containerd, tekton-chains, tempo, cosign, certificate-transparency, skopeo, istio-operator,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: amass, flannel-cni-plugin, dgraph, docker-cli, gosu, ctop, ip-masq-agent, gitlab-logger, petname, go-licenses, prometheus-stackdriver-exporter, gke-gcloud-auth-plugin, mage, cilium-envoy, nsc, sonobuoy, kind, protoc-gen-go-grpc, wait-for-port, sbom-scorecard, influx,.....

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, flux-helm-controller, opentofu, skaffold, containerd, cosign, src, kubevela, fuse-overlayfs-snapshotter, prometheus, kubernetes-csi-external-provisioner, prometheus-operator, aws-ebs-csi-driver, cluster-autoscaler, kpt, mc,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, clusterctl, etcd, flux-helm-controller, terraform-docs, opentofu, skaffold, tekton-chains, containerd, cosign, certificate-transparency, kubevela, istio-operator, fuse-overlayfs-snapshotter, skopeo, prometheus, src, ingress-nginx-controller,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, rook, boring-registry, gitlab-runner, teleport, guac, kyverno, opentelemetry-collector-contrib, bank-vaults, tekton-pipelines, tekton-chains, nuclei, cosign, keda, fulcio, prometheus, rclone, terragrunt, tkn, prometheus-operator,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: fluent-bit-plugin-loki, rook, boring-registry, gitlab-runner, teleport, guac, kyverno, opentelemetry-collector-contrib, bank-vaults, tekton-pipelines, tekton-chains, nuclei, cosign, keda, fulcio, prometheus, rclone, terragrunt, tkn, prometheus-operator,...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, wireguard-go, grpcurl, gke-gcloud-auth-plugin, hey, go, k3d, falco,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: runc, metacontroller, local-static-provisioner, clusterctl, etcd, src-fingerprint, terraform-docs, skaffold, grafana-rollout-operator, nvidia-container-toolkit, containerd, tekton-chains, tempo, cosign, certificate-transparency, skopeo, istio-operator,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, terraform-docs, skaffold, tekton-chains, kafka-proxy, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: terraform-docs, skaffold, tekton-chains, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure, nri-memcached, metrics-server, chezmoi,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, flux-helm-controller, opentofu, skaffold, tekton-chains, containerd, cosign, src, kubevela, istio-operator, fuse-overlayfs-snapshotter, prometheus, kubernetes-csi-external-provisioner, prometheus-operator, aws-ebs-csi-driver, cluster-autoscaler,.....

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: local-static-provisioner, terraform-docs, skaffold, tekton-chains, kafka-proxy, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, conftest, spark-operator, dgraph, terraform-provider-azurerm, neuvector-agent, kubescape, coredns, flux-helm-controller, tctl, pulumi-language-java, kubernetes-csi-node-driver-registrar, nvidia-device-plugin, cosign, src, keda, kubevela,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: metacontroller, flux-helm-controller, opentofu, skaffold, cosign, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller, cluster-autoscaler, kpt, mc, pulumi-kubernetes-operator, buildkitd, scorecard, metrics-server, hey, pulumi-language-yaml,....

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: amass, flannel-cni-plugin, dgraph, docker-cli, gosu, ctop, ip-masq-agent, gitlab-logger, petname, go-licenses, prometheus-stackdriver-exporter, gke-gcloud-auth-plugin, mage, cilium-envoy, nsc, sonobuoy, kind, protoc-gen-go-grpc, wait-for-port, sbom-scorecard, influx,.....

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: amass, flannel-cni-plugin, dgraph, docker-cli, gosu, ctop, ip-masq-agent, gitlab-logger, petname, go-licenses, prometheus-stackdriver-exporter, gke-gcloud-auth-plugin, mage, cilium-envoy, nsc, sonobuoy, kind, protoc-gen-go-grpc, wait-for-port, sbom-scorecard, influx,.....

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: amass, flannel-cni-plugin, dgraph, docker-cli, gosu, ctop, ip-masq-agent, gitlab-logger, petname, go-licenses, prometheus-stackdriver-exporter, gke-gcloud-auth-plugin, mage, cilium-envoy, nsc, sonobuoy, kind, protoc-gen-go-grpc, wait-for-port, sbom-scorecard, influx,.....

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, flux-helm-controller, opentofu, skaffold, containerd, cosign, src, kubevela, fuse-overlayfs-snapshotter, prometheus, kubernetes-csi-external-provisioner, prometheus-operator, aws-ebs-csi-driver, cluster-autoscaler, kpt, mc,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, flux-helm-controller, opentofu, skaffold, tekton-chains, containerd, cosign, src, kubevela, istio-operator, fuse-overlayfs-snapshotter, prometheus, kubernetes-csi-external-provisioner, prometheus-operator, aws-ebs-csi-driver, cluster-autoscaler,.....

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, terraform-docs, skaffold, tekton-chains, kafka-proxy, nri-couchbase, certificate-transparency, kubevela, src, prometheus, terragrunt, kubecolor, kpt, kubernetes, kubernetes-event-exporter, secrets-store-csi-driver-provider-azure,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: nri-f5, runc, clusterctl, docker-cli, etcd, src-fingerprint, flux-helm-controller, terraform-docs, opentofu, nri-cassandra, skaffold, gitlab-logger, nri-couchbase, src, kubevela, fuse-overlayfs-snapshotter, prometheus, ingress-nginx-controller,...

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: runc, k9s, kubescape, ctop, skaffold, wolfictl, nvidia-device-plugin, nerdctl, skopeo, cadvisor, syft, ingress-nginx-controller, datadog-agent, kubernetes, telegraf, buildkitd, newrelic-infrastructure-agent, k3s, k3d, trivy, zot, docker, kaniko, zarf, grype,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: runc, metacontroller, local-static-provisioner, clusterctl, etcd, src-fingerprint, terraform-docs, skaffold, grafana-rollout-operator, nvidia-container-toolkit, containerd, tekton-chains, tempo, cosign, certificate-transparency, skopeo, istio-operator,...

CVE-2023-44487 affecting package sriov-network-device-plugin for versions less than 3.5.1-2

CVE-2023-44487 affecting package sriov-network-device-plugin for versions less than 3.5.1-2. An upgraded version of the package is available that resolves this...

CVE-2024-5163

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security...

CVE-2024-6043

A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The...