SpaceLogic C-Bus Network Automation Controller, 5500NAC2 Security Vulnerabilities

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS RM3/CRS dispenser firmware (all versions up to and including 41128 1002 RM3_CRS.BTR + 170329 2332 RM3_CRS.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5 CMDv5 dispenser firmware (all versions up to and including 141128 1002 CD5_ATM.BTR + 170329 2332 CD5_ATM.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

CVE-2024-6172

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.25 due to insufficient escaping on the user supplied...

CVE-2024-6172

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.25 due to insufficient escaping on the user supplied...

CVE-2024-32852

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky cryptographic algorithm vulnerability. An unprivileged network malicious attacker could potentially exploit this vulnerability, leading to data...

CVE-2024-32852

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky cryptographic algorithm vulnerability. An unprivileged network malicious attacker could potentially exploit this vulnerability, leading to data...

CVE-2024-32852

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky cryptographic algorithm vulnerability. An unprivileged network malicious attacker could potentially exploit this vulnerability, leading to data...

CVE-2024-6172 Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the db parameter in all versions up to, and including, 5.7.25 due to insufficient escaping on the user supplied...

Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware

A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deliver malware. The vulnerability, tracked as CVE-2024-20399 (CVSS score: 6.0), concerns a case of command injection that allows an authenticated,...

Australian Man Charged for Fake Wi-Fi Scam on Domestic Flights

An Australian man has been charged with running a fake Wi-Fi access point during a domestic flight with an aim to steal user credentials and data. The unnamed 42-year-old "allegedly established fake free Wi-Fi access points, which mimicked legitimate networks, to capture personal data from...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: gitsign, goreleaser, spire-server, tekton-chains, melange, apko, tkn, kubescape, aactl, zot, falco, falcoctl, skaffold, flux-source-controller, ko, wolfictl, vexctl, neuvector-sigstore-interface, zarf, policy-controller,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, istio-pilot-agent, k9s, tekton-chains, thanos-operator, istio-pilot-discovery, trillian, karpenter, prometheus-node-exporter,...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, argo-cd, melange, pulumi-kubernetes-operator,...

GHSA-888H-RM2R-VRC7 vulnerabilities

Vulnerabilities for packages: kind, policy-controller,...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: cri-tools, docker-compose, buf, k3d, syft, grype, dagger, helm-push, melange, prometheus, wolfictl, tekton-pipelines, docker, neuvector-scanner, harbor-scanner-trivy, policy-controller,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: trivy, k9s, kots, k3d, cadvisor, telegraf, datadog-agent, kubernetes, ingress-nginx-controller, kubescape, kaniko, runc, grype, skopeo, zot, nerdctl, nvidia-device-plugin, syft, skaffold, wolfictl, newrelic-infrastructure-agent, ctop, k3s, buildkitd, docker,...

CVE-2023-31130 vulnerabilities

Vulnerabilities for packages:...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: trivy, fuse-overlayfs-snapshotter, helm-push, gitness, kots, k3d, up, kubevela, melange, telegraf, kubescape, kaniko, helm, grype, neuvector-agent, zot, eksctl, cilium-cli, skaffold, flux-helm-controller, flux-source-controller, newrelic-infrastructure-agent, ctop,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: up, eksctl, cilium-cli, trivy, zot, flux-helm-controller, flux-source-controller, helm-push, istio-operator, cert-manager, zarf, k9s, kots, chartmuseum, k8sgpt, helm-operator,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: up, eksctl, cilium-cli, trivy, zot, flux-helm-controller, flux-source-controller, helm-push, istio-operator, cert-manager, zarf, k9s, kots, chartmuseum, k8sgpt, helm-operator,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: keda, gitsign, spire-server, terragrunt, fulcio, argo-workflows, kots, tekton-chains, flux-kustomize-controller, istio-pilot-discovery, oauth2-proxy, dex, sops, cloudflared, tkn, kubescape, aactl, vault, external-secrets-operator, cilium-envoy, falco, argo-cd,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kaf, fuse-overlayfs-snapshotter, gitness, kubevela, tomcat, nri-prometheus, kubescape, kubernetes-csi-livenessprobe, kubewatch, helm, flux-notification-controller, aactl, hey, spark-operator, frp, node-problem-detector, envoy-ratelimit, grpcurl, dotnet, skaffold,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, gitsign, goreleaser, spire-server, terragrunt, gh, scorecard, snyk-cli, fulcio, terraform-provider-azurerm, tekton-chains, vault-csi-provider, k3d, flux-kustomize-controller, kargo, flux, rook, step-ca, timestamp-authority,...

CVE-2024-32473 vulnerabilities

Vulnerabilities for packages: cri-tools, docker-compose, buf, k3d, syft, grype, dagger, helm-push, melange, prometheus, wolfictl, tekton-pipelines, docker, neuvector-scanner, harbor-scanner-trivy, policy-controller,...

CVE-2023-29403 vulnerabilities

Vulnerabilities for packages: kind, policy-controller,...

GHSA-F2CJ-5636-4J38 vulnerabilities

Vulnerabilities for packages: kind, policy-controller,...

GHSA-RXX3-4978-3CC9 vulnerabilities

Vulnerabilities for packages: kind, policy-controller,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: bank-vaults, boring-registry, buf, kubevela, configmap-reload, nri-prometheus, tkn, flux-notification-controller, litefs, shfmt, nuclei, php-fpm_exporter, lazygit, tempo, vexctl, nri-couchbase, kpt, gobuster, kuberay-operator, argo-workflows, prometheus-nats-exporter,....

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, docker-credential-acr-env, go-bindata, k9s, tekton-chains, wait-for-port, trillian, karpenter, go, smarter-device-manager, dockerize,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, docker-credential-acr-env, go-bindata, k9s, tekton-chains, wait-for-port, trillian, karpenter, go, smarter-device-manager, dockerize,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: bank-vaults, boring-registry, helm-docs, buf, kubevela, configmap-reload, nri-prometheus, tkn, libnvidia-container, flux-notification-controller, gops, litefs, shfmt, php-fpm_exporter, nerdctl, lazygit, tempo, vexctl, nri-couchbase, kpt, docker, gobuster,...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, gitsign, goreleaser, spire-server, terragrunt, gh, scorecard, snyk-cli, fulcio, terraform-provider-azurerm, tekton-chains, vault-csi-provider, k3d, flux-kustomize-controller, kargo, flux, rook, step-ca, timestamp-authority,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, thanos-operator, trillian, karpenter, prometheus-node-exporter, kubevela, kubernetes-csi-external-resizer, nri-prometheus, tkn, kubernetes-csi-livenessprobe,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, vault-k8s, boring-registry, gitness, istio-pilot-agent, docker-credential-acr-env, fq, tekton-chains, istio-pilot-discovery, trillian, prometheus-node-exporter, buf, dockerize, cadvisor, go-licenses, tkn, kubescape, kubewatch, nsc, helm, aactl,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: gitsign, goreleaser, trivy, scorecard, kubeflow-katib, argo-workflows, istio-pilot-agent, bom, k9s, kots, tekton-chains, kargo, istio-pilot-discovery, gitlab-runner, flux-image-reflector-controller, up, kubevela, dagger, filebeat, prometheus, cadvisor, telegraf, guac,....

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, istio-pilot-agent, k9s, tekton-chains, thanos-operator, istio-pilot-discovery, trillian, karpenter, prometheus-node-exporter,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, goreleaser, spire-server, terragrunt, velero, trivy, boring-registry, restic, sqlpad, fulcio, argo-workflows, tekton-chains, flux-kustomize-controller, flux, rook, step-ca, timestamp-authority, gitlab-runner, flux-image-reflector-controller, up,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, goreleaser, spire-server, terragrunt, velero, trivy, boring-registry, restic, sqlpad, fulcio, argo-workflows, tekton-chains, flux-kustomize-controller, flux, rook, step-ca, timestamp-authority, gitlab-runner, flux-image-reflector-controller, up,...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, argo-cd, melange, pulumi-kubernetes-operator,...

GHSA-88JX-383Q-W4QC vulnerabilities

Vulnerabilities for packages: gitsign, goreleaser, spire-server, tekton-chains, melange, apko, tkn, kubescape, aactl, zot, falco, falcoctl, skaffold, flux-source-controller, ko, wolfictl, vexctl, neuvector-sigstore-interface, zarf, policy-controller,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: bank-vaults, boring-registry, buf, kubevela, configmap-reload, nri-prometheus, tkn, flux-notification-controller, litefs, shfmt, nuclei, php-fpm_exporter, lazygit, tempo, vexctl, nri-couchbase, kpt, gobuster, kuberay-operator, argo-workflows, prometheus-nats-exporter,....

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, docker-credential-acr-env, go-bindata, k9s, tekton-chains, wait-for-port, trillian, karpenter, go, smarter-device-manager, dockerize,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: bank-vaults, boring-registry, helm-docs, buf, kubevela, configmap-reload, nri-prometheus, tkn, libnvidia-container, flux-notification-controller, gops, litefs, shfmt, php-fpm_exporter, nerdctl, lazygit, tempo, vexctl, nri-couchbase, kpt, docker, gobuster,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, istio-pilot-agent, tekton-chains, thanos-operator, istio-pilot-discovery, trillian, karpenter, go, prometheus-node-exporter, kubevela,...

CVE-2023-46737 vulnerabilities

Vulnerabilities for packages: goreleaser, falco, aactl, spire-server, melange, skaffold, ko, cosign, apko, tekton-chains, policy-controller, tkn, kubescape,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: keda, gitsign, goreleaser, spire-server, terragrunt, scorecard, boring-registry, gitness, tekton-chains, flux-kustomize-controller, flux, terraform-provider-google, flux-image-automation-controller, kubevela, melange, sops, apko, actions-runner-controller, tkn,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: keda, gitsign, goreleaser, spire-server, terragrunt, fulcio, containerd, argo-workflows, istio-pilot-agent, tekton-chains, flux-kustomize-controller, kargo, rook, step-ca, timestamp-authority, istio-pilot-discovery, oauth2-proxy, melange, cilium, dex, cloudflared,...