Power Monitoring Expert, Energy Expert (formerly Power Manager) - Ecostruxure& Security Vulnerabilities

CVE-2024-5889

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘country’ parameter in all versions up to, and including, 6.4.8 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-5889

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘country’ parameter in all versions up to, and including, 6.4.8 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-5598

The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_system' function. This makes it possible for unauthenticated attackers to extract sensitive data including backups or other sensitive...

CVE-2024-5598

The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_system' function. This makes it possible for unauthenticated attackers to extract sensitive data including backups or other sensitive...

CVE-2024-5598 Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing

The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_system' function. This makes it possible for unauthenticated attackers to extract sensitive data including backups or other sensitive...

CVE-2024-5889 Events Manager <= 6.4.8 - Reflected Cross-Site Scripting

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘country’ parameter in all versions up to, and including, 6.4.8 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is...

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is...

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is...

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: cilium-envoy, nodetaint, gomplate, aws-efs-csi-driver, tctl, node-problem-detector, newrelic-infrastructure-agent, src, telegraf, skaffold, envoy-ratelimit, prometheus-adapter, buildkitd, oauth2-proxy, kpt, grpcurl, pulumi-language-java, pulumi-language-yaml, pulumi,.....

GHSA-JQ35-85CJ-FJ4P vulnerabilities

Vulnerabilities for packages: prometheus, up, falco, slsa-verifier, scorecard, tekton-pipelines, loki, tekton-chains, skaffold, cert-manager, goreleaser, chartmuseum, kpt, kubescape, ctop, paranoia, bom, k3s, aactl,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, trust-manager, nodetaint, buf, gomplate, prometheus-operator, helm-operator, prometheus-postgres-exporter, grpc-health-probe, vexctl, kubernetes-dns-node-cache, grafana-agent-operator, aws-efs-csi-driver, containerd, cilium, tctl,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: eksctl, gitness, helm, up, grype, neuvector-agent, tekton-pipelines, flux-helm-controller, kots, newrelic-infrastructure-agent, telegraf, skaffold, cert-manager, helm-push, fuse-overlayfs-snapshotter, cilium-cli, kubescape, ctop, kubevela, zot, melange,...

CVE-2024-25620 vulnerabilities

Vulnerabilities for packages: helm-push, eksctl, cilium-cli, k8sgpt, trivy, chartmuseum, flux-helm-controller, kots, kubescape, up, flux-source-controller, zarf, helm-operator, istio-operator, k9s, cert-manager,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: helm-push, eksctl, cilium-cli, k8sgpt, trivy, chartmuseum, flux-helm-controller, kots, kubescape, up, flux-source-controller, zarf, helm-operator, istio-operator, k9s, cert-manager,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: gh, prometheus, guac, influxd, rekor, gomplate, pulumi-kubernetes-operator, kargo, cosign, neuvector-sigstore-interface, slsa-verifier, policy-controller, opentelemetry-collector-contrib, vexctl, flux-notification-controller, scorecard, snyk-cli, vault-csi-provider,...

GHSA-2C7C-3MJ9-8FQH vulnerabilities

Vulnerabilities for packages: cilium-envoy, rekor, falco, istio-pilot-discovery, cosign, slsa-verifier, vexctl, dex, tekton-pipelines, kots, argo-cd, spire-server, gitsign, traefik, flux-kustomize-controller, tekton-chains, tkn, vault, cert-manager, cloudflared, oauth2-proxy, kubescape, sops,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: cni-plugins, gomplate, nats-server, vexctl, docker-cli, containerd, nri-elasticsearch, nri-jmx, xcaddy, yam, newrelic-infrastructure-agent, spire-server, ipfs, nri-nginx, telegraf, bincapz, flannel-cni-plugin, cadvisor, pulumi, gobump, sbom-scorecard, zot, ytt,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, trust-manager, docker-credential-acr-env, gomplate, stern, nats-server, delve, regclient, helm-operator, go-fips, kubernetes-dns-node-cache, dask-gateway, grafana-agent-operator, step, aws-efs-csi-driver, spegel, containerd, mage,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: local-static-provisioner, trust-manager, docker-credential-acr-env, gomplate, stern, nats-server, delve, regclient, helm-operator, go-fips, kubernetes-dns-node-cache, dask-gateway, grafana-agent-operator, step, aws-efs-csi-driver, spegel, containerd, mage,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: cni-plugins, local-static-provisioner, gomplate, nats-server, vexctl, nri-elasticsearch, nri-jmx, xcaddy, yam, newrelic-infrastructure-agent, spire-server, ipfs, nri-nginx, telegraf, flannel-cni-plugin, cadvisor, gobump, sbom-scorecard, ytt,...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: gh, prometheus, guac, influxd, rekor, gomplate, pulumi-kubernetes-operator, kargo, cosign, neuvector-sigstore-interface, slsa-verifier, policy-controller, opentelemetry-collector-contrib, vexctl, flux-notification-controller, scorecard, snyk-cli, vault-csi-provider,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: cni-plugins, cilium-envoy, kubernetes-dashboard-metrics-scraper, go-bindata, prometheus-stackdriver-exporter, falco, wait-for-port, slsa-verifier, render-template, configmap-reload, docker-cli, scorecard, kind, ip-masq-agent, mage, aws-flb-kinesis,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, buf, docker-credential-acr-env, gomplate, nats-server, prometheus-postgres-exporter, grpc-health-probe, vexctl, step, containerd, node-problem-detector, spire-server, src, telegraf, istio-operator, tkn, prometheus-adapter, buildkitd, apko,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: trust-manager, nodetaint, gomplate, prometheus-operator, prometheus-postgres-exporter, aws-efs-csi-driver, containerd, tctl, node-problem-detector, newrelic-infrastructure-agent, src, telegraf, tkn, skaffold, prometheus-adapter, buildkitd, apko, oauth2-proxy, kpt,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: nerdctl, crane, eksctl, istio-pilot-agent, guac, prometheus, helm, falco, docker-credential-gcr, istio-pilot-discovery, cosign, kargo, slsa-verifier, up, helm-operator, policy-controller, vexctl, scorecard, k8sgpt, tekton-pipelines, filebeat, flux-helm-controller,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, trust-manager, nodetaint, buf, gomplate, prometheus-operator, helm-operator, prometheus-postgres-exporter, grpc-health-probe, vexctl, kubernetes-dns-node-cache, grafana-agent-operator, aws-efs-csi-driver, containerd, cilium, tctl,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: prometheus, guac, grafana, rekor, teleport, up, chezmoi, cosign, prometheus-operator, policy-controller, opentelemetry-collector-contrib, grafana-agent-operator, step, sigstore-scaffolding, k8sgpt, tekton-pipelines, filebeat, flyte, hugo,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: prometheus, guac, grafana, rekor, teleport, up, chezmoi, cosign, prometheus-operator, policy-controller, opentelemetry-collector-contrib, grafana-agent-operator, step, sigstore-scaffolding, k8sgpt, tekton-pipelines, filebeat, flyte, hugo,...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: k3s, caddy, prometheus, prometheus-adapter, kubernetes, up, ipfs, thanos, calico, kubevela, gitlab-kas, keda, cert-manager,...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: k3s, caddy, prometheus, prometheus-adapter, kubernetes, up, ipfs, thanos, calico, kubevela, gitlab-kas, keda, cert-manager,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: cni-plugins, gomplate, nats-server, vexctl, docker-cli, containerd, nri-elasticsearch, nri-jmx, xcaddy, yam, newrelic-infrastructure-agent, spire-server, ipfs, nri-nginx, telegraf, bincapz, flannel-cni-plugin, cadvisor, pulumi, gobump, sbom-scorecard, zot, ytt,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: local-static-provisioner, trust-manager, docker-credential-acr-env, gomplate, stern, nats-server, delve, regclient, helm-operator, kubernetes-dns-node-cache, dask-gateway, grafana-agent-operator, step, aws-efs-csi-driver, spegel, containerd, mage,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: cni-plugins, local-static-provisioner, gomplate, nats-server, vexctl, nri-elasticsearch, nri-jmx, xcaddy, yam, newrelic-infrastructure-agent, spire-server, ipfs, nri-nginx, telegraf, flannel-cni-plugin, cadvisor, gobump, sbom-scorecard, ytt,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: trust-manager, nodetaint, gomplate, prometheus-operator, prometheus-postgres-exporter, kubernetes-dns-node-cache, aws-efs-csi-driver, containerd, tctl, node-problem-detector, newrelic-infrastructure-agent, src, telegraf, istio-operator, tkn, skaffold,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: nerdctl, istio-pilot-agent, guac, grafana, rekor, gomplate, falco, istio-pilot-discovery, kargo, cosign, slsa-verifier, policy-controller, grpc-health-probe, vexctl, dex, step, containerd, sigstore-scaffolding, cilium, rabbitmq-messaging-topology-operator,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: k3s, temporal-server, containerd, kubernetes-csi-external-resizer, kubernetes, argo-cd, kubescape, kine, cri-tools, temporal, kyverno, kubevela, envoy-ratelimit, keda, cert-manager, docker-compose,...

CVE-2024-26147 vulnerabilities

Vulnerabilities for packages: helm-push, eksctl, cilium-cli, k8sgpt, trivy, chartmuseum, flux-helm-controller, kots, kubescape, up, flux-source-controller, zarf, helm-operator, istio-operator, k9s, cert-manager,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: cni-plugins, kubeflow-pipelines, nodetaint, docker-credential-acr-env, gomplate, nats-server, delve, regclient, prometheus-operator, helm-operator, prometheus-postgres-exporter, vexctl, docker-cli, kubernetes-dns-node-cache, dask-gateway, aws-efs-csi-driver, mage,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: k3s, temporal-server, containerd, kubernetes-csi-external-resizer, kubernetes, argo-cd, kubescape, kine, cri-tools, temporal, kyverno, kubevela, envoy-ratelimit, keda, cert-manager, docker-compose,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: cni-plugins, local-static-provisioner, gomplate, nats-server, vexctl, nri-elasticsearch, nri-jmx, xcaddy, yam, newrelic-infrastructure-agent, spire-server, ipfs, nri-nginx, telegraf, flannel-cni-plugin, cadvisor, gobump, sbom-scorecard, ytt,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: cni-plugins, cilium-envoy, kubernetes-dashboard-metrics-scraper, go-bindata, prometheus-stackdriver-exporter, falco, wait-for-port, slsa-verifier, render-template, configmap-reload, docker-cli, scorecard, kind, ip-masq-agent, mage, aws-flb-kinesis,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: cni-plugins, cilium-envoy, kubernetes-dashboard-metrics-scraper, go-bindata, prometheus-stackdriver-exporter, falco, wait-for-port, slsa-verifier, render-template, configmap-reload, docker-cli, scorecard, kind, ip-masq-agent, mage, aws-flb-kinesis,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: cni-plugins, cilium-envoy, kubernetes-dashboard-metrics-scraper, go-bindata, prometheus-stackdriver-exporter, falco, wait-for-port, slsa-verifier, render-template, configmap-reload, docker-cli, scorecard, kind, ip-masq-agent, mage, aws-flb-kinesis,...