Event Espresso 4 Decaf – Event Registration Event Ticketing Security Vulnerabilities

CVE-2022-45639 affecting package sleuthkit 4.9.0-4

CVE-2022-45639 affecting package sleuthkit 4.9.0-4. No patch is available...

CVE-1999-0901 affecting package ypserv 4.1-4

CVE-1999-0901 affecting package ypserv 4.1-4. No patch is available...

CVE-2021-28543 affecting package varnish-modules 0.16.0-4

CVE-2021-28543 affecting package varnish-modules 0.16.0-4. This CVE either no longer is or was never...

CVE-2022-25345 affecting package opus 1.3.1-4

CVE-2022-25345 affecting package opus 1.3.1-4. No patch is available...

CVE-1999-0902 affecting package ypserv 4.1-4

CVE-1999-0902 affecting package ypserv 4.1-4. No patch is available...

CVE-2017-5834 affecting package libplist 2.1.0-4

CVE-2017-5834 affecting package libplist 2.1.0-4. No patch is available...

CVE-2007-1397 affecting package fish 3.1.2-4

CVE-2007-1397 affecting package fish 3.1.2-4. This CVE either no longer is or was never...

CVE-2013-7381 affecting package libnotify 0.7.9-4

CVE-2013-7381 affecting package libnotify 0.7.9-4. This CVE either no longer is or was never...

CVE-2022-20001 affecting package fish 3.1.2-4

CVE-2022-20001 affecting package fish 3.1.2-4. This CVE either no longer is or was never...

CVE-2017-5835 affecting package libplist 2.1.0-4

CVE-2017-5835 affecting package libplist 2.1.0-4. No patch is available...

CVE-2017-5836 affecting package libplist 2.1.0-4

CVE-2017-5836 affecting package libplist 2.1.0-4. No patch is available...

CVE-2020-1472 affecting package samba for versions less than 4.12.5-4

CVE-2020-1472 affecting package samba for versions less than 4.12.5-4. A patched version of the package is...

CVE-2000-0006 affecting package strace 5.16-4

CVE-2000-0006 affecting package strace 5.16-4. This CVE either no longer is or was never...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: falcoctl, flux-kustomize-controller, cert-manager, gh, cosign, gitlab-kas, k3s, kubescape, neuvector-sigstore-interface, argo-cd, terraform, gitsign, ksops, keda, sops, flux-image-reflector-controller, nuclei, flux-notification-controller, consul,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: k3s, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, argo-cd, thanos-operator, gcsfuse, boring-registry, cilium, nuclei, dgraph, tekton-chains, kaf, pulumi, spire-server, doppler-kubernetes-operator, zot, prometheus-adapter, cri-tools, gitness,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: k3s, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, argo-cd, thanos-operator, gcsfuse, boring-registry, cilium, nuclei, dgraph, tekton-chains, kaf, pulumi, spire-server, doppler-kubernetes-operator, zot, prometheus-adapter, cri-tools, gitness,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, argo-cd, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, kube-rbac-proxy, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, fluent-operator, rook, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: falcoctl, flux-kustomize-controller, cert-manager, gh, cosign, gitlab-kas, k3s, kubescape, neuvector-sigstore-interface, argo-cd, terraform, gitsign, ksops, keda, sops, flux-image-reflector-controller, nuclei, flux-notification-controller, consul,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: k3s, tigera-operator, kubeflow-pipelines, nerdctl, helm-push, nri-mssql, argo-cd, boring-registry, dgraph, tekton-chains, kaf, src-fingerprint, pulumi, spire-server, zot, prometheus-adapter, gitness, nfs-subdir-external-provisioner, prometheus-node-exporter, falco,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, argo-cd, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, kube-rbac-proxy, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, fluent-operator, rook, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, fluent-operator, rook, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: k3s, tigera-operator, kubeflow-pipelines, nerdctl, helm-push, nri-mssql, argo-cd, boring-registry, dgraph, tekton-chains, kaf, src-fingerprint, pulumi, spire-server, zot, prometheus-adapter, gitness, nfs-subdir-external-provisioner, prometheus-node-exporter, falco,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: tfsec, wait-for-port, mods, boring-registry, cilium, tekton-chains, wazero, kaf, spire-server, shfmt, gitlab-logger, fluent-operator, rook, metacontroller, grafana, kubevela, istio-cni, haproxy-ingress, temporal, cluster-api-controller, velero-plugin-for-aws,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: k3s, bazelisk, paranoia, gh, tigera-operator, kubeflow-pipelines, nerdctl, grafana-operator, helm-push, argo-cd, flannel-cni-plugin, nri-mssql, thanos-operator, wait-for-port, esbuild, gcsfuse, nuclei, dgraph, wazero, mage, direnv, nri-haproxy, nri-nginx, kaf,...

CVE-2020-14150 affecting package bison 3.1-4

CVE-2020-14150 affecting package bison 3.1-4. No patch is available...

CVE-2022-44793 affecting package net-snmp 5.9-4

CVE-2022-44793 affecting package net-snmp 5.9-4. No patch is available...

CVE-2022-39348 affecting package python-twisted 20.3.0-4

CVE-2022-39348 affecting package python-twisted 20.3.0-4. No patch is available...

CVE-2018-14040 affecting package boost 1.66.0-4

CVE-2018-14040 affecting package boost 1.66.0-4. This CVE either no longer is or was never...

CVE-2018-25032 affecting package grpc for versions less than 1.35.0-4

CVE-2018-25032 affecting package grpc for versions less than 1.35.0-4. A patched version of the package is...

CVE-2022-3857 affecting package libpng 1.6.37-4

CVE-2022-3857 affecting package libpng 1.6.37-4. No patch is available...

CVE-2022-3515 affecting package gnupg2 2.2.20-4

CVE-2022-3515 affecting package gnupg2 2.2.20-4. This CVE either no longer is or was never...

CVE-2022-44792 affecting package net-snmp 5.9-4

CVE-2022-44792 affecting package net-snmp 5.9-4. No patch is available...

CVE-2020-0569 affecting package qt5-qtsvg 5.12.11-4

CVE-2020-0569 affecting package qt5-qtsvg 5.12.11-4. This CVE either no longer is or was never...

Exploit for Improper Preservation of Permissions in Mobyproject Moby

CVE-2021-41091 This exploit offers an in-depth look at the...

CVE-2024-6415

A vulnerability classified as problematic was found in Ingenico Estate Manager 2023. Affected by this vulnerability is an unknown functionality of the file /emgui/rest/preferences/PREF_HOME_PAGE/sponsor/3/ of the component New Widget Handler. The manipulation of the argument URL leads to cross...

CVE-2024-6415

A vulnerability classified as problematic was found in Ingenico Estate Manager 2023. Affected by this vulnerability is an unknown functionality of the file /emgui/rest/preferences/PREF_HOME_PAGE/sponsor/3/ of the component New Widget Handler. The manipulation of the argument URL leads to cross...

CVE-2024-6415 Ingenico Estate Manager New Widget cross site scripting

A vulnerability classified as problematic was found in Ingenico Estate Manager 2023. Affected by this vulnerability is an unknown functionality of the file /emgui/rest/preferences/PREF_HOME_PAGE/sponsor/3/ of the component New Widget Handler. The manipulation of the argument URL leads to cross...

CVE-2024-6265

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uwp_sort_by’ parameter in all versions up to, and including, 1.2.10 due to insufficient escaping on the user supplied....

CVE-2024-6265

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uwp_sort_by’ parameter in all versions up to, and including, 1.2.10 due to insufficient escaping on the user supplied....