Media Library Folder & File Manager Security Vulnerabilities

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: petname, protoc-gen-go-grpc, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, datadog-agent-fips, k3s, flux-kustomize-controller, tflint, stakater-reloader, cert-exporter-fips, bom, controller-gen, kubeadm-bootstrap-controller,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: rekor, kubescape, external-secrets-operator, spire-server-fips, dex, kyverno, spire-server, timestamp-authority-fips, keda, vault-fips, gitsign, tkn, vault, aactl, flux-source-controller, cert-manager-fips, cloudflared, cilium-envoy, argo-cd,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: petname, protoc-gen-go-grpc, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, datadog-agent-fips, k3s, flux-kustomize-controller, tflint, stakater-reloader, cert-exporter-fips, bom, controller-gen, kubeadm-bootstrap-controller,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: petname, protoc-gen-go-grpc, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, datadog-agent-fips, k3s, flux-kustomize-controller, tflint, stakater-reloader, cert-exporter-fips, bom, controller-gen, kubeadm-bootstrap-controller,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: petname, kubernetes-ingress-defaultbackend, gotenberg, mkcert, harbor-scanner-trivy-fips, ferretdb, harbor-scanner-trivy, wgcf, opentelemetry-collector-fips, gpu-operator, flux-kustomize-controller, grafana-agent-operator, go-ipfs-fips, bom, harbor-registry,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: petname, kyverno, render-template, protoc-gen-go-grpc, go-licenses, nsc, aws-flb-cloudwatch, nats, sonobuoy, docker-cli, slsa-verifier, bank-vaults-fips, fulcio-fips, prometheus-redis-exporter-fips, stakater-reloader, go-bindata, go-md2man,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kubescape, temporal-server-fips, kyverno, keda, metrics-server-fips, temporal, kube-oidc-proxy, cert-manager-fips, kine, argo-cd, kubevela, kubernetes-csi-external-resizer, envoy-ratelimit, k3s, kubernetes-fips, aws-ebs-csi-driver, cluster-autoscaler-fips, kubernetes,....

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: kubescape, dex, kyverno, wavefront-collector-for-kubernetes, kubernetes-ingress-defaultbackend, trillian, nats, prometheus-mongodb-exporter, vault, k8sgpt-operator, skaffold, cloud-sql-proxy, flux, flux-source-controller, cert-manager-fips, slsa-verifier,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kubescape, dex, kyverno, nats, skaffold, flux, flux-source-controller, slsa-verifier, terraform-provider-azurerm, dynamic-localpv-provisioner, karpenter, envoy-ratelimit, bank-vaults-fips, flux-image-reflector-controller, flux-kustomize-controller, metacontroller,...

GHSA-V53G-5GJP-272R vulnerabilities

Vulnerabilities for packages: kubescape, zarf, trivy, helm-operator, istio-fips, up, flux-source-controller, cert-manager-fips, k8sgpt, istio-operator, istio-operator-fips, flux-helm-controller, helm-push, k9s, cilium-cli, eksctl, chartmuseum, kots, cert-manager,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: petname, protoc-gen-go-grpc, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, datadog-agent-fips, k3s, flux-kustomize-controller, tflint, stakater-reloader, cert-exporter-fips, bom, controller-gen, kubeadm-bootstrap-controller,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: kubescape, dex, kyverno, step, gitsign, vault, skaffold, cilium, cert-manager-fips, flux-source-controller, grpc-health-probe, nerdctl, slsa-verifier, dex-fips, istio-cni-fips, bank-vaults-fips, sigstore-scaffolding-fips, fulcio-fips, flux-kustomize-controller,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: petname, kyverno, render-template, protoc-gen-go-grpc, go-licenses, nsc, aws-flb-cloudwatch, nats, sonobuoy, docker-cli, slsa-verifier, bank-vaults-fips, fulcio-fips, prometheus-redis-exporter-fips, stakater-reloader, go-bindata, go-md2man,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, trivy, helm-operator, istio-fips, up, flux-source-controller, cert-manager-fips, k8sgpt, istio-operator, istio-operator-fips, flux-helm-controller, helm-push, k9s, cilium-cli, eksctl, chartmuseum, kots, cert-manager,...

CVE-2024-26147 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, trivy, helm-operator, istio-fips, up, flux-source-controller, cert-manager-fips, k8sgpt, istio-operator, istio-operator-fips, flux-helm-controller, helm-push, k9s, cilium-cli, eksctl, chartmuseum, kots, cert-manager,...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: k3s, kubernetes-fips, gitlab-kas, keda, gatekeeper, prometheus, ipfs, caddy, prometheus-adapter, cert-manager, kubevela, up, cluster-autoscaler-fips, metrics-server-fips, calico, thanos, kube-oidc-proxy,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: protoc-gen-go-grpc, rabbitmq-cluster-operator, vault, ferretdb, k8sgpt-operator, cilium, grpc-health-probe, datadog-agent-fips, k3s, gpu-operator, flux-kustomize-controller, tflint, stakater-reloader, grafana-agent-operator, cert-exporter-fips, go-ipfs-fips, weaviate,....

