Microsoft Windows 10 Gold, 1511, 1607, And 1703, And Windows Server 2016 Security Vulnerabilities

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS RM3/CRS dispenser firmware (all versions up to and including 41128 1002 RM3_CRS.BTR + 170329 2332 RM3_CRS.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5 CMDv5 dispenser firmware (all versions up to and including 141128 1002 CD5_ATM.BTR + 170329 2332 CD5_ATM.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

continentalpancakehouse.com Cross Site Scripting vulnerability OBB-3931947

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

niagarafallsoptimist.ca Cross Site Scripting vulnerability OBB-3931946

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

luposlittleeataly.com Cross Site Scripting vulnerability OBB-3931945

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

queenscoachrestaurant.com Cross Site Scripting vulnerability OBB-3931944

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

svabinsurance.com Cross Site Scripting vulnerability OBB-3931943

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

hoopsalytics.com Cross Site Scripting vulnerability OBB-3931942

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: slsa-verifier, tekton-chains, skaffold, spire-server, policy-controller, flux-source-controller, aactl, melange, goreleaser, wolfictl, vexctl, ko, tkn, neuvector-sigstore-interface, apko, gitsign, zot, falcoctl, falco, zarf,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: aactl, telegraf, git-lfs, kaf, cortex, pulumi, nghttp2, nodetaint, kubeflow-katib, gomplate, fuse-overlayfs-snapshotter, gitness, ip-masq-agent, external-dns, terraform-provider-aws, scorecard, stakater-reloader, oauth2-proxy, dgraph, prometheus-blackbox-exporter,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: loki, spire-server, aactl, prometheus, up, melange, goreleaser, telegraf, wolfictl, buildkitd, kaniko, dagger, kargo, ko, crossplane, tkn, datadog-agent, grype, ctop, zot, syft, conftest, buf, cadvisor, trivy, docker-compose,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: slsa-verifier, tekton-chains, spire-server, external-secrets-operator, flux-source-controller, fulcio, aactl, traefik, vexctl, argo-workflows, cilium-envoy, dex, argo-cd, tkn, rekor, cosign, sops, tekton-pipelines, gitsign, keda, cloudflared, istio-pilot-discovery,...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: loki, spire-server, aactl, prometheus, up, melange, goreleaser, telegraf, wolfictl, buildkitd, kaniko, dagger, kargo, ko, crossplane, tkn, datadog-agent, grype, ctop, zot, syft, conftest, buf, cadvisor, trivy, docker-compose,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, rabbitmq-messaging-topology-operator, thanos-operator, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, istio-operator, filebeat, kaf, nri-discovery-kubernetes, nri-kubernetes,...

CVE-2024-21506 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-pymongo,...

CVE-2024-28219 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-pillow,...

CVE-2024-21885 vulnerabilities

Vulnerabilities for packages:...

GHSA-49WX-9H9F-8C9G vulnerabilities

Vulnerabilities for packages:...

CVE-2024-21886 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-31080 vulnerabilities

Vulnerabilities for packages:...

GHSA-VQ7J-GX56-RXJH vulnerabilities

Vulnerabilities for packages: falco, metrics-server,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: trillian, k3s, caddy, argo-workflows, step-ca, temporal-server, keda, amass, kine, vault, kots, spicedb, ferretdb, src, telegraf,...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: trillian, k3s, caddy, argo-workflows, step-ca, temporal-server, keda, amass, kine, vault, kots, spicedb, ferretdb, src, telegraf,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, kyverno-policy-reporter-ui, spicedb, docker-cli, swagger, telegraf, kaf, influx, rekor, direnv, velero, yq, gitness, ip-masq-agent, external-dns, kafka_exporter, falcoctl, wazero, kubescape, nsc, coredns,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, opa, crane, git-lfs, istio-operator, kaf, newrelic-prometheus-configurator, cortex, eksctl, crossplane, rootlesskit, mockery, go-fips, influx, k8sgpt,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, opa, crane, git-lfs, istio-operator, kaf, newrelic-prometheus-configurator, cortex, eksctl, crossplane, rootlesskit, mockery, go-fips, influx, k8sgpt,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: slsa-verifier, flannel-cni-plugin, aactl, cni-plugins, mage, docker-cli, protoc-gen-go-grpc, aws-flb-cloudwatch, goreleaser, kubernetes-dashboard-metrics-scraper, sbom-scorecard, cass-operator, gke-gcloud-auth-plugin, prometheus-stackdriver-exporter,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, thanos-operator, aactl, telegraf, git-lfs, kaf, prometheus-mongodb-exporter, pulumi, nodetaint, k8sgpt, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, kube-logging-operator, fuse-overlayfs-snapshotter,....

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, rabbitmq-messaging-topology-operator, thanos-operator, kyverno-policy-reporter-ui, aactl, spicedb, telegraf, istio-operator, filebeat, kaf, nri-discovery-kubernetes, nri-kubernetes,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-JJG7-2V4V-X38H vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-volumes-web-app, jwt-tool, dask-gateway, k8s-sidecar, py3-cassandra-medusa, az, py3.10-tensorflow-core, confluent-docker-utils, ggshield, kubeflow-pipelines-visualization-server, datadog-agent, kubeflow-pipelines, kubeflow-katib,...

GHSA-HJ3V-M684-V259 vulnerabilities

Vulnerabilities for packages: istio-operator, spire-server, falcoctl, external-secrets-operator, boring-registry, minio, falco, istio-pilot-agent, istio-pilot-discovery, kyverno, mc,...

GHSA-679V-HH23-H5JH vulnerabilities

Vulnerabilities for packages: falco, metrics-server,...

CVE-2023-39320 vulnerabilities

Vulnerabilities for packages:...

GHSA-RXV8-V965-V333 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-3651 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-volumes-web-app, jwt-tool, dask-gateway, k8s-sidecar, py3-cassandra-medusa, az, py3.10-tensorflow-core, confluent-docker-utils, ggshield, kubeflow-pipelines-visualization-server, datadog-agent, kubeflow-pipelines, kubeflow-katib,...

GHSA-PCJV-393Q-RQF2 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-31081 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-31082 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard, temporal, aactl, nri-mssql, telegraf, git-lfs, istio-operator, kaf, prometheus-mongodb-exporter, cortex, eksctl, pulumi, crossplane, kubeflow-katib, nfs-subdir-external-provisioner, gomplate, local-path-provisioner, rekor, vault-csi-provider,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: trillian, k3s, caddy, argo-workflows, step-ca, temporal-server, keda, amass, kine, kots, spicedb, ferretdb, src, telegraf,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, k3s, kubevela, temporal, cert-manager, temporal-server, envoy-ratelimit, keda, cri-tools, kine, argo-cd, kubernetes, containerd, aws-ebs-csi-driver, kyverno, docker-compose,...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, k3s, kubevela, temporal, cert-manager, temporal-server, envoy-ratelimit, keda, cri-tools, kine, argo-cd, kubernetes, containerd, aws-ebs-csi-driver, kyverno, docker-compose,...

CVE-2023-39318 vulnerabilities

Vulnerabilities for packages: falco, metrics-server,...

CVE-2023-39323 vulnerabilities

Vulnerabilities for packages: falco, metrics-server,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, kubernetes-dashboard, temporal, thanos-operator, cluster-api-controller, docker-cli, nri-mssql, telegraf, task, filebeat, kaf, newrelic-prometheus-configurator, nri-discovery-kubernetes, nri-mysql, nri-nginx,...