FluentSMTP – WordPress Mail SMTP, SES, SendGrid, Mailgun And Any SMTP Plugin Security Vulnerabilities

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS RM3/CRS dispenser firmware (all versions up to and including 41128 1002 RM3_CRS.BTR + 170329 2332 RM3_CRS.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5 CMDv5 dispenser firmware (all versions up to and including 141128 1002 CD5_ATM.BTR + 170329 2332 CD5_ATM.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

mail.hritacademy.edu.np Cross Site Scripting vulnerability OBB-3932460

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

admasuniversity.edu.et Cross Site Scripting vulnerability OBB-3932459

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

uac.pt Cross Site Scripting vulnerability OBB-3932458

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

dso-maps.de Cross Site Scripting vulnerability OBB-3932457

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-4344 Shield Security – Smart Bot Blocking & Intrusion Prevention Security <= 19.1.13 - Cross-Site Request Forgery

The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.1.13. This is due to missing or incorrect nonce validation on the exec function. This makes it possible for...

trinamics.co.uk Cross Site Scripting vulnerability OBB-3932455

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

manchesterneurophysio.co.uk Cross Site Scripting vulnerability OBB-3932453

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nvidia-device-plugin, nodetaint, secrets-store-csi-driver, gatekeeper, hugo, scorecard, envoy-ratelimit, ip-masq-agent, atlantis, keda, opentofu, sigstore-scaffolding, flux-helm-controller, gitlab-shell, nginx-stable, haproxy-ingress,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: docker, kubeflow-katib, nvidia-device-plugin, flux, temporal-ui-server, kube-bench, nodetaint, secrets-store-csi-driver-provider-aws, secrets-store-csi-driver, gatekeeper, hugo, crossplane-provider-gcp, k3d, scorecard, envoy-ratelimit, ip-masq-agent, atlantis, keda,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, cni-plugins, kubeflow-katib, nvidia-device-plugin, flux, paranoia, nri-kafka, temporal-ui-server, docker-credential-ecr-login, kube-bench, regclient, nri-rabbitmq, nodetaint, secrets-store-csi-driver-provider-aws, gatekeeper, oras,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: docker, k9s, kubernetes, nvidia-device-plugin, datadog-agent, newrelic-infrastructure-agent, kaniko, telegraf, buildkitd, ingress-nginx-controller, k3d, grype, wolfictl, syft, nerdctl, zot, kubescape, runc, ctop, kots, k3s, cadvisor, skaffold, trivy, skopeo,...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, restic, k3d, dynamic-localpv-provisioner, falco, grpcurl, go, wireguard-go,...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, restic, k3d, dynamic-localpv-provisioner, falco, grpcurl, go, wireguard-go,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, flyte, node-feature-discovery, croc, overmind, nvidia-device-plugin, paranoia, docker-credential-ecr-login, kube-bench, regclient, secrets-store-csi-driver-provider-aws, secrets-store-csi-driver, oras, spegel, scorecard,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, flyte, node-feature-discovery, croc, overmind, nvidia-device-plugin, paranoia, docker-credential-ecr-login, kube-bench, regclient, secrets-store-csi-driver-provider-aws, secrets-store-csi-driver, oras, spegel, scorecard,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: gobuster, go-licenses, cni-plugins, vertical-pod-autoscaler, render-template, wait-for-port, aws-flb-firehose, local-path-provisioner, helm-push, petname, amass, docker-credential-ecr-login, prometheus-bind-exporter, oras, gke-gcloud-auth-plugin, mage, scorecard, k3d,....

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nvidia-device-plugin, flux, nodetaint, secrets-store-csi-driver, gatekeeper, hugo, k3d, opentofu, keda, sigstore-scaffolding, crossplane-provider-azure, chartmuseum, flux-helm-controller, haproxy-ingress, kube-fluentd-operator, memcached-exporter,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, cni-plugins, kubeflow-katib, nvidia-device-plugin, flux, paranoia, nri-kafka, temporal-ui-server, docker-credential-ecr-login, kube-bench, regclient, nri-rabbitmq, nodetaint, secrets-store-csi-driver-provider-aws, gatekeeper, oras,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, cni-plugins, kubeflow-katib, nvidia-device-plugin, flux, paranoia, nri-kafka, temporal-ui-server, docker-credential-ecr-login, kube-bench, regclient, nri-rabbitmq, nodetaint, secrets-store-csi-driver-provider-aws, gatekeeper, oras,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: vt-cli, node-feature-discovery, cni-plugins, paranoia, gatekeeper, scorecard, crossplane-provider-gcp, k3d, keda, docker-credential-gcr, velero-plugin-for-csi, gitlab-shell, controller-gen, rekor, gobump, sonobuoy, temporal-server, gosu, eksctl, delve,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: docker, kubeflow-katib, nvidia-device-plugin, flux, temporal-ui-server, kube-bench, nodetaint, secrets-store-csi-driver-provider-aws, secrets-store-csi-driver, gatekeeper, hugo, crossplane-provider-gcp, k3d, scorecard, envoy-ratelimit, ip-masq-agent, atlantis, keda,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: vt-cli, node-feature-discovery, cni-plugins, paranoia, gatekeeper, scorecard, crossplane-provider-gcp, k3d, keda, docker-credential-gcr, velero-plugin-for-csi, gitlab-shell, controller-gen, rekor, gobump, sonobuoy, temporal-server, gosu, eksctl, delve,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, flyte, node-feature-discovery, croc, overmind, nvidia-device-plugin, paranoia, docker-credential-ecr-login, kube-bench, regclient, secrets-store-csi-driver-provider-aws, secrets-store-csi-driver, oras, spegel, scorecard,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nvidia-device-plugin, flux, nodetaint, secrets-store-csi-driver, gatekeeper, hugo, k3d, atlantis, keda, opentofu, go, sigstore-scaffolding, crossplane-provider-azure, caddy, chartmuseum, flux-helm-controller, gitlab-shell, haproxy-ingress,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, cni-plugins, kubeflow-katib, nvidia-device-plugin, flux, paranoia, nri-kafka, temporal-ui-server, docker-credential-ecr-login, kube-bench, regclient, nri-rabbitmq, nodetaint, secrets-store-csi-driver-provider-aws, gatekeeper, oras,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, cni-plugins, kubeflow-katib, nvidia-device-plugin, flux, paranoia, nri-kafka, temporal-ui-server, docker-credential-ecr-login, kube-bench, regclient, nri-rabbitmq, nodetaint, secrets-store-csi-driver-provider-aws, gatekeeper, oras,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, cni-plugins, kubeflow-katib, nvidia-device-plugin, flux, paranoia, nri-kafka, temporal-ui-server, docker-credential-ecr-login, kube-bench, regclient, nri-rabbitmq, nodetaint, secrets-store-csi-driver-provider-aws, gatekeeper, oras,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: gobuster, go-licenses, cni-plugins, vertical-pod-autoscaler, render-template, wait-for-port, aws-flb-firehose, local-path-provisioner, helm-push, petname, amass, docker-credential-ecr-login, prometheus-bind-exporter, oras, gke-gcloud-auth-plugin, mage, scorecard, k3d,....

