Junos OS Where The BGP Add-path Feature Is Enabled With 'send' Option Or With Both 'send' And 'receive' Options Security Vulnerabilities

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS RM3/CRS dispenser firmware (all versions up to and including 41128 1002 RM3_CRS.BTR + 170329 2332 RM3_CRS.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5 CMDv5 dispenser firmware (all versions up to and including 141128 1002 CD5_ATM.BTR + 170329 2332 CD5_ATM.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

smoothways.net Cross Site Scripting vulnerability OBB-3932443

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

yalebooks.co.uk Cross Site Scripting vulnerability OBB-3932442

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-4148 Redos (Regular Expression Denial of Service) in lunary-ai/lunary

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the lunary-ai/lunary application, version 1.2.10. An attacker can exploit this vulnerability by maliciously manipulating regular expressions, which can significantly impact the response time of the application and potentially...

forum-startup-chemie.de Cross Site Scripting vulnerability OBB-3932439

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

chemicalparks.com Cross Site Scripting vulnerability OBB-3932438

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

dechemax.de Cross Site Scripting vulnerability OBB-3932436

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

GHSA-X32M-MVFJ-52XV vulnerabilities

Vulnerabilities for packages:...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, cluster-autoscaler, argo-cd,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, kubernetes-csi-driver-hostpath, kubernetes, node-feature-discovery, ip-masq-agent, cluster-autoscaler, nodetaint, spark-operator, aws-ebs-csi-driver, kubernetes-dns-node-cache,...

GHSA-797F-63WG-8CHV vulnerabilities

Vulnerabilities for packages: aws-cli-v2,...

CVE-2024-25710 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, trino, dependency-track, gradle, opensearch, jenkins,...

GHSA-CF7P-GM2M-833M vulnerabilities

Vulnerabilities for packages:...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: flux-source-controller, melange, neuvector-sigstore-interface, zot, falco, policy-controller, tekton-chains, vexctl, apko, aactl, kubescape, slsa-verifier, tkn, zarf, goreleaser, spire-server, gitsign, ko, wolfictl, falcoctl,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: metrics-server, sigstore-scaffolding, gitlab-runner, opentofu, stakater-reloader, gitness, aws-efs-csi-driver, kubernetes-csi-node-driver-registrar, aactl, cluster-autoscaler, dotnet, secrets-store-csi-driver-provider-gcp, gobuster, prometheus-bind-exporter,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: flux-source-controller, sops, terragrunt, oauth2-proxy, dex, fulcio, kyverno, cert-manager, cilium-envoy, falco, tekton-chains, traefik, vault, vexctl, cloudflared, istio-pilot-discovery, aactl, kubescape, argo-workflows, tekton-pipelines, slsa-verifier,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: cert-manager, falco, tekton-chains, bom, aactl, kubescape, tekton-pipelines, slsa-verifier, paranoia, loki, prometheus, up, chartmuseum, goreleaser, k3d, k3s, kpt, ctop, skaffold,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: flannel, metrics-server, sigstore-scaffolding, gitlab-runner, temporal-ui-server, configmap-reload, influx, opentofu, policy-controller, supercronic, tekton-chains, stakater-reloader, hugo-extended, hubble, prometheus-alertmanager, vault, gitness, temporal,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: vt-cli, metrics-server, cni-plugins, gitlab-runner, temporal-ui-server, configmap-reload, influx, opentofu, supercronic, mockery, yq, nri-rabbitmq, mongo-tools, stakater-reloader, prometheus-alertmanager, gitness, temporal, aws-efs-csi-driver,...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: telegraf, trillian, src, k3s, spicedb, temporal-server, kine, ferretdb, amass, caddy, keda, step-ca, kube-bench, kots, vault,...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: dagger, docker-compose, kaniko, prometheus, melange, harbor-scanner-trivy, syft, policy-controller, cri-tools, grype, docker, helm-push, k3d, wolfictl, buf, tekton-pipelines,...

GHSA-VR64-R9QJ-H27F vulnerabilities

Vulnerabilities for packages:...

CVE-2024-29131 vulnerabilities

Vulnerabilities for packages: neo4j, cassandra-reaper,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: flux-source-controller, flux-helm-controller, eksctl, helm-operator, up, zarf, chartmuseum, zot, cert-manager, istio-operator, k8sgpt, kubescape, cilium-cli, helm-push, k9s, kots,...

CVE-2023-43618 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-43620 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-43621 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-1597 vulnerabilities

Vulnerabilities for packages: dependency-track, keycloak,...

GHSA-GVPG-VGMX-XG6W vulnerabilities

Vulnerabilities for packages:...

CVE-2020-15136 vulnerabilities

Vulnerabilities for packages:...

GHSA-J86V-2VJR-FG8F vulnerabilities

Vulnerabilities for packages:...

GHSA-PM3M-32R3-7MFH vulnerabilities

Vulnerabilities for packages:...

GHSA-WR2V-9RPQ-C35Q vulnerabilities

Vulnerabilities for packages:...

GHSA-77RM-9X9H-XJ3G vulnerabilities

Vulnerabilities for packages:...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, restic, grpcurl, wireguard-go, go, falco, k3d, gke-gcloud-auth-plugin,...

CVE-2023-24540 vulnerabilities

Vulnerabilities for packages: go, go-fips,...

GHSA-7QHM-5MXQ-X7VP vulnerabilities

Vulnerabilities for packages: go, go-fips,...

GHSA-888H-RM2R-VRC7 vulnerabilities

Vulnerabilities for packages: policy-controller, kind,...

GHSA-89MW-W342-MQRR vulnerabilities

Vulnerabilities for packages:...

GHSA-9F7G-GQWH-JPF5 vulnerabilities

Vulnerabilities for packages: go, go-fips,...

GHSA-F8F7-69V5-W4VX vulnerabilities

Vulnerabilities for packages: go, kind,...

GHSA-FP86-2355-V99R vulnerabilities

Vulnerabilities for packages: go, go-fips,...

GHSA-V4M2-X4RP-HV22 vulnerabilities

Vulnerabilities for packages: go, go-fips,...

GHSA-VQ7J-GX56-RXJH vulnerabilities

Vulnerabilities for packages: metrics-server, kind,...

CVE-2023-46407 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-4323 vulnerabilities

Vulnerabilities for packages:...

GHSA-798R-FXXX-HVXJ vulnerabilities

Vulnerabilities for packages:...

GHSA-V34C-9RWG-QPF6 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-23946 vulnerabilities

Vulnerabilities for packages:...