RegistrationMagic – Custom Registration Forms, User Registration, Payment, And User Login Security Vulnerabilities

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, aws-network-policy-agent, src-fingerprint, k8ssandra-operator, kubevela, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, gomplate, skopeo,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: kubernetes-ingress-defaultbackend, kwok, scorecard, influx, crane, cert-exporter, prometheus-bind-exporter, cloudflared, fuse-overlayfs-snapshotter, mongo-tools, src-fingerprint, docker-credential-acr-env, prometheus-nats-exporter, skaffold, sonobuoy, cri-tools,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: kubernetes-ingress-defaultbackend, kwok, scorecard, influx, crane, cert-exporter, prometheus-bind-exporter, cloudflared, fuse-overlayfs-snapshotter, mongo-tools, src-fingerprint, docker-credential-acr-env, prometheus-nats-exporter, skaffold, sonobuoy, cri-tools,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: scorecard, prometheus-stackdriver-exporter, gosu, influx, sops, flannel-cni-plugin, prometheus-bind-exporter, cni-plugins, cass-operator, nats, sbom-scorecard, kind, slsa-verifier, render-template, k3d, amass, aws-flb-cloudwatch, cilium-envoy, falco, grpcurl,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: kubernetes-ingress-defaultbackend, kwok, scorecard, influx, crane, cert-exporter, prometheus-bind-exporter, cloudflared, fuse-overlayfs-snapshotter, mongo-tools, src-fingerprint, docker-credential-acr-env, prometheus-nats-exporter, skaffold, sonobuoy, cri-tools,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, aws-network-policy-agent, src-fingerprint, k8ssandra-operator, kubevela, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, gomplate, skopeo,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: scorecard, prometheus-stackdriver-exporter, gosu, influx, sops, flannel-cni-plugin, prometheus-bind-exporter, cni-plugins, cass-operator, nats, sbom-scorecard, kind, slsa-verifier, render-template, k3d, amass, aws-flb-cloudwatch, cilium-envoy, falco, grpcurl,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: scorecard, prometheus-stackdriver-exporter, gosu, influx, sops, flannel-cni-plugin, prometheus-bind-exporter, cni-plugins, cass-operator, nats, sbom-scorecard, kind, slsa-verifier, render-template, k3d, amass, aws-flb-cloudwatch, cilium-envoy, falco, grpcurl,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: scorecard, prometheus-stackdriver-exporter, gosu, influx, sops, flannel-cni-plugin, prometheus-bind-exporter, cni-plugins, cass-operator, nats, sbom-scorecard, kind, slsa-verifier, render-template, k3d, amass, aws-flb-cloudwatch, cilium-envoy, falco, grpcurl,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: kubernetes-ingress-defaultbackend, kwok, scorecard, influx, crane, cert-exporter, prometheus-bind-exporter, cloudflared, fuse-overlayfs-snapshotter, mongo-tools, src-fingerprint, docker-credential-acr-env, prometheus-nats-exporter, skaffold, sonobuoy, cri-tools,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: istio-cni, influx, cert-exporter, prometheus-bind-exporter, sbom-scorecard, cloudflared, src-fingerprint, k8ssandra-operator, kubevela, neuvector-controller, coredns, prometheus-mysqld-exporter, neuvector-scanner, git-lfs, nri-jmx, prometheus, buildah, gomplate,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: nri-mssql, kwok, scorecard, stakater-reloader, up, minio, influx, temporal-server, cert-exporter, prometheus-bind-exporter, envoy-ratelimit, bazelisk, gcsfuse, fuse-overlayfs-snapshotter, mongo-tools, sbom-scorecard, docker-credential-acr-env, slsa-verifier,...

CVE-2024-27806

This issue was addressed with improved environment sanitization. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user...

CVE-2024-27830

This issue was addressed through improved state management. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. A maliciously crafted webpage may be able to fingerprint the...

CVE-2024-27851

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2024-27830

This issue was addressed through improved state management. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. A maliciously crafted webpage may be able to fingerprint the...

CVE-2024-27806

This issue was addressed with improved environment sanitization. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user...

CVE-2024-27851

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2024-27811

The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate...

CVE-2024-27811

The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate...

CVE-2024-27807

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and iPadOS 16.7.8. An app may be able to circumvent App Privacy Report...

CVE-2024-27807

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and iPadOS 16.7.8. An app may be able to circumvent App Privacy Report...

CVE-2024-27850

This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to fingerprint the...

CVE-2024-27850

This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, Safari 17.5, iOS 17.5 and iPadOS 17.5. A maliciously crafted webpage may be able to fingerprint the...

CVE-2024-27857

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. A remote attacker may be able to cause unexpected app termination or arbitrary code...

CVE-2024-27800

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing a maliciously crafted message may lead to a...

CVE-2024-27857

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. A remote attacker may be able to cause unexpected app termination or arbitrary code...

CVE-2024-27800

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing a maliciously crafted message may lead to a...

CVE-2024-27831

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. Processing a file may lead to unexpected app...

CVE-2024-27831

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. Processing a file may lead to unexpected app...

CVE-2024-27820

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, iOS 16.7.8 and iPadOS 16.7.8, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing web content may lead to arbitrary code...

CVE-2024-27820

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17.5, iOS 16.7.8 and iPadOS 16.7.8, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing web content may lead to arbitrary code...

CVE-2024-27836

The issue was addressed with improved checks. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, iOS 17.5 and iPadOS 17.5. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2024-27836

The issue was addressed with improved checks. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, iOS 17.5 and iPadOS 17.5. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2024-27817

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to execute arbitrary code with kernel...

CVE-2024-27801

The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate...

CVE-2024-27840

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5. An attacker that has already achieved kernel code execution may be able to...

CVE-2024-27840

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5. An attacker that has already achieved kernel code execution may be able to...