Windows Kernel In Microsoft Windows 8.1, Windows Server 2012 Gold And R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, And 1703, And Windows Server 2016 Security Vulnerabilities

CVE-2024-4419 Fetch JFT <= 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

The Fetch JFT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

CVE-2024-21512

Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using...

CVE-2024-4611 AppPresser <= 4.3.2 - Improper Missing Encryption Exception Handling to Authentication Bypass

The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decrypt_value' and on the 'doCookieAuth' functions in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to log in as any existing user on the...

CVE-2023-6743 Unlimited Elements for Elementor <= 1.5.89 - Authenticated(Contributor+) Remote Code Execution via template import

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.89 via the template import functionality. This makes it possible for authenticated attackers, with contributor access and...

CVE-2024-0434 WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly <= 1.7.1 - Missing Authorization via ttbm_new_place_save

The WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ttbm_new_place_save' function in all versions up to, and including, 1.7.1. This makes it possible for...

CVE-2022-3857 affecting package syslinux 6.04-10

CVE-2022-3857 affecting package syslinux 6.04-10. No patch is available...

CVE-2012-3381 affecting package sblim-sfcb 1.4.9-20

CVE-2012-3381 affecting package sblim-sfcb 1.4.9-20. No patch is available...

CVE-2012-2653 affecting package arpwatch 2.1a15-51

CVE-2012-2653 affecting package arpwatch 2.1a15-51. No patch is available...

CVE-2016-9179 affecting package lynx 2.9.0~dev.9-5

CVE-2016-9179 affecting package lynx 2.9.0~dev.9-5. This CVE either no longer is or was never...

CVE-2022-3114 affecting package kernel 5.15.158.1-1

CVE-2022-3114 affecting package kernel 5.15.158.1-1. No patch is available...

CVE-2022-45885 affecting package kernel 5.15.158.1-1

CVE-2022-45885 affecting package kernel 5.15.158.1-1. No patch is available...

CVE-2022-40133 affecting package kernel 5.15.158.1-1

CVE-2022-40133 affecting package kernel 5.15.158.1-1. No patch is available...

CVE-2022-38096 affecting package kernel 5.15.158.1-1

CVE-2022-38096 affecting package kernel 5.15.158.1-1. No patch is available...

CVE-2022-2961 affecting package kernel 5.15.158.1-1

CVE-2022-2961 affecting package kernel 5.15.158.1-1. No patch is available...

CVE-2021-3847 affecting package kernel 5.15.158.1-1

CVE-2021-3847 affecting package kernel 5.15.158.1-1. No patch is available...

CVE-2016-2124 affecting package samba 4.12.5-6

CVE-2016-2124 affecting package samba 4.12.5-6. No patch is available...

CVE-2016-4912 affecting package openslp 2.0.0-26

CVE-2016-4912 affecting package openslp 2.0.0-26. No patch is available...

CVE-2022-43552 affecting package cmake 3.21.4-10

CVE-2022-43552 affecting package cmake 3.21.4-10. No patch is available...

CVE-2023-23916 affecting package cmake 3.21.4-10

CVE-2023-23916 affecting package cmake 3.21.4-10. No patch is available...

CVE-2023-23915 affecting package cmake 3.21.4-10

CVE-2023-23915 affecting package cmake 3.21.4-10. No patch is available...

CVE-2022-4543 affecting package kernel 5.15.158.1-1

CVE-2022-4543 affecting package kernel 5.15.158.1-1. No patch is available...

CVE-2022-38457 affecting package kernel 5.15.158.1-1

CVE-2022-38457 affecting package kernel 5.15.158.1-1. No patch is available...

CVE-2016-1000104 affecting package mod_fcgid 2.3.9-21

CVE-2016-1000104 affecting package mod_fcgid 2.3.9-21. No patch is available...

CVE-2016-2568 affecting package polkit 0.119-3

CVE-2016-2568 affecting package polkit 0.119-3. No patch is available...

