Media Library Folder & File Manager Security Vulnerabilities

Exploit for CVE-2024-24919

Exploit for CVE-2024-24919 Description This Python...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: istio-operator, cilium-cli, flux-helm-controller, cert-manager, k9s, zarf, flux-source-controller, eksctl, zot, kots, trivy, k8sgpt, helm-push, up, chartmuseum, kubescape,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: aactl, telegraf, git-lfs, kaf, cortex, pulumi, nghttp2, nodetaint, kubeflow-katib, gomplate, fuse-overlayfs-snapshotter, gitness, ip-masq-agent, external-dns, terraform-provider-aws, scorecard, stakater-reloader, oauth2-proxy, dgraph, prometheus-blackbox-exporter,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: slsa-verifier, tekton-chains, spire-server, external-secrets-operator, flux-source-controller, fulcio, aactl, traefik, vexctl, argo-workflows, cilium-envoy, dex, argo-cd, tkn, rekor, cosign, sops, tekton-pipelines, gitsign, keda, cloudflared, istio-pilot-discovery,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: loki, slsa-verifier, tekton-chains, skaffold, aactl, prometheus, kpt, up, goreleaser, bom, k3s, tekton-pipelines, k3d, scorecard, ctop, cert-manager, falco, paranoia, chartmuseum,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, rabbitmq-messaging-topology-operator, thanos-operator, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, istio-operator, filebeat, kaf, nri-discovery-kubernetes, nri-kubernetes,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: istio-operator, cilium-cli, flux-helm-controller, cert-manager, k9s, zarf, flux-source-controller, eksctl, zot, kots, trivy, k8sgpt, helm-push, up, chartmuseum, kubescape,...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: skaffold, flux-source-controller, up, melange, telegraf, kaniko, eksctl, helm-push, flux-helm-controller, helm, tekton-pipelines, fuse-overlayfs-snapshotter, cilium-cli, k3d, gitness, grype, ctop, zot, newrelic-infrastructure-agent, cert-manager, kots, trivy,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, kyverno-policy-reporter-ui, spicedb, docker-cli, swagger, telegraf, kaf, influx, rekor, direnv, velero, yq, gitness, ip-masq-agent, external-dns, kafka_exporter, falcoctl, wazero, kubescape, nsc, coredns,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, opa, crane, git-lfs, istio-operator, kaf, newrelic-prometheus-configurator, cortex, eksctl, crossplane, rootlesskit, mockery, go-fips, influx, k8sgpt,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, opa, crane, git-lfs, istio-operator, kaf, newrelic-prometheus-configurator, cortex, eksctl, crossplane, rootlesskit, mockery, go-fips, influx, k8sgpt,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flannel-cni-plugin, aactl, cni-plugins, mage, docker-cli, protoc-gen-go-grpc, aws-flb-cloudwatch, goreleaser, kubernetes-dashboard-metrics-scraper, sbom-scorecard, cass-operator, gke-gcloud-auth-plugin, prometheus-stackdriver-exporter,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, thanos-operator, aactl, telegraf, git-lfs, kaf, prometheus-mongodb-exporter, pulumi, nodetaint, k8sgpt, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, kube-logging-operator, fuse-overlayfs-snapshotter,....

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: loki, slsa-verifier, tekton-chains, skaffold, policy-controller, aactl, prometheus, up, timoni, goreleaser, telegraf, traefik, vexctl, buildkitd, crane, dagger, filebeat, bom, argo-workflows, kargo, k9s, eksctl, pulumi, datadog-agent, istio-pilot-agent, k8sgpt,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, rabbitmq-messaging-topology-operator, thanos-operator, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, istio-operator, filebeat, kaf, nri-discovery-kubernetes, nri-kubernetes,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: k3s, prometheus-adapter, caddy, cert-manager, ipfs, gatekeeper, thanos, keda, kubernetes, gitlab-kas, calico, prometheus, up,...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: k3s, prometheus-adapter, caddy, cert-manager, ipfs, gatekeeper, thanos, keda, kubernetes, gitlab-kas, calico, prometheus, up,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, temporal, aactl, nri-mssql, telegraf, git-lfs, istio-operator, kaf, prometheus-mongodb-exporter, cortex, eksctl, pulumi, crossplane, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, local-path-provisioner, rekor, vault-csi-provider,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, kyverno-policy-reporter-ui, spicedb, docker-cli, swagger, telegraf, kaf, influx, rekor, direnv, velero, yq, gitness, ip-masq-agent, external-dns, kafka_exporter, falcoctl, wazero, kubescape, nsc, coredns,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, opa, crane, git-lfs, istio-operator, kaf, newrelic-prometheus-configurator, cortex, eksctl, crossplane, rootlesskit, mockery, influx, k8sgpt,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, thanos-operator, aactl, telegraf, git-lfs, istio-operator, kaf, prometheus-mongodb-exporter, pulumi, nodetaint, k8sgpt, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, kube-logging-operator, caddy,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: rook, slsa-verifier, tekton-chains, skaffold, spire-server, policy-controller, rabbitmq-messaging-topology-operator, external-secrets-operator, flux-source-controller, fulcio, aactl, melange, traefik, goreleaser, wolfictl, vexctl, istio-operator, argo-workflows,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, k3s, kubevela, temporal, cert-manager, temporal-server, envoy-ratelimit, keda, cri-tools, kine, argo-cd, kubernetes, containerd, aws-ebs-csi-driver, kyverno, docker-compose,...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, k3s, kubevela, temporal, cert-manager, temporal-server, envoy-ratelimit, keda, cri-tools, kine, argo-cd, kubernetes, containerd, aws-ebs-csi-driver, kyverno, docker-compose,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

