GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: ollama, datadog-agent, kyverno-policy-reporter-ui, prometheus-statsd-exporter, nats, kube-logging-operator, protoc-gen-go-grpc, local-path-provisioner, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler,...
7.5AI Score
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
7.8AI Score
0.0004EPSS
CVE-2023-45285 vulnerabilities
Vulnerabilities for packages: influx, aws-flb-firehose, mage, nats, protoc-gen-go-grpc, falco, local-path-provisioner, aws-flb-cloudwatch, slsa-verifier, goreleaser, cilium-envoy, flannel-cni-plugin, prometheus-stackdriver-exporter, sbom-scorecard, ip-masq-agent, gobuster, render-template,...
7.5CVSS
7.9AI Score
0.001EPSS
CVE-2023-48795 vulnerabilities
Vulnerabilities for packages: bom, ollama, prometheus-statsd-exporter, nats, fq, local-path-provisioner, kubernetes, flux-image-reflector-controller, grype, certificate-transparency, step-ca, cadvisor, eksctl, frp, prometheus, conftest, apko, prometheus-node-exporter, gatekeeper, tekton-chains,...
5.9CVSS
7.1AI Score
0.963EPSS
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: ollama, datadog-agent, kyverno-policy-reporter-ui, prometheus-statsd-exporter, nats, kube-logging-operator, protoc-gen-go-grpc, local-path-provisioner, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler,...
6.6AI Score
0.0004EPSS
CVE-2024-24784 vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
7.8AI Score
0.0004EPSS
GHSA-RR6R-CFGF-GC6H vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
7.5AI Score
CVE-2023-45288 vulnerabilities
Vulnerabilities for packages: datadog-agent, multus-cni, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, docker-cli, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, cert-exporter,...
6.8AI Score
0.0004EPSS
CVE-2024-24787 vulnerabilities
Vulnerabilities for packages: bom, ipfs, mage, multus-cni, kyverno-policy-reporter-ui, prometheus-statsd-exporter, local-path-provisioner, kubernetes-ingress-defaultbackend, stern, kubernetes, flux-image-reflector-controller, kubernetes-csi-external-attacher, extism, osv-scanner,...
6.5AI Score
0.0004EPSS
GHSA-5FQ7-4MXC-535H vulnerabilities
Vulnerabilities for packages: bom, ipfs, mage, multus-cni, kyverno-policy-reporter-ui, prometheus-statsd-exporter, local-path-provisioner, kubernetes-ingress-defaultbackend, stern, kubernetes, flux-image-reflector-controller, kubernetes-csi-external-attacher, extism, osv-scanner,...
7.5AI Score
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: datadog-agent, hivemind, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, snyk-cli, cert-exporter,...
5.5CVSS
6.1AI Score
0.0004EPSS
GHSA-2JWV-JMQ4-4J3R vulnerabilities
Vulnerabilities for packages: bom, ipfs, mage, multus-cni, kyverno-policy-reporter-ui, prometheus-statsd-exporter, local-path-provisioner, kubernetes-ingress-defaultbackend, stern, kubernetes, flux-image-reflector-controller, kubernetes-csi-external-attacher, extism, osv-scanner,...
7.5AI Score
GHSA-4V7X-PQXF-CX7M vulnerabilities
Vulnerabilities for packages: datadog-agent, multus-cni, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, docker-cli, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, cert-exporter,...
7.5AI Score
CVE-2024-24790 vulnerabilities
Vulnerabilities for packages: datadog-agent, hivemind, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, snyk-cli, cert-exporter,...
9.8CVSS
9.8AI Score
0.001EPSS
GHSA-3Q2C-PVP5-3CQP vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
7.5AI Score
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
7.5AI Score
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
7.5AI Score
CVE-2024-24785 vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
7.8AI Score
0.0004EPSS
CVE-2023-39326 vulnerabilities
Vulnerabilities for packages: influx, aws-flb-firehose, mage, nats, protoc-gen-go-grpc, falco, local-path-provisioner, aws-flb-cloudwatch, slsa-verifier, goreleaser, cilium-envoy, flannel-cni-plugin, prometheus-stackdriver-exporter, sbom-scorecard, ip-masq-agent, gobuster, render-template,...
5.3CVSS
7.2AI Score
0.001EPSS
GHSA-9F76-WG39-X86H vulnerabilities
Vulnerabilities for packages: influx, aws-flb-firehose, mage, nats, protoc-gen-go-grpc, falco, local-path-provisioner, aws-flb-cloudwatch, slsa-verifier, goreleaser, cilium-envoy, flannel-cni-plugin, prometheus-stackdriver-exporter, sbom-scorecard, ip-masq-agent, gobuster, render-template,...
7.5AI Score
GHSA-5F94-VHJQ-RPG8 vulnerabilities
Vulnerabilities for packages: influx, aws-flb-firehose, mage, nats, protoc-gen-go-grpc, falco, local-path-provisioner, aws-flb-cloudwatch, slsa-verifier, goreleaser, cilium-envoy, flannel-cni-plugin, prometheus-stackdriver-exporter, sbom-scorecard, ip-masq-agent, gobuster, render-template,...
7.5AI Score
GHSA-45X7-PX36-X8W8 vulnerabilities
Vulnerabilities for packages: bom, ollama, prometheus-statsd-exporter, nats, fq, local-path-provisioner, kubernetes, flux-image-reflector-controller, grype, certificate-transparency, step-ca, cadvisor, eksctl, frp, prometheus, conftest, apko, prometheus-node-exporter, gatekeeper, tekton-chains,...
7.5AI Score
CVE-2024-24783 vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
7.8AI Score
0.0004EPSS
GHSA-32CH-6X54-Q4H9 vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
7.5AI Score
GHSA-49GW-VXVF-FC2G vulnerabilities
Vulnerabilities for packages: datadog-agent, hivemind, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, snyk-cli, cert-exporter,...
7.5AI Score
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: bom, ipfs, mage, multus-cni, kyverno-policy-reporter-ui, prometheus-statsd-exporter, local-path-provisioner, kubernetes-ingress-defaultbackend, stern, kubernetes, flux-image-reflector-controller, kubernetes-csi-external-attacher, extism, osv-scanner,...
6.5AI Score
0.0004EPSS
GHSA-236W-P7WF-5PH8 vulnerabilities
Vulnerabilities for packages: datadog-agent, hivemind, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, snyk-cli, cert-exporter,...
7.5AI Score
CVE-2023-45290 vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
6AI Score
0.0004EPSS
CVE-2023-44487 affecting package local-path-provisioner for versions less than 0.0.21-12
CVE-2023-44487 affecting package local-path-provisioner for versions less than 0.0.21-12. A patched version of the package is...
7.5CVSS
8.2AI Score
0.732EPSS
9.8CVSS
9.6AI Score
0.038EPSS
Exploit for Improper Preservation of Permissions in Mobyproject Moby
CVE-2021-41091 This exploit offers an in-depth look at the...
7.9AI Score
9.1CVSS
0.0004EPSS
9.1CVSS
9.4AI Score
0.0004EPSS
CVE-2024-5926 Path Traversal: '\..\filename' in stitionai/devika
Path Traversal: '..\filename' in GitHub repository stitionai/devika prior to...
9.1CVSS
0.0004EPSS
Metasploit Weekly Wrap-Up 06/28/2024
Unauthenticated Command Injection in Netis Router This week's Metasploit release includes an exploit module for an unauthenticated command injection vulnerability in the Netis MW5360 router which is being tracked as CVE-2024-22729. The vulnerability stems from improper handling of the password...
9.8CVSS
9AI Score
0.005EPSS
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path...
5.9CVSS
0.0004EPSS
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path...
5.9CVSS
5.5AI Score
0.0004EPSS
CVE-2024-25053 IBM Cognos Analytics improper certificate validation
IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path...
5.9CVSS
0.0004EPSS
LocalAI path traversal vulnerability in github.com/go-skynet/LocalAI
LocalAI path traversal vulnerability in...
7.5CVSS
6.7AI Score
0.0004EPSS
9.8CVSS
7.4AI Score
0.038EPSS
Glastonbury ticket hijack vulnerability fixed
The Glastonbury ticket website was vulnerable to a relatively simple attack that that allowed ticket theft and data leakage. What’s the issue? An attacker could scrape collaborative ticket buying websites (e.g. Reddit) to gather people’s details, use a flaw in the registration process and session.....
6.8AI Score
Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before...
0.0004EPSS
Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before...
6.5AI Score
0.0004EPSS
CVE-2024-5735 Full Path Disclosure in AdmirorFrames Joomla! Extension
Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised attacker to retrieve location of web root folder. This issue affects AdmirorFrames: before...
0.0004EPSS
New SnailLoad Attack Exploits Network Latency to Spy on Users' Web Activities
A group of security researchers from the Graz University of Technology have demonstrated a new side-channel attack known as SnailLoad that could be used to remotely infer a user's web activity. "SnailLoad exploits a bottleneck present on all Internet connections," the researchers said in a study...
7.4AI Score
A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in the Language Settings functionality. This allows remote attackers to read specific files containing non-sensitive information via unspecified vectors. The following models with...
5.3CVSS
5.2AI Score
0.0004EPSS
A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in the Language Settings functionality. This allows remote attackers to read specific files containing non-sensitive information via unspecified vectors. The following models with...
5.3CVSS
0.0004EPSS
A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in the Language Settings functionality. This allows remote attackers to read specific files containing non-sensitive information via unspecified vectors. The following models with...
5.3CVSS
0.0004EPSS
EulerOS 2.0 SP12 : kernel (EulerOS-SA-2024-1859)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init When the...
8CVSS
7.5AI Score
0.0004EPSS
K000140189: Linux kernel vulnerability CVE-2021-47572
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix null pointer dereference when IPv6 is not enabled When we try to add an IPv6 nexthop and IPv6 is not enabled (!CONFIG_IPV6) we'll hit a NULL pointer dereference[1] in the error path.....
5.5CVSS
6.4AI Score
0.0004EPSS