GHSA-2WRH-6PVC-2JM9 vulnerabilities
Vulnerabilities for packages: bom, ollama, prometheus-statsd-exporter, kube-logging-operator, kubernetes-csi-external-attacher, flux-image-reflector-controller, kubernetes-csi-external-resizer, frp, prometheus, vertical-pod-autoscaler, apko, prometheus-node-exporter, gatekeeper, cloud-sql-proxy,...
7.5AI Score
GHSA-HQXW-F8MX-CPMW vulnerabilities
Vulnerabilities for packages: bom, kpt, kubernetes-dashboard, aactl, goreleaser,...
7.5AI Score
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: neuvector-agent, pulumi-language-java, dex, dynamic-localpv-provisioner, influxd, envoy-ratelimit, gitlab-pages, falco, slsa-verifier, minio, goreleaser, cilium-envoy, argo-cd, grype, kubernetes-csi-external-attacher, node-problem-detector, pulumi-language-dotnet,...
7.5AI Score
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: nginx-mainline, bom, ollama, nats, kubernetes-csi-external-attacher, grype, frp, prometheus, conftest, gatekeeper, amass, nvidia-device-plugin, pulumi-kubernetes-operator, tctl, flux-notification-controller, thanos, haproxy-ingress, sigstore-scaffolding, traefik,...
7.5AI Score
CVE-2024-24783 vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
7.8AI Score
0.0004EPSS
GHSA-32CH-6X54-Q4H9 vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
7.5AI Score
GHSA-49GW-VXVF-FC2G vulnerabilities
Vulnerabilities for packages: datadog-agent, hivemind, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, snyk-cli, cert-exporter,...
7.5AI Score
7.5AI Score
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: bom, ipfs, mage, multus-cni, kyverno-policy-reporter-ui, prometheus-statsd-exporter, local-path-provisioner, kubernetes-ingress-defaultbackend, stern, kubernetes, flux-image-reflector-controller, kubernetes-csi-external-attacher, extism, osv-scanner,...
6.5AI Score
0.0004EPSS
GHSA-236W-P7WF-5PH8 vulnerabilities
Vulnerabilities for packages: datadog-agent, hivemind, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, snyk-cli, cert-exporter,...
7.5AI Score
CVE-2023-45290 vulnerabilities
Vulnerabilities for packages: bom, datadog-agent, mage, prometheus-statsd-exporter, nats, fq, kube-logging-operator, local-path-provisioner, protoc-gen-go-grpc, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler, kubernetes-csi-external-attacher, regclient, yam,...
6AI Score
0.0004EPSS
CVE-2023-49568 vulnerabilities
Vulnerabilities for packages: bom, pulumi-language-java, goreleaser, pulumi-language-dotnet, argo-cd, gomplate, apko, gitsign, kots, go-licenses, gitness, nuclei, pulumi-kubernetes-operator, src-fingerprint, flux-kustomize-controller, pulumi, scorecard, kubevela, pulumi-language-yaml, zot,...
7.5CVSS
7.8AI Score
0.0005EPSS
GHSA-PXHW-596R-RWQ5 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, node-feature-discovery, ip-masq-agent, spark-operator, cluster-autoscaler, nodetaint, calico, kubernetes-csi-driver-hostpath, local-static-provisioner, kubernetes-dns-node-cache,...
7.5AI Score
GHSA-XR7R-F8XQ-VFVV vulnerabilities
Vulnerabilities for packages: runc, datadog-agent, k3s, ingress-nginx-controller, syft, kubernetes, grype, zarf, cadvisor, kaniko, newrelic-infrastructure-agent, k9s, kubescape, kots, telegraf, nvidia-device-plugin, buildkitd, nerdctl, trivy, ctop, k3d, wolfictl, docker, zot, skopeo,...
7.5AI Score
CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-20
CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-20. This CVE either no longer is or was never...
5.5CVSS
6.3AI Score
0.001EPSS
CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-20
CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-20. This CVE either no longer is or was never...
7.5CVSS
7.9AI Score
0.005EPSS
CVE-2023-44487 affecting package kubernetes for versions less than 1.28.3-1
CVE-2023-44487 affecting package kubernetes for versions less than 1.28.3-1. A patched version of the package is...
7.5CVSS
7.8AI Score
0.732EPSS
CVE-2021-25741 affecting package kubernetes-1.21.2 1.21.2-7
CVE-2021-25741 affecting package kubernetes-1.21.2 1.21.2-7. No patch is available...
8.8CVSS
8.9AI Score
EPSS
CVE-2021-25741 affecting package kubernetes-1.20.9 1.20.9-7
CVE-2021-25741 affecting package kubernetes-1.20.9 1.20.9-7. No patch is available...
8.8CVSS
8.9AI Score
EPSS
CVE-2021-25741 affecting package kubernetes-1.19.13 1.19.13-5
CVE-2021-25741 affecting package kubernetes-1.19.13 1.19.13-5. No patch is available...
8.8CVSS
8.9AI Score
EPSS
CVE-2020-8563 affecting package kubernetes-1.18.17 1.18.17-9
CVE-2020-8563 affecting package kubernetes-1.18.17 1.18.17-9. No patch is available...
5.5CVSS
7.5AI Score
0.0005EPSS
CVE-2021-25741 affecting package kubernetes-1.20.7 1.20.7-9
CVE-2021-25741 affecting package kubernetes-1.20.7 1.20.7-9. No patch is available...
8.8CVSS
8.9AI Score
EPSS
CVE-2021-25741 affecting package kubernetes-1.19.11 1.19.11-7
CVE-2021-25741 affecting package kubernetes-1.19.11 1.19.11-7. No patch is available...
8.8CVSS
8.9AI Score
EPSS
CVE-2020-8563 affecting package kubernetes-1.18.14 1.18.14-8
CVE-2020-8563 affecting package kubernetes-1.18.14 1.18.14-8. No patch is available...
5.5CVSS
7.5AI Score
0.0005EPSS
CVE-2021-25741 affecting package kubernetes-1.21.1 1.21.1-7
CVE-2021-25741 affecting package kubernetes-1.21.1 1.21.1-7. No patch is available...
8.8CVSS
8.9AI Score
EPSS
CVE-2020-8563 affecting package kubernetes-1.18.19 1.18.19-2
CVE-2020-8563 affecting package kubernetes-1.18.19 1.18.19-2. No patch is available...
5.5CVSS
7.5AI Score
0.0005EPSS
CVE-2020-8563 affecting package kubernetes-1.18.17 1.18.17-6
CVE-2020-8563 affecting package kubernetes-1.18.17 1.18.17-6. No patch is available...
5.5CVSS
7.5AI Score
0.0005EPSS
CVE-2023-44487 affecting package kubernetes for versions less than 1.28.3-1
CVE-2023-44487 affecting package kubernetes for versions less than 1.28.3-1. A patched version of the package is...
7.5CVSS
8.9AI Score
0.732EPSS
CVE-2023-44487 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-15. A patched version of the package is...
7.5CVSS
8.2AI Score
0.732EPSS
Exploit for Improper Preservation of Permissions in Mobyproject Moby
CVE-2021-41091 This exploit offers an in-depth look at the...
7.9AI Score
Fedora 39 : mingw-python-urllib3 (2024-73f181db2a)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-73f181db2a advisory. Update to 1.26.19, fixes CVE-2024-0444. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
7.5CVSS
7.6AI Score
0.0005EPSS
Fedora 40 : mingw-python-urllib3 (2024-da86a4f061)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-da86a4f061 advisory. Update to 1.26.19, fixes CVE-2024-0444. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
7.5CVSS
7.6AI Score
0.0005EPSS
Fedora 40 : mingw-poppler (2024-94068499c9)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-94068499c9 advisory. Backport fix for CVE-2024-6239. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
7.5CVSS
7.6AI Score
0.0005EPSS
The WordPress Plugin for Google Maps – WP MAPS plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'put_wpgm' shortcode in all versions up to, and including, 4.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
8.8CVSS
0.001EPSS
The WordPress Plugin for Google Maps – WP MAPS plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'put_wpgm' shortcode in all versions up to, and including, 4.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
8.8CVSS
8.7AI Score
0.001EPSS
The WordPress Plugin for Google Maps – WP MAPS plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'put_wpgm' shortcode in all versions up to, and including, 4.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
8.8CVSS
0.001EPSS
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to DOM-based Stored Cross-Site Scripting via HTML data attributes in all versions up to, and including, 3.2.45 due to insufficient input sanitization and output escaping on user supplied...
6.4CVSS
0.0004EPSS
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to DOM-based Stored Cross-Site Scripting via HTML data attributes in all versions up to, and including, 3.2.45 due to insufficient input sanitization and output escaping on user supplied...
6.4CVSS
5.7AI Score
0.0004EPSS
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to DOM-based Stored Cross-Site Scripting via HTML data attributes in all versions up to, and including, 3.2.45 due to insufficient input sanitization and output escaping on user supplied...
6.4CVSS
0.0004EPSS
The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to DOM-based Stored Cross-Site Scripting via HTML data attributes in all versions up to, and including, 3.2.45 due to insufficient input sanitization and output escaping on user supplied...
6.4CVSS
5.9AI Score
0.0004EPSS
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Gradient Heading widget in all versions up to, and including, 3.11.1 due to insufficient input sanitization and output escaping. This makes it possible for...
6.4CVSS
0.001EPSS
The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stock_ticker shortcode in all versions up to, and including, 3.24.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
6.4CVSS
5.7AI Score
0.001EPSS
The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stock_ticker shortcode in all versions up to, and including, 3.24.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
6.4CVSS
0.001EPSS
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Gradient Heading widget in all versions up to, and including, 3.11.1 due to insufficient input sanitization and output escaping. This makes it possible for...
6.4CVSS
5.7AI Score
0.001EPSS
The Extensions for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the EE Button widget in all versions up to, and including, 2.0.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
6.4CVSS
0.001EPSS
The Extensions for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the EE Button widget in all versions up to, and including, 2.0.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
6.4CVSS
5.7AI Score
0.001EPSS
The Extensions for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the EE Button widget in all versions up to, and including, 2.0.30 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
6.4CVSS
0.001EPSS
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Gradient Heading widget in all versions up to, and including, 3.11.1 due to insufficient input sanitization and output escaping. This makes it possible for...
6.4CVSS
0.001EPSS
The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stock_ticker shortcode in all versions up to, and including, 3.24.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
6.4CVSS
5.9AI Score
0.001EPSS
The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stock_ticker shortcode in all versions up to, and including, 3.24.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
6.4CVSS
0.001EPSS