CVE-2024-26147 vulnerabilities

Vulnerabilities for packages: istio-operator, cilium-cli, flux-helm-controller, cert-manager, k9s, zarf, flux-source-controller, eksctl, zot, kots, trivy, k8sgpt, helm-push, up, chartmuseum, kubescape,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flannel-cni-plugin, aactl, cni-plugins, mage, docker-cli, protoc-gen-go-grpc, aws-flb-cloudwatch, goreleaser, kubernetes-dashboard-metrics-scraper, sbom-scorecard, cass-operator, gke-gcloud-auth-plugin, prometheus-stackdriver-exporter,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: slsa-verifier, flannel-cni-plugin, aactl, cni-plugins, mage, docker-cli, protoc-gen-go-grpc, aws-flb-cloudwatch, goreleaser, kubernetes-dashboard-metrics-scraper, sbom-scorecard, cass-operator, gke-gcloud-auth-plugin, prometheus-stackdriver-exporter,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flannel-cni-plugin, aactl, cni-plugins, mage, docker-cli, protoc-gen-go-grpc, aws-flb-cloudwatch, goreleaser, kubernetes-dashboard-metrics-scraper, sbom-scorecard, cass-operator, gke-gcloud-auth-plugin, prometheus-stackdriver-exporter,...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: rook, slsa-verifier, tekton-chains, skaffold, spire-server, policy-controller, rabbitmq-messaging-topology-operator, external-secrets-operator, flux-source-controller, fulcio, aactl, melange, traefik, goreleaser, wolfictl, vexctl, istio-operator, argo-workflows,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, thanos-operator, aactl, telegraf, git-lfs, kaf, prometheus-mongodb-exporter, pulumi, nodetaint, k8sgpt, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, kube-logging-operator, fuse-overlayfs-snapshotter,....

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, thanos-operator, aactl, telegraf, git-lfs, istio-operator, kaf, prometheus-mongodb-exporter, pulumi, nodetaint, k8sgpt, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, kube-logging-operator, caddy,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, temporal, aactl, nri-mssql, telegraf, git-lfs, istio-operator, kaf, prometheus-mongodb-exporter, cortex, eksctl, pulumi, crossplane, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, local-path-provisioner, rekor, vault-csi-provider,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: slsa-verifier, coredns, flux-source-controller, kubernetes-csi-livenessprobe, pulumi-language-yaml, aactl, prometheus, kubernetes-csi-node-driver-registrar, up, terraform-provider-azurerm, mc, goreleaser, telegraf, buildkitd, prometheus-adapter,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: aactl, telegraf, git-lfs, kaf, cortex, pulumi, nghttp2, nodetaint, kubeflow-katib, gomplate, fuse-overlayfs-snapshotter, gitness, ip-masq-agent, external-dns, terraform-provider-aws, scorecard, stakater-reloader, oauth2-proxy, dgraph, prometheus-blackbox-exporter,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: istio-operator, cilium-cli, flux-helm-controller, cert-manager, k9s, zarf, flux-source-controller, eksctl, zot, kots, trivy, k8sgpt, helm-push, up, chartmuseum, kubescape,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, opa, crane, git-lfs, istio-operator, kaf, newrelic-prometheus-configurator, cortex, eksctl, crossplane, rootlesskit, mockery, influx, k8sgpt,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: loki, slsa-verifier, tekton-chains, skaffold, policy-controller, aactl, prometheus, up, timoni, goreleaser, telegraf, traefik, vexctl, buildkitd, crane, dagger, filebeat, bom, argo-workflows, kargo, k9s, eksctl, pulumi, datadog-agent, istio-pilot-agent, k8sgpt,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

CVE-2024-34005 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file...

CVE-2024-34004 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_wiki backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore wiki modules and direct access to the web server outside of the Moodle webroot could execute a local file...

CVE-2024-34003 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_workshop backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore workshop modules and direct access to the web server outside of the Moodle webroot could execute a local file...