CVE-2023-44487 vulnerabilities
Vulnerabilities for packages: nginx-mainline, bom, ollama, nats, kubernetes-csi-external-attacher, grype, frp, prometheus, conftest, gatekeeper, amass, nvidia-device-plugin, pulumi-kubernetes-operator, tctl, flux-notification-controller, thanos, haproxy-ingress, sigstore-scaffolding, traefik,...
7.5CVSS
9AI Score
0.732EPSS
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: ollama, datadog-agent, kyverno-policy-reporter-ui, prometheus-statsd-exporter, nats, kube-logging-operator, protoc-gen-go-grpc, local-path-provisioner, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler,...
7.5AI Score
CVE-2023-48795 vulnerabilities
Vulnerabilities for packages: bom, ollama, prometheus-statsd-exporter, nats, fq, local-path-provisioner, kubernetes, flux-image-reflector-controller, grype, certificate-transparency, step-ca, cadvisor, eksctl, frp, prometheus, conftest, apko, prometheus-node-exporter, gatekeeper, tekton-chains,...
5.9CVSS
7.1AI Score
0.963EPSS
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: ollama, datadog-agent, kyverno-policy-reporter-ui, prometheus-statsd-exporter, nats, kube-logging-operator, protoc-gen-go-grpc, local-path-provisioner, kubernetes, flux-image-reflector-controller, grype, cluster-proportional-autoscaler,...
6.6AI Score
0.0004EPSS
CVE-2023-45288 vulnerabilities
Vulnerabilities for packages: datadog-agent, multus-cni, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, docker-cli, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, cert-exporter,...
6.8AI Score
0.0004EPSS
CVE-2024-24787 vulnerabilities
Vulnerabilities for packages: bom, ipfs, mage, multus-cni, kyverno-policy-reporter-ui, prometheus-statsd-exporter, local-path-provisioner, kubernetes-ingress-defaultbackend, stern, kubernetes, flux-image-reflector-controller, kubernetes-csi-external-attacher, extism, osv-scanner,...
6.5AI Score
0.0004EPSS
GHSA-5FQ7-4MXC-535H vulnerabilities
Vulnerabilities for packages: bom, ipfs, mage, multus-cni, kyverno-policy-reporter-ui, prometheus-statsd-exporