Embedpress – Embed Pdf, Google Docs, Vimeo, Wistia, Embed Youtube Videos, Audios, Maps & Embed Any Documents In Gutenberg & Elementor Security Vulnerabilities

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS RM3/CRS dispenser firmware (all versions up to and including 41128 1002 RM3_CRS.BTR + 170329 2332 RM3_CRS.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5 CMDv5 dispenser firmware (all versions up to and including 141128 1002 CD5_ATM.BTR + 170329 2332 CD5_ATM.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, prometheus-stackdriver-exporter, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter,....

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, eksctl, terragrunt, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, spark-operator, influx, terraform, cadvisor, ytt,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, helm-push, prometheus-stackdriver-exporter, regclient, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, neuvector-scanner, oras, cortex, overmind, mockery, extism, runc, kpt, docker-credential-gcr,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, helm-push, prometheus-stackdriver-exporter, regclient, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, neuvector-scanner, oras, cortex, overmind, mockery, extism, runc, kpt, docker-credential-gcr,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, terragrunt, extism, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, influx, hey, terraform, cadvisor, ctop, ytt, nfs-subdir-external-provisioner,....

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: k3d, prometheus-stackdriver-exporter, actions-runner-controller, helm-push, dynamic-localpv-provisioner, trillian, skopeo, atlantis, eksctl, cortex, kubeflow-pipelines, prometheus-postgres-exporter, terragrunt, istio-cni, gobuster,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, prometheus-stackdriver-exporter, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter,....

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, eksctl, terragrunt, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, spark-operator, influx, terraform, cadvisor, ytt,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, terragrunt, extism, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, influx, hey, terraform, cadvisor, ctop, ytt, nfs-subdir-external-provisioner,....

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: falco, flux, actions-runner-controller, cosign, vault, tekton-chains, melange, grafana, terragrunt, zot, flux-image-automation-controller, kubevela, gitsign, skaffold, scorecard, sops, flux-notification-controller, pulumi-language-dotnet, crossplane-provider-aws,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, helm-push, prometheus-stackdriver-exporter, regclient, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, neuvector-scanner, oras, cortex, overmind, mockery, extism, runc, kpt, docker-credential-gcr,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, terragrunt, extism, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, influx, hey, terraform, cadvisor, ctop, ytt, nfs-subdir-external-provisioner,....

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: k3d, prometheus-stackdriver-exporter, actions-runner-controller, helm-push, dynamic-localpv-provisioner, trillian, skopeo, atlantis, eksctl, cortex, kubeflow-pipelines, prometheus-postgres-exporter, terragrunt, istio-cni, gobuster,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, helm-push, prometheus-stackdriver-exporter, regclient, dynamic-localpv-provisioner, trillian, skopeo, chartmuseum, atlantis, eksctl, neuvector-scanner, oras, cortex, overmind, mockery, extism, runc, kpt, docker-credential-gcr,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: k3d, helm-push, trillian, chartmuseum, atlantis, terragrunt, extism, kpt, docker-credential-gcr, gobump, flannel-cni-plugin, nri-consul, crossplane-provider-azure, loki, prometheus, pombump, influx, hey, terraform, cadvisor, ctop, ytt, nfs-subdir-external-provisioner,....

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: k3d, kubernetes-dns-node-cache, actions-runner-controller, dagger, helm-push, regclient, dynamic-localpv-provisioner, trillian, yam, chartmuseum, eksctl, oras, cortex, cluster-proportional-autoscaler, kubeflow-pipelines, prometheus-postgres-exporter, mockery, runc,...

CVE-2024-4836 LFI in sites managed by Edito CMS

Web services managed by Edito CMS (Content Management System) in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user. The issue in versions 3.5 - 3.25 was removed in releases which dates from 10th of January 2014. Higher...

CVE-2024-4836 LFI in sites managed by Edito CMS

Web services managed by Edito CMS (Content Management System) in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthenticated user. The issue in versions 3.5 - 3.25 was removed in releases which dates from 10th of January 2014. Higher...

Exploit for Path Traversal in Grafana

Grafana Decryptor for CVE-2021-43798 This script decrypts...

Exploit for Path Traversal in Grafana

Grafana Decryptor for CVE-2021-43798 This script decrypts...

CVE-2024-5260 Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter

The Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘read_more_text’ parameter in all versions up to, and including, 3.5.5 due to...

CVE-2024-5260 Sina Extension for Elementor <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via read_more_text Parameter

The Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘read_more_text’ parameter in all versions up to, and including, 3.5.5 due to...

CVE-2024-5545

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stm_edit_delete_user_car function in all versions up to, and including, 1.4.8. This makes it possible for unauthenticated attackers to...

CVE-2024-5545

The Motors – Car Dealer, Classifieds & Listing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the stm_edit_delete_user_car function in all versions up to, and including, 1.4.8. This makes it possible for unauthenticated attackers to...

CVE-2024-38857

Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows attackers to craft malicious links that can facilitate phishing...

CVE-2024-3513

The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the title tag parameter in all versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2024-5504

The Rife Elementor Extensions & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' attribute within the plugin's Writing Effect Headline widget in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user...

CVE-2024-5544

The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the order parameter in all versions up to, and including, 3.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

CVE-2024-5544

The Media Library Assistant plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the order parameter in all versions up to, and including, 3.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

CVE-2024-3513

The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the title tag parameter in all versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...

CVE-2024-38857

Improper neutralization of input in Checkmk before versions 2.3.0p8, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows attackers to craft malicious links that can facilitate phishing...

CVE-2024-37479

Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through...

CVE-2024-37479

Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widget in New Post, specifically in the "progress_type" attribute.This issue affects LA-Studio Element Kit for Elementor: from n/a through...

CVE-2024-5504

The Rife Elementor Extensions & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' attribute within the plugin's Writing Effect Headline widget in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user...

CVE-2023-41922

A 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation, has been discovered. This vulnerability allows for Stored XSS attacks to occur. Multiple areas within the administration interface of the webserver lack adequate input...

CVE-2023-41922

A 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation, has been discovered. This vulnerability allows for Stored XSS attacks to occur. Multiple areas within the administration interface of the webserver lack adequate input...

CVE-2023-41920

The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the device is configured with the IP address of 10.10.10.10, the root user is automatically logged...

CVE-2023-41920

The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the device is configured with the IP address of 10.10.10.10, the root user is automatically logged...

CVE-2024-37077 Arkcompiler Ets Runtime has an out-of-bounds write vulnerability

in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds...