Lucene search

K

LearnPress – WordPress LMS Plugin Security Vulnerabilities

wolfi
wolfi

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: nerdctl, docker, ingress-nginx-controller, runc, grype, kots, newrelic-infrastructure-agent, telegraf, k9s, skaffold, nvidia-device-plugin, buildkitd, kubernetes, kubescape, cadvisor, ctop, zarf, skopeo, zot, k3s, wolfictl, syft, k3d, trivy, datadog-agent,...

8.6CVSS

9.2AI Score

0.051EPSS

2024-06-29 03:08 AM
296
wolfi
wolfi

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: cilium-envoy, nodetaint, gomplate, aws-efs-csi-driver, tctl, node-problem-detector, newrelic-infrastructure-agent, src, telegraf, skaffold, envoy-ratelimit, prometheus-adapter, buildkitd, oauth2-proxy, kpt, grpcurl, pulumi-language-java, pulumi-language-yaml, pulumi,.....

7.5CVSS

9AI Score

0.732EPSS

2024-06-29 03:08 AM
625
wolfi
wolfi

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, trust-manager, nodetaint, buf, gomplate, prometheus-operator, helm-operator, prometheus-postgres-exporter, grpc-health-probe, vexctl, kubernetes-dns-node-cache, grafana-agent-operator, aws-efs-csi-driver, containerd, cilium, tctl,...

7.5AI Score

2024-06-29 03:08 AM
184
wolfi
wolfi

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

7.8AI Score

0.0004EPSS

2024-06-29 03:08 AM
193
wolfi
wolfi

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, hey, restic, dynamic-localpv-provisioner, falco, grpcurl, wireguard-go, go,...

7.5AI Score

2024-06-29 03:08 AM
148
wolfi
wolfi

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: cni-plugins, gomplate, nats-server, vexctl, docker-cli, containerd, nri-elasticsearch, nri-jmx, xcaddy, yam, newrelic-infrastructure-agent, spire-server, ipfs, nri-nginx, telegraf, bincapz, flannel-cni-plugin, cadvisor, pulumi, gobump, sbom-scorecard, zot, ytt,...

6.8AI Score

0.0004EPSS

2024-06-29 03:08 AM
58
wolfi
wolfi

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, trust-manager, docker-credential-acr-env, gomplate, stern, nats-server, delve, regclient, helm-operator, go-fips, kubernetes-dns-node-cache, dask-gateway, grafana-agent-operator, step, aws-efs-csi-driver, spegel, containerd, mage,...

6.5AI Score

0.0004EPSS

2024-06-29 03:08 AM
22
wolfi
wolfi

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: local-static-provisioner, trust-manager, docker-credential-acr-env, gomplate, stern, nats-server, delve, regclient, helm-operator, go-fips, kubernetes-dns-node-cache, dask-gateway, grafana-agent-operator, step, aws-efs-csi-driver, spegel, containerd, mage,...

7.5AI Score

2024-06-29 03:08 AM
16
wolfi
wolfi

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: cni-plugins, local-static-provisioner, gomplate, nats-server, vexctl, nri-elasticsearch, nri-jmx, xcaddy, yam, newrelic-infrastructure-agent, spire-server, ipfs, nri-nginx, telegraf, flannel-cni-plugin, cadvisor, gobump, sbom-scorecard, ytt,...

5.5CVSS

6.1AI Score

0.0004EPSS

2024-06-29 03:08 AM
26
wolfi
wolfi

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: cni-plugins, cilium-envoy, kubernetes-dashboard-metrics-scraper, go-bindata, prometheus-stackdriver-exporter, falco, wait-for-port, slsa-verifier, render-template, configmap-reload, docker-cli, scorecard, kind, ip-masq-agent, mage, aws-flb-kinesis,...

7.5CVSS

7.9AI Score

0.001EPSS

2024-06-29 03:08 AM
59
wolfi
wolfi

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: trust-manager, nodetaint, gomplate, prometheus-operator, prometheus-postgres-exporter, aws-efs-csi-driver, containerd, tctl, node-problem-detector, newrelic-infrastructure-agent, src, telegraf, tkn, skaffold, prometheus-adapter, buildkitd, apko, oauth2-proxy, kpt,...

6.1CVSS

7.3AI Score

0.001EPSS

2024-06-29 03:08 AM
94
wolfi
wolfi

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, trust-manager, nodetaint, buf, gomplate, prometheus-operator, helm-operator, prometheus-postgres-exporter, grpc-health-probe, vexctl, kubernetes-dns-node-cache, grafana-agent-operator, aws-efs-csi-driver, containerd, cilium, tctl,...

6.6AI Score

0.0004EPSS

2024-06-29 03:08 AM
30
wolfi
wolfi

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

7.8AI Score

0.0004EPSS

2024-06-29 03:08 AM
42
wolfi
wolfi

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

7.5AI Score

2024-06-29 03:08 AM
28
wolfi
wolfi

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: prometheus, guac, grafana, rekor, teleport, up, chezmoi, cosign, prometheus-operator, policy-controller, opentelemetry-collector-contrib, grafana-agent-operator, step, sigstore-scaffolding, k8sgpt, tekton-pipelines, filebeat, flyte, hugo,...

5.5CVSS

6AI Score

0.0004EPSS

2024-06-29 03:08 AM
18
wolfi
wolfi

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: prometheus, guac, grafana, rekor, teleport, up, chezmoi, cosign, prometheus-operator, policy-controller, opentelemetry-collector-contrib, grafana-agent-operator, step, sigstore-scaffolding, k8sgpt, tekton-pipelines, filebeat, flyte, hugo,...

7.5AI Score

2024-06-29 03:08 AM
7
wolfi
wolfi

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: gke-gcloud-auth-plugin, hey, restic, dynamic-localpv-provisioner, falco, grpcurl, wireguard-go, go,...

7.5CVSS

8.4AI Score

0.024EPSS

2024-06-29 03:08 AM
25
wolfi
wolfi

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: cni-plugins, gomplate, nats-server, vexctl, docker-cli, containerd, nri-elasticsearch, nri-jmx, xcaddy, yam, newrelic-infrastructure-agent, spire-server, ipfs, nri-nginx, telegraf, bincapz, flannel-cni-plugin, cadvisor, pulumi, gobump, sbom-scorecard, zot, ytt,...

7.5AI Score

2024-06-29 03:08 AM
20
wolfi
wolfi

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: local-static-provisioner, trust-manager, docker-credential-acr-env, gomplate, stern, nats-server, delve, regclient, helm-operator, kubernetes-dns-node-cache, dask-gateway, grafana-agent-operator, step, aws-efs-csi-driver, spegel, containerd, mage,...

7.5AI Score

2024-06-29 03:08 AM
21
wolfi
wolfi

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: cni-plugins, local-static-provisioner, gomplate, nats-server, vexctl, nri-elasticsearch, nri-jmx, xcaddy, yam, newrelic-infrastructure-agent, spire-server, ipfs, nri-nginx, telegraf, flannel-cni-plugin, cadvisor, gobump, sbom-scorecard, ytt,...

9.8CVSS

9.8AI Score

0.001EPSS

2024-06-29 03:08 AM
52
wolfi
wolfi

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: trust-manager, nodetaint, gomplate, prometheus-operator, prometheus-postgres-exporter, kubernetes-dns-node-cache, aws-efs-csi-driver, containerd, tctl, node-problem-detector, newrelic-infrastructure-agent, src, telegraf, istio-operator, tkn, skaffold,...

7.5CVSS

8.4AI Score

0.002EPSS

2024-06-29 03:08 AM
50
wolfi
wolfi

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

7.5AI Score

2024-06-29 03:08 AM
22
wolfi
wolfi

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

7.5AI Score

2024-06-29 03:08 AM
21
wolfi
wolfi

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

7.5AI Score

2024-06-29 03:08 AM
24
wolfi
wolfi

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: cni-plugins, local-static-provisioner, gomplate, nats-server, vexctl, nri-elasticsearch, nri-jmx, xcaddy, yam, newrelic-infrastructure-agent, spire-server, ipfs, nri-nginx, telegraf, flannel-cni-plugin, cadvisor, gobump, sbom-scorecard, ytt,...

7.5AI Score

2024-06-29 03:08 AM
3
wolfi
wolfi

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: cni-plugins, cilium-envoy, kubernetes-dashboard-metrics-scraper, go-bindata, prometheus-stackdriver-exporter, falco, wait-for-port, slsa-verifier, render-template, configmap-reload, docker-cli, scorecard, kind, ip-masq-agent, mage, aws-flb-kinesis,...

5.3CVSS

7.2AI Score

0.001EPSS

2024-06-29 03:08 AM
30
wolfi
wolfi

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: cni-plugins, cilium-envoy, kubernetes-dashboard-metrics-scraper, go-bindata, prometheus-stackdriver-exporter, falco, wait-for-port, slsa-verifier, render-template, configmap-reload, docker-cli, scorecard, kind, ip-masq-agent, mage, aws-flb-kinesis,...

7.5AI Score

2024-06-29 03:08 AM
21
wolfi
wolfi

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: cni-plugins, cilium-envoy, kubernetes-dashboard-metrics-scraper, go-bindata, prometheus-stackdriver-exporter, falco, wait-for-port, slsa-verifier, render-template, configmap-reload, docker-cli, scorecard, kind, ip-masq-agent, mage, aws-flb-kinesis,...

7.5AI Score

2024-06-29 03:08 AM
22
wolfi
wolfi

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: trust-manager, nodetaint, gomplate, prometheus-operator, prometheus-postgres-exporter, aws-efs-csi-driver, containerd, tctl, node-problem-detector, newrelic-infrastructure-agent, src, telegraf, tkn, skaffold, prometheus-adapter, buildkitd, apko, oauth2-proxy, kpt,...

