Jenkins AbsInt A³ Plugin Security Vulnerabilities

CVE-2024-35658 WordPress Checkout Field Editor for WooCommerce (Pro) plugin <= 3.6.2 - Unauthenticated Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeHigh Checkout Field Editor for WooCommerce (Pro) allows Functionality Misuse, File Manipulation.This issue affects Checkout Field Editor for WooCommerce (Pro): from n/a through...

CVE-2024-35650 WordPress MelaPress Login Security plugin <= 1.3.0 - Remote File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Melapress MelaPress Login Security allows PHP Remote File Inclusion.This issue affects MelaPress Login Security: from n/a through...

CVE-2024-34800 WordPress Crafthemes Demo Import plugin <= 3.3 - Arbitrary Plugin Installation vulnerability

Missing Authentication for Critical Function vulnerability in Aruphash Crafthemes Demo Import allows Functionality Misuse.This issue affects Crafthemes Demo Import: from n/a through...

CVE-2024-34762 Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Local File Inclusion vulnerability

Vulnerability discovered by executing a planned security audit. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows PHP Local File Inclusion.This issue affects Advanced Custom Fields PRO: from n/a before...

CVE-2024-34761 Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Arbitrary Function Execution vulnerability

Vulnerability discovered by executing a planned security audit. Improper Control of Generation of Code ('Code Injection') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows Code Injection.This issue affects Advanced Custom Fields PRO: from n/a before...

trailmasters.com Cross Site Scripting vulnerability OBB-3934467

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-4403

A Cross-Site Request Forgery (CSRF) vulnerability exists in the restart_program function of the parisneo/lollms-webui v9.6. This vulnerability allows attackers to trick users into performing unintended actions, such as resetting the program without their knowledge, by sending specially crafted...

CVE-2024-36528

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and...

CVE-2024-36406

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, unchecked input allows for open re-direct. Versions 7.14.4 and 8.6.1 contain a fix for this...

CVE-2024-36972

In the Linux kernel, the following vulnerability has been resolved: af_unix: Update unix_sk(sk)-&gt;oob_skb under sk_receive_queue lock. Billy Jheng Bing-Jhong reported a race between __unix_gc() and queue_oob(). __unix_gc() tries to garbage-collect close()d inflight sockets, and then if the socket...

CVE-2024-36972

In the Linux kernel, the following vulnerability has been resolved: af_unix: Update unix_sk(sk)-&gt;oob_skb under sk_receive_queue lock. Billy Jheng Bing-Jhong reported a race between __unix_gc() and queue_oob(). __unix_gc() tries to garbage-collect close()d inflight sockets, and then if the socket...

CVE-2024-4403

A Cross-Site Request Forgery (CSRF) vulnerability exists in the restart_program function of the parisneo/lollms-webui v9.6. This vulnerability allows attackers to trick users into performing unintended actions, such as resetting the program without their knowledge, by sending specially crafted...

CVE-2024-36528

nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /admin/extensions/download.php and...

CVE-2024-36406

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. In versions prior to 7.14.4 and 8.6.1, unchecked input allows for open re-direct. Versions 7.14.4 and 8.6.1 contain a fix for this...

CVE-2022-45168

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /login/backup_code endpoint and the /api/v1/vdeskintegration/createbackupcodes endpoint, because the application allows a user to generate or regenerate the backup codes...

CVE-2022-45168

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /login/backup_code endpoint and the /api/v1/vdeskintegration/createbackupcodes endpoint, because the application allows a user to generate or regenerate the backup codes...