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: chezmoi, petname, kubernetes-ingress-defaultbackend, gotenberg, protoc-gen-go-grpc, mkcert, harbor-scanner-trivy-fips, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, cilium, harbor-scanner-trivy, grpc-health-probe, step-issuer-fips,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: petname, protoc-gen-go-grpc, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, datadog-agent-fips, k3s, flux-kustomize-controller, tflint, stakater-reloader, cert-exporter-fips, bom, controller-gen, kubeadm-bootstrap-controller,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: petname, protoc-gen-go-grpc, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, datadog-agent-fips, k3s, flux-kustomize-controller, tflint, stakater-reloader, cert-exporter-fips, bom, controller-gen, kubeadm-bootstrap-controller,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: chezmoi, petname, kubernetes-ingress-defaultbackend, gotenberg, protoc-gen-go-grpc, mkcert, harbor-scanner-trivy-fips, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, cilium, harbor-scanner-trivy, grpc-health-probe, step-issuer-fips,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: petname, protoc-gen-go-grpc, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, datadog-agent-fips, k3s, flux-kustomize-controller, tflint, stakater-reloader, cert-exporter-fips, bom, controller-gen, kubeadm-bootstrap-controller,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: petname, protoc-gen-go-grpc, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, datadog-agent-fips, k3s, flux-kustomize-controller, tflint, stakater-reloader, cert-exporter-fips, bom, controller-gen, kubeadm-bootstrap-controller,...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: kubescape, temporal-server-fips, kyverno, keda, metrics-server-fips, temporal, kube-oidc-proxy, cert-manager-fips, kine, argo-cd, kubevela, kubernetes-csi-external-resizer, envoy-ratelimit, k3s, kubernetes-fips, aws-ebs-csi-driver, cluster-autoscaler-fips, kubernetes,....

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: k3s, kubernetes-fips, gitlab-kas, keda, gatekeeper, prometheus, ipfs, caddy, prometheus-adapter, cert-manager, kubevela, up, cluster-autoscaler-fips, metrics-server-fips, calico, thanos, kube-oidc-proxy,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: petname, protoc-gen-go-grpc, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, datadog-agent-fips, k3s, flux-kustomize-controller, tflint, stakater-reloader, cert-exporter-fips, bom, controller-gen, kubeadm-bootstrap-controller,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: petname, kyverno, render-template, protoc-gen-go-grpc, go-licenses, nsc, aws-flb-cloudwatch, nats, sonobuoy, docker-cli, slsa-verifier, bank-vaults-fips, fulcio-fips, prometheus-redis-exporter-fips, stakater-reloader, go-bindata, go-md2man,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: petname, kubernetes-ingress-defaultbackend, gotenberg, mkcert, harbor-scanner-trivy-fips, ferretdb, harbor-scanner-trivy, wgcf, opentelemetry-collector-fips, gpu-operator, flux-kustomize-controller, grafana-agent-operator, go-ipfs-fips, bom, harbor-registry,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, dagger, kubescape, zarf, guac, trivy, kyverno, ctop, traefik-fips, timoni, goreleaser, helm-operator, gitsign, helm, istio-fips, up, aactl, istio-pilot-agent-fips, skaffold, loki, cert-manager-fips, k8sgpt, crane, policy-controller,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: kubescape, dex, kyverno, wavefront-collector-for-kubernetes, kubernetes-ingress-defaultbackend, trillian, nats, prometheus-mongodb-exporter, vault, k8sgpt-operator, skaffold, cloud-sql-proxy, flux, flux-source-controller, cert-manager-fips, slsa-verifier,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: kubescape, trivy, dex, kyverno, wavefront-collector-for-kubernetes, go-licenses, step, trillian, nsc, prometheus-mongodb-exporter, gitsign, nats, temporal, vault, temporal-server, ferretdb, cloud-sql-proxy, flux, flux-source-controller, cert-manager-fips,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: dex, kyverno, wavefront-collector-for-kubernetes, trillian, prometheus-mongodb-exporter, vault, k8sgpt-operator, skaffold, cloud-sql-proxy, flux, flux-source-controller, cert-manager-fips, dynamic-localpv-provisioner, karpenter, nfs-subdir-external-provisioner, k3s,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: kubescape, spire-server-fips, ctop, up, aactl, skaffold, loki, cert-manager-fips, slsa-verifier, falcoctl-fips, kpt, k3s, paranoia, flux-image-reflector-controller, tekton-chains, falco, tekton-pipelines, telegraf, scorecard, prometheus-fips, chartmuseum, prometheus,.....