CVE-2016-8681 affecting package libdwarf for versions less than 0.9.0

CVE-2016-8681 affecting package libdwarf for versions less than 0.9.0. A patched version of the package is...

CVE-2023-44487 affecting package prometheus for versions less than 2.37.0-10

CVE-2023-44487 affecting package prometheus for versions less than 2.37.0-10. A patched version of the package is...

CVE-2023-44487 affecting package cmake for versions less than 3.21.4-10

CVE-2023-44487 affecting package cmake for versions less than 3.21.4-10. A patched version of the package is...

CVE-2023-23039 affecting package kernel 5.10.189.1-1

CVE-2023-23039 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2022-3114 affecting package kernel 5.10.189.1-1

CVE-2022-3114 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2022-3108 affecting package kernel 5.10.189.1-1

CVE-2022-3108 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2022-45885 affecting package kernel 5.10.189.1-1

CVE-2022-45885 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2022-3344 affecting package kernel 5.10.189.1-1

CVE-2022-3344 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2022-38457 affecting package kernel 5.10.189.1-1

CVE-2022-38457 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2022-2961 affecting package kernel 5.10.189.1-1

CVE-2022-2961 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2021-3669 affecting package kernel 5.10.189.1-1

CVE-2021-3669 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2016-3709 affecting package libxml2 2.9.14-3

CVE-2016-3709 affecting package libxml2 2.9.14-3. This CVE either no longer is or was never...

CVE-2016-2568 affecting package polkit 0.116-7

CVE-2016-2568 affecting package polkit 0.116-7. No patch is available...

CVE-2022-38096 affecting package kernel 5.10.189.1-1

CVE-2022-38096 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2022-0480 affecting package kernel 5.10.189.1-1

CVE-2022-0480 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2022-40133 affecting package kernel 5.10.189.1-1

CVE-2022-40133 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2022-4543 affecting package kernel 5.10.189.1-1

CVE-2022-4543 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2021-3773 affecting package kernel 5.10.189.1-1

CVE-2021-3773 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2021-3847 affecting package kernel 5.10.189.1-1

CVE-2021-3847 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2023-26242 affecting package kernel 5.10.189.1-1

CVE-2023-26242 affecting package kernel 5.10.189.1-1. No patch is available...

CVE-2023-0468 affecting package kernel 5.10.189.1-1

CVE-2023-0468 affecting package kernel 5.10.189.1-1. No patch is available...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: skaffold, goreleaser, tkn, aactl, flux-source-controller, zot, spire-server, melange, policy-controller, tekton-chains, zarf, wolfictl, apko, gitsign, ko, vexctl, falco, falcoctl, slsa-verifier,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: skaffold, secrets-store-csi-driver-provider-gcp, kpt, kaf, haproxy-ingress, flux-source-controller, metrics-server, influxd, minio, up, prometheus-bind-exporter, wireguard-go, ollama, external-dns, nats, dotnet, coredns, grype, nghttp2, hey, gitlab-pages, gatekeeper,.....

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: tkn, terragrunt, sops, keda, cloudflared, cosign, aactl, argo-cd, flux-source-controller, spire-server, kots, vault, rekor, tekton-chains, cilium-envoy, kyverno, cert-manager, external-secrets-operator, gitsign, fulcio, argo-workflows, istio-pilot-discovery, vexctl,...

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: skaffold, goreleaser, kpt, scorecard, k3s, aactl, up, tekton-chains, chartmuseum, bom, cert-manager, loki, tekton-pipelines, paranoia, falco, ctop, slsa-verifier, prometheus, kubescape,...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: goreleaser, tkn, trivy, conftest, dagger, aactl, zot, up, spire-server, melange, crossplane, docker-compose, kaniko, telegraf, kargo, wolfictl, grype, syft, ko, buf, loki, buildkitd, datadog-agent, cadvisor, ctop, prometheus,...