ww3.arb.ca.gov Cross Site Scripting vulnerability OBB-3934466

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: buildkitd, kyverno, traefik, flux-helm-controller, minio, cosign, kubernetes-csi-external-attacher, cortex, scorecard, memcached-exporter, oauth2-proxy, falco, istio-envoy, ip-masq-agent, terraform-provider-azurerm, grype, kubernetes-csi-livenessprobe,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: buildkitd, trivy, zarf, k9s, nerdctl, wolfictl, ctop, syft, cadvisor, ingress-nginx-controller, telegraf, zot, grype, skaffold, k3s, skopeo, kubescape, kaniko, docker, runc, k3d, kots, newrelic-infrastructure-agent, datadog-agent, nvidia-device-plugin,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, nats-server, dockerize, flux-helm-controller, php-fpm_exporter, nri-elasticsearch, timoni, minio, dask-gateway, secrets-store-csi-driver-provider-aws, kubernetes-csi-external-attacher, prometheus-node-exporter, configmap-reload,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, kyverno, traefik, trivy, tkn, php-fpm_exporter, flux-helm-controller, terragrunt, minio, secrets-store-csi-driver-provider-aws, timoni, cosign, kubernetes-csi-external-attacher, prometheus-node-exporter, configmap-reload,...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: k3d, falco, restic, gke-gcloud-auth-plugin, grpcurl, hey, dynamic-localpv-provisioner, wireguard-go,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, kyverno, nats-server, traefik, trivy, dockerize, php-fpm_exporter, timoni, secrets-store-csi-driver-provider-aws, dask-gateway, flyte, cosign, kubernetes-csi-external-attacher, configmap-reload, kubernetes-csi-external-provisioner, regclient,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, kyverno, nats-server, traefik, trivy, dockerize, php-fpm_exporter, timoni, secrets-store-csi-driver-provider-aws, dask-gateway, flyte, cosign, kubernetes-csi-external-attacher, configmap-reload, kubernetes-csi-external-provisioner, regclient,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: kyverno, flux-helm-controller, octo-sts, terragrunt, kubernetes-csi-external-attacher, kubernetes-csi-external-provisioner, wolfictl, memcached-exporter, oauth2-proxy, kubernetes-dashboard-metrics-scraper, aws-flb-kinesis, nri-postgresql, flux-kustomize-controller,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: cass-operator, goreleaser, metrics-server, aws-flb-firehose, docker-credential-ecr-login, gosu, docker-cli, helm-push, configmap-reload, cortex, scorecard, petname, falco, oras, ctop, cni-plugins, go-bindata, grpcurl, aws-flb-cloudwatch, hey, aws-flb-kinesis,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: buildkitd, kyverno, tkn, flux-helm-controller, timoni, minio, cosign, kubernetes-csi-external-attacher, prometheus-node-exporter, kubernetes-csi-external-provisioner, memcached-exporter, oauth2-proxy, kubernetes-dashboard-metrics-scraper, kubernetes-csi-livenessprobe,....