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: kubescape, dex, kyverno, step, gitsign, vault, skaffold, cilium, cert-manager-fips, flux-source-controller, grpc-health-probe, nerdctl, slsa-verifier, dex-fips, istio-cni-fips, bank-vaults-fips, sigstore-scaffolding-fips, fulcio-fips, flux-kustomize-controller,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: kubescape, trivy, dex, kyverno, wavefront-collector-for-kubernetes, go-licenses, step, trillian, nsc, prometheus-mongodb-exporter, gitsign, nats, temporal, vault, temporal-server, ferretdb, cloud-sql-proxy, flux, flux-source-controller, cert-manager-fips,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: petname, kubernetes-ingress-defaultbackend, gotenberg, mkcert, harbor-scanner-trivy-fips, ferretdb, harbor-scanner-trivy, wgcf, opentelemetry-collector-fips, gpu-operator, flux-kustomize-controller, grafana-agent-operator, go-ipfs-fips, bom, harbor-registry,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: petname, kubernetes-ingress-defaultbackend, gotenberg, mkcert, harbor-scanner-trivy-fips, ferretdb, harbor-scanner-trivy, wgcf, opentelemetry-collector-fips, gpu-operator, flux-kustomize-controller, grafana-agent-operator, go-ipfs-fips, bom, harbor-registry,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: petname, protoc-gen-go-grpc, rabbitmq-cluster-operator, aws-flb-cloudwatch, ferretdb, k8sgpt-operator, datadog-agent-fips, k3s, flux-kustomize-controller, tflint, stakater-reloader, cert-exporter-fips, bom, controller-gen, kubeadm-bootstrap-controller,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, dagger, kubescape, zarf, guac, trivy, kyverno, ctop, traefik-fips, timoni, goreleaser, helm-operator, gitsign, helm, istio-fips, up, aactl, istio-pilot-agent-fips, skaffold, loki, cert-manager-fips, k8sgpt, crane, policy-controller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubescape, dex, kyverno, nats, skaffold, flux, flux-source-controller, slsa-verifier, terraform-provider-azurerm, dynamic-localpv-provisioner, karpenter, envoy-ratelimit, bank-vaults-fips, flux-image-reflector-controller, flux-kustomize-controller, metacontroller,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: petname, kyverno, render-template, protoc-gen-go-grpc, go-licenses, nsc, aws-flb-cloudwatch, nats, sonobuoy, docker-cli, slsa-verifier, bank-vaults-fips, fulcio-fips, prometheus-redis-exporter-fips, stakater-reloader, go-bindata, go-md2man,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: dex, kyverno, wavefront-collector-for-kubernetes, trillian, prometheus-mongodb-exporter, vault, k8sgpt-operator, skaffold, cloud-sql-proxy, flux, flux-source-controller, cert-manager-fips, dynamic-localpv-provisioner, karpenter, nfs-subdir-external-provisioner, k3s,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: kubescape, dex, flux-source-controller, slsa-verifier, terraform-provider-azurerm, dynamic-localpv-provisioner, karpenter, envoy-ratelimit, bank-vaults-fips, flux-kustomize-controller, gatekeeper, prometheus, gitlab-pages, kots, coredns, terraform, k3d, mc,...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: kubescape, trivy, ctop, helm, up, skaffold, flux-source-controller, cert-manager-fips, kubevela, kaniko, grype, gitness, flux-helm-controller, helm-push, cilium-cli, melange, tekton-pipelines, flux-source-controller-0.37, telegraf, eksctl, kots, cert-manager, k3d,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, trivy, helm-operator, istio-fips, up, flux-source-controller, cert-manager-fips, k8sgpt, istio-operator, istio-operator-fips, flux-helm-controller, helm-push, k9s, cilium-cli, eksctl, chartmuseum, kots, cert-manager,...

30,000 WordPress Sites affected by Arbitrary SQL Execution Vulnerability Patched in Visualizer WordPress Plugin

🎉 Did you know we're running a Bug Bounty Extravaganza again? Earn over 6x our usual bounty rates, up to $10,000, for all vulnerabilities submitted through May 27th, 2024 when you opt to have Wordfence handle responsible disclosure! On April 10th, 2024, during our second Bug Bounty Extravaganza,.....

Subhunter - A Fast Subdomain Takeover Tool

Subdomain takeover is a common vulnerability that allows an attacker to gain control over a subdomain of a target domain and redirect users intended for an organization's domain to a website that performs malicious activities, such as phishing campaigns, stealing user cookies, etc. It occurs when.....

Exploit for CVE-2024-22026

CVE-2024-22026 **Exploit POC for CVE-2024-22026 affecting...

Security Bulletin: IBM QRadar SIEM protocols are vulnerable to information exposure and denial of service (CVE-2023-31582, CVE-2023-51775)

Summary The Jose4j library is vulnerable to a denial of service, caused by improper input validation. It could also allow a remote attacker to obtain sensitive information using cryptographic attacks. Vulnerability Details ** CVEID: CVE-2023-31582 DESCRIPTION: **Jose4J could allow a remote...

Exploit for CVE-2024-27956

CVE-2024-27956-RCE File Package Contents: 1. exploit.py...