7.5AI Score

2024-06-29 03:08 AM
28
wolfi
wolfi

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: trust-manager, nodetaint, gomplate, prometheus-operator, prometheus-postgres-exporter, kubernetes-dns-node-cache, aws-efs-csi-driver, containerd, tctl, node-problem-detector, newrelic-infrastructure-agent, src, telegraf, istio-operator, tkn, skaffold,...

7.5AI Score

2024-06-29 03:08 AM
19
wolfi
wolfi

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: cilium-envoy, prometheus, kubernetes-csi-livenessprobe, prometheus-stackdriver-exporter, influxd, dynamic-localpv-provisioner, helm, falco, pulumi-kubernetes-operator, gitlab-pages, cosign, coredns, slsa-verifier, up, grype, secrets-store-csi-driver, spark-operator,...

7.5AI Score

2024-06-29 03:08 AM
98
wolfi
wolfi

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: cilium-envoy, nodetaint, gomplate, aws-efs-csi-driver, tctl, node-problem-detector, newrelic-infrastructure-agent, src, telegraf, skaffold, envoy-ratelimit, prometheus-adapter, buildkitd, oauth2-proxy, kpt, grpcurl, pulumi-language-java, pulumi-language-yaml, pulumi,.....

7.5AI Score

2024-06-29 03:08 AM
26
wolfi
wolfi

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

7.8AI Score

0.0004EPSS

2024-06-29 03:08 AM
20
wolfi
wolfi

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

7.8AI Score

0.0004EPSS

2024-06-29 03:08 AM
22
wolfi
wolfi

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

7.5AI Score

2024-06-29 03:08 AM
25
wolfi
wolfi

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, trust-manager, docker-credential-acr-env, gomplate, stern, nats-server, delve, regclient, helm-operator, kubernetes-dns-node-cache, dask-gateway, grafana-agent-operator, step, aws-efs-csi-driver, spegel, containerd, mage,...

6.5AI Score

0.0004EPSS

2024-06-29 03:08 AM
19
wolfi
wolfi

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: cni-plugins, local-static-provisioner, gomplate, nats-server, vexctl, nri-elasticsearch, nri-jmx, xcaddy, yam, newrelic-infrastructure-agent, spire-server, ipfs, nri-nginx, telegraf, flannel-cni-plugin, cadvisor, gobump, sbom-scorecard, ytt,...

7.5AI Score

2024-06-29 03:08 AM
4
wolfi
wolfi

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

6AI Score

0.0004EPSS

2024-06-29 03:08 AM
20
wolfi
wolfi

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: nerdctl, docker, ingress-nginx-controller, runc, grype, kots, newrelic-infrastructure-agent, telegraf, k9s, skaffold, nvidia-device-plugin, buildkitd, kubernetes, kubescape, cadvisor, ctop, zarf, skopeo, zot, k3s, wolfictl, syft, k3d, trivy, datadog-agent,...

7.5AI Score

2024-06-29 03:08 AM
15
nvd
nvd

CVE-2024-6405

The Floating Social Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the floating_social_buttons_option() function. This makes it possible for unauthenticated attackers to...

6.1CVSS

EPSS

2024-06-29 02:15 AM
2
cve
cve

CVE-2024-6405

The Floating Social Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the floating_social_buttons_option() function. This makes it possible for unauthenticated attackers to...

6.1CVSS

6AI Score

EPSS

2024-06-29 02:15 AM
2
cvelist
cvelist

CVE-2024-6405 Floating Social Buttons <= 1.5 - Cross-Site Request Forgery

The Floating Social Buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the floating_social_buttons_option() function. This makes it possible for unauthenticated attackers to...

6.1CVSS

EPSS

2024-06-29 02:02 AM
osv

5.4CVSS

6.8AI Score

0.0004EPSS

2024-06-28 03:28 PM
osv

5.3CVSS

6.8AI Score

0.0004EPSS

2024-06-28 03:28 PM
osv

5.4CVSS

6.8AI Score

0.0004EPSS

2024-06-28 03:28 PM
osv
osv

caddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting in github.com/greenpau/caddy-security

caddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting in...

6.4AI Score

0.0004EPSS

2024-06-28 03:28 PM
osv

6.5CVSS

6.8AI Score

0.0004EPSS

2024-06-28 03:28 PM
osv
osv

Improper Restriction of Excessive Authentication Attempts in github.com/greenpau/caddy-security

Improper Restriction of Excessive Authentication Attempts in...

4.8CVSS

6.8AI Score

0.0004EPSS

2024-06-28 03:28 PM
osv

5.3CVSS

6.8AI Score

0.001EPSS

2024-06-28 03:28 PM
osv

6.1CVSS

6.4AI Score

0.0004EPSS

2024-06-28 03:28 PM
Total number of security vulnerabilities265772