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, kyverno, traefik, trivy, tkn, php-fpm_exporter, flux-helm-controller, terragrunt, minio, secrets-store-csi-driver-provider-aws, timoni, cosign, kubernetes-csi-external-attacher, prometheus-node-exporter, configmap-reload,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, nats-server, dockerize, flux-helm-controller, php-fpm_exporter, nri-elasticsearch, timoni, minio, dask-gateway, secrets-store-csi-driver-provider-aws, kubernetes-csi-external-attacher, prometheus-node-exporter, configmap-reload,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, nats-server, dockerize, flux-helm-controller, php-fpm_exporter, nri-elasticsearch, timoni, minio, dask-gateway, secrets-store-csi-driver-provider-aws, kubernetes-csi-external-attacher, prometheus-node-exporter, configmap-reload,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: kyverno, flux-helm-controller, terragrunt, kubernetes-csi-external-attacher, kubernetes-csi-external-provisioner, memcached-exporter, oauth2-proxy, falco, kubernetes-dashboard-metrics-scraper, aws-flb-kinesis, nri-postgresql, flux-kustomize-controller,...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: k3d, falco, restic, gke-gcloud-auth-plugin, grpcurl, hey, dynamic-localpv-provisioner, wireguard-go,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: kyverno, flux-helm-controller, terragrunt, kubernetes-csi-external-attacher, kubernetes-csi-external-provisioner, memcached-exporter, oauth2-proxy, falco, kubernetes-dashboard-metrics-scraper, aws-flb-kinesis, nri-postgresql, flux-kustomize-controller,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, kyverno, nats-server, traefik, trivy, dockerize, php-fpm_exporter, timoni, secrets-store-csi-driver-provider-aws, dask-gateway, flyte, cosign, kubernetes-csi-external-attacher, configmap-reload, kubernetes-csi-external-provisioner, regclient,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: kyverno, flux-helm-controller, octo-sts, terragrunt, kubernetes-csi-external-attacher, kubernetes-csi-external-provisioner, wolfictl, memcached-exporter, oauth2-proxy, kubernetes-dashboard-metrics-scraper, aws-flb-kinesis, nri-postgresql, flux-kustomize-controller,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: buildkitd, kyverno, tkn, flux-helm-controller, timoni, minio, cosign, kubernetes-csi-external-attacher, prometheus-node-exporter, kubernetes-csi-external-provisioner, memcached-exporter, oauth2-proxy, falco, kubernetes-dashboard-metrics-scraper,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, nats-server, dockerize, flux-helm-controller, php-fpm_exporter, nri-elasticsearch, timoni, minio, dask-gateway, secrets-store-csi-driver-provider-aws, kubernetes-csi-external-attacher, prometheus-node-exporter, configmap-reload,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, nats-server, dockerize, flux-helm-controller, php-fpm_exporter, nri-elasticsearch, timoni, minio, dask-gateway, secrets-store-csi-driver-provider-aws, kubernetes-csi-external-attacher, prometheus-node-exporter, configmap-reload,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, nats-server, dockerize, flux-helm-controller, php-fpm_exporter, nri-elasticsearch, timoni, minio, dask-gateway, secrets-store-csi-driver-provider-aws, kubernetes-csi-external-attacher, prometheus-node-exporter, configmap-reload,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: kyverno, flux-helm-controller, octo-sts, terragrunt, kubernetes-csi-external-attacher, kubernetes-csi-external-provisioner, wolfictl, memcached-exporter, oauth2-proxy, kubernetes-dashboard-metrics-scraper, aws-flb-kinesis, nri-postgresql, flux-kustomize-controller,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: cass-operator, goreleaser, metrics-server, aws-flb-firehose, docker-credential-ecr-login, gosu, docker-cli, helm-push, configmap-reload, cortex, scorecard, petname, falco, oras, ctop, cni-plugins, go-bindata, grpcurl, aws-flb-cloudwatch, hey, aws-flb-kinesis,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: cass-operator, goreleaser, metrics-server, aws-flb-firehose, docker-credential-ecr-login, gosu, docker-cli, helm-push, configmap-reload, cortex, scorecard, petname, falco, oras, ctop, cni-plugins, go-bindata, grpcurl, aws-flb-cloudwatch, hey, aws-flb-kinesis,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: buildkitd, kyverno, tkn, flux-helm-controller, timoni, minio, cosign, kubernetes-csi-external-attacher, prometheus-node-exporter, kubernetes-csi-external-provisioner, memcached-exporter, oauth2-proxy, falco, kubernetes-dashboard-metrics-scraper,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: buildkitd, kyverno, tkn, flux-helm-controller, timoni, minio, cosign, kubernetes-csi-external-attacher, prometheus-node-exporter, kubernetes-csi-external-provisioner, memcached-exporter, oauth2-proxy, kubernetes-dashboard-metrics-scraper, kubernetes-csi-livenessprobe,....

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: buildkitd, goreleaser, metrics-server, flux-helm-controller, minio, src, spark-operator, cosign, kubernetes-csi-external-attacher, terraform, kubevela, argo-cd, terraform-provider-aws, external-dns, cortex, kubernetes-csi-node-driver-registrar, scorecard,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: buildkitd, kyverno, traefik, flux-helm-controller, minio, cosign, kubernetes-csi-external-attacher, cortex, scorecard, memcached-exporter, oauth2-proxy, falco, istio-envoy, ip-masq-agent, terraform-provider-azurerm, grype, kubernetes-csi-livenessprobe,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, nats-server, dockerize, flux-helm-controller, php-fpm_exporter, nri-elasticsearch, timoni, minio, dask-gateway, secrets-store-csi-driver-provider-aws, kubernetes-csi-external-attacher, prometheus-node-exporter, configmap-reload,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, nats-server, dockerize, flux-helm-controller, php-fpm_exporter, nri-elasticsearch, timoni, minio, dask-gateway, secrets-store-csi-driver-provider-aws, kubernetes-csi-external-attacher, prometheus-node-exporter, configmap-reload,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: buildkitd, eksctl, nats-server, dockerize, flux-helm-controller, php-fpm_exporter, nri-elasticsearch, timoni, minio, dask-gateway, secrets-store-csi-driver-provider-aws, kubernetes-csi-external-attacher, prometheus-node-exporter, configmap-reload,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: cass-operator, goreleaser, metrics-server, aws-flb-firehose, docker-credential-ecr-login, gosu, docker-cli, helm-push, configmap-reload, cortex, scorecard, petname, falco, oras, ctop, cni-plugins, go-bindata, grpcurl, aws-flb-cloudwatch, hey, aws-flb-kinesis,...