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nvidia-device-plugin, flux, nodetaint, secrets-store-csi-driver, gatekeeper, hugo, k3d, opentofu, keda, sigstore-scaffolding, crossplane-provider-azure, chartmuseum, flux-helm-controller, haproxy-ingress, kube-fluentd-operator, memcached-exporter,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nvidia-device-plugin, flux, nodetaint, secrets-store-csi-driver, gatekeeper, hugo, k3d, atlantis, keda, opentofu, go, sigstore-scaffolding, crossplane-provider-azure, caddy, chartmuseum, flux-helm-controller, gitlab-shell, haproxy-ingress,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: flux-notification-controller, minio, prometheus-adapter, kubeflow-katib, terraform-provider-azurerm, nvidia-device-plugin, pulumi-language-yaml, pulumi-kubernetes-operator, cert-manager, telegraf, node-problem-detector, mc, secrets-store-csi-driver, buildkitd,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, nvidia-device-plugin, nodetaint, secrets-store-csi-driver, gatekeeper, hugo, scorecard, envoy-ratelimit, ip-masq-agent, atlantis, keda, opentofu, sigstore-scaffolding, flux-helm-controller, gitlab-shell, nginx-stable, haproxy-ingress,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, cni-plugins, kubeflow-katib, nvidia-device-plugin, flux, paranoia, nri-kafka, temporal-ui-server, docker-credential-ecr-login, kube-bench, regclient, nri-rabbitmq, nodetaint, secrets-store-csi-driver-provider-aws, gatekeeper, oras,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, cni-plugins, kubeflow-katib, nvidia-device-plugin, flux, paranoia, nri-kafka, temporal-ui-server, docker-credential-ecr-login, kube-bench, regclient, nri-rabbitmq, nodetaint, secrets-store-csi-driver-provider-aws, gatekeeper, oras,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: gobuster, go-licenses, cni-plugins, vertical-pod-autoscaler, render-template, wait-for-port, aws-flb-firehose, local-path-provisioner, helm-push, petname, amass, docker-credential-ecr-login, prometheus-bind-exporter, oras, gke-gcloud-auth-plugin, mage, scorecard, k3d,....

CVE-2023-44487 affecting package sriov-network-device-plugin for versions less than 3.5.1-2

CVE-2023-44487 affecting package sriov-network-device-plugin for versions less than 3.5.1-2. A patched version of the package is...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: gobuster, go-licenses, cni-plugins, vertical-pod-autoscaler, render-template, wait-for-port, aws-flb-firehose, local-path-provisioner, helm-push, petname, amass, docker-credential-ecr-login, prometheus-bind-exporter, oras, gke-gcloud-auth-plugin, mage, scorecard, k3d,....

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, cni-plugins, kubeflow-katib, nvidia-device-plugin, flux, paranoia, nri-kafka, temporal-ui-server, docker-credential-ecr-login, kube-bench, regclient, nri-rabbitmq, nodetaint, secrets-store-csi-driver-provider-aws, gatekeeper, oras,...

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: docker, k9s, kubernetes, nvidia-device-plugin, datadog-agent, newrelic-infrastructure-agent, kaniko, telegraf, buildkitd, ingress-nginx-controller, k3d, grype, wolfictl, syft, nerdctl, zot, kubescape, runc, ctop, kots, k3s, cadvisor, skaffold, trivy, skopeo,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, flyte, node-feature-discovery, croc, overmind, nvidia-device-plugin, paranoia, docker-credential-ecr-login, kube-bench, regclient, secrets-store-csi-driver-provider-aws, secrets-store-csi-driver, oras, spegel, scorecard,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: dask-gateway, vt-cli, go-licenses, cni-plugins, kubeflow-katib, nvidia-device-plugin, flux, paranoia, nri-kafka, temporal-ui-server, docker-credential-ecr-login, kube-bench, regclient, nri-rabbitmq, nodetaint, secrets-store-csi-driver-provider-aws, gatekeeper, oras,...

smarttravel.cz Cross Site Scripting vulnerability OBB-3932450

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

smartorder.dreve-america.com Cross Site Scripting vulnerability OBB-3932449

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

bakerfurniture.com Cross Site Scripting vulnerability OBB-3932448

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-35645 WordPress Random Banner plugin <= 4.2.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in vinoth06 Random Banner allows Stored XSS.This issue affects Random Banner: from n/a through...

CVE-2024-35646 WordPress Smartarget Message Bar plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Smartarget Smartarget Message Bar allows Stored XSS.This issue affects Smartarget Message Bar: from n/a through...

CVE-2024-35647 WordPress Global Notification Bar plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Global Notification Bar allows Stored XSS.This issue affects Global Notification Bar: from n/a through...

Ticketmaster confirms customer data breach

Live Nation Entertainment has confirmed what everyone has been speculating on for the last week: Ticketmaster has suffered a data breach. In a filing with the SEC, Live Nation said on May 20th it identified "unauthorized activity within a third-party cloud database environment containing Company...