User Registration – Custom Registration Form, Login And User Profile For WordPress Security Vulnerabilities

caddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting in github.com/greenpau/caddy-security

caddy-security plugin for Caddy vulnerable to reflected Cross-site Scripting in...

Use of Insufficiently Random Values in github.com/greenpau/caddy-security

Use of Insufficiently Random Values in...

Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only in go.etcd.io/etcd

Etcd auth Inaccurate logging of authentication attempts for users with CN-based auth only in...

Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers in github.com/dexidp/dex

Dex discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers in...

Improper Restriction of Excessive Authentication Attempts in github.com/greenpau/caddy-security

Improper Restriction of Excessive Authentication Attempts in...

Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana

Grafana XSS via a query alias for the ElasticSearch datasource in...

CubeFS timing attack can leak user passwords in github.com/cubefs/cubefs

CubeFS timing attack can leak user passwords in...

Buildkite Elastic CI for AWS time-of-check-time-of-use race condition vulnerability in github.com/buildkite/elastic-ci-stack-for-aws

Buildkite Elastic CI for AWS time-of-check-time-of-use race condition vulnerability in...

Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation in github.com/minio/minio

Minio unsafe default: Access keys inherit admin of root user, allowing privilege escalation in...

Enumeration of users in HashiCorp Vault in github.com/hashicorp/vault

Enumeration of users in HashiCorp Vault in...

Improper Neutralization of HTTP Headers in github.com/greenpau/caddy-security

Improper Neutralization of HTTP Headers in...

Server-Side Request Forgery in github.com/greenpau/caddy-security

Server-Side Request Forgery in...

Cross-site Scripting in github.com/greenpau/caddy-security

Cross-site Scripting in...

Insufficient Session Expiration in github.com/greenpau/caddy-security

Insufficient Session Expiration in...

Insecure random string generator used for sensitive data in github.com/cubefs/cubefs

Insecure random string generator used for sensitive data in...

SFTP is possible on the Proxy server for any user with SFTP access in github.com/gravitational/teleport

SFTP is possible on the Proxy server for any user with SFTP access in...

Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider in github.com/rancher/rancher

Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider in...

SFTPGo has insufficient access control for password reset in github.com/drakkan/sftpgo

SFTPGo has insufficient access control for password reset in...

GHSA-232P-VWFF-86MP vulnerabilities

Vulnerabilities for packages: bom, ctop, up, ko, melange, helm,...

CVE-2024-4368 vulnerabilities

Vulnerabilities for packages:...

GHSA-5R57-JCC8-JHH3 vulnerabilities

Vulnerabilities for packages:...

CVE-2022-3736 vulnerabilities

Vulnerabilities for packages:...

GHSA-9766-5277-J5HR vulnerabilities

Vulnerabilities for packages:...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, argo-cd, melange, flux-notification-controller,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: node-feature-discovery, spark-operator, kubernetes-dns-node-cache, local-static-provisioner, aws-ebs-csi-driver, kubernetes, kubernetes-csi-driver-hostpath, cluster-autoscaler, calico, nodetaint,...

GHSA-JM46-725R-HH9V vulnerabilities

Vulnerabilities for packages: aws-cli-v2,...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: policy-controller, ko, gitsign, skaffold, zot, aactl, vexctl, wolfictl, tkn, spire-server, flux-source-controller, slsa-verifier, melange, neuvector-sigstore-interface, apko, goreleaser, kubescape, tekton-chains, falcoctl, falco,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: cert-manager, gitsign, cosign, fulcio, traefik, istio-pilot-discovery, aactl, keda, vault, vexctl, external-secrets-operator, cilium-envoy, tkn, oauth2-proxy, tekton-pipelines, dex, flux-kustomize-controller, rekor, spire-server, argo-cd, sops, terragrunt,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: buildkitd, ctop, ko, prometheus, trivy, syft, zot, aactl, up, wolfictl, tkn, spire-server, melange, crossplane, kargo, dagger, loki, datadog-agent, kaniko, grype, conftest, goreleaser, kubescape, buf, telegraf, cadvisor,...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: buildkitd, ctop, ko, prometheus, trivy, syft, zot, aactl, up, wolfictl, tkn, spire-server, melange, crossplane, kargo, dagger, loki, datadog-agent, kaniko, grype, conftest, goreleaser, kubescape, buf, telegraf, cadvisor,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: thanos, flux-image-reflector-controller, ctop, kube-fluentd-operator, terraform, k8sgpt-operator, pulumi-language-dotnet, kubernetes-csi-external-resizer, trivy, prometheus-mysqld-exporter, traefik, istio-pilot-discovery, aws-load-balancer-controller, up,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: thanos, flux-image-reflector-controller, delve, ctop, docker-cli, terraform, k8sgpt-operator, govulncheck, kubernetes-csi-external-resizer, vexctl, prometheus-mysqld-exporter, aws-load-balancer-controller, gobuster, up, memcached-exporter, regclient, kuberay-operator,....

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: temporal-server, amass, kots, kube-bench, telegraf, keda, vault, kine, spicedb, caddy, ferretdb, step-ca, trillian, src, argo-workflows,...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: argo-cd, aws-efs-csi-driver, cluster-autoscaler,...

CVE-2023-38470 vulnerabilities

Vulnerabilities for packages:...

GHSA-5QM6-J92F-79JP vulnerabilities

Vulnerabilities for packages:...

GHSA-797F-63WG-8CHV vulnerabilities

Vulnerabilities for packages: aws-cli-v2,...

CVE-2024-26130 vulnerabilities

Vulnerabilities for packages: az, ggshield, kubeflow-pipelines, py3-cryptography,...

GHSA-5V6F-5GPQ-2628 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-4408 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-5679 vulnerabilities

Vulnerabilities for packages:...

GHSA-V5QP-MX94-J49V vulnerabilities

Vulnerabilities for packages:...

GHSA-M868-F948-VVJC vulnerabilities

Vulnerabilities for packages:...

CVE-2023-5680 vulnerabilities

Vulnerabilities for packages:...

GHSA-7P63-JGG6-RGPV vulnerabilities

Vulnerabilities for packages:...

GHSA-X84C-P2G9-RQV9 vulnerabilities

Vulnerabilities for packages: prometheus, harbor-scanner-trivy, buf, policy-controller, cri-tools, wolfictl, k3d, neuvector-scanner, docker, melange, helm-push, docker-compose, dagger, syft, tekton-pipelines, kaniko,...

GHSA-C5PJ-MQFH-RVC3 vulnerabilities

Vulnerabilities for packages: buildah,...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: skaffold, zot, kubescape, buildkitd, guac, kaniko, scorecard, docker, conftest, trivy,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: buildkitd, ctop, newrelic-infrastructure-agent, docker, k9s, trivy, syft, skaffold, zot, kubernetes, wolfictl, nvidia-device-plugin, k3s, k3d, skopeo, runc, kaniko, datadog-agent, grype, kubescape, kots, ingress-nginx-controller, telegraf, cadvisor, nerdctl,...

CVE-2023-31130 vulnerabilities

Vulnerabilities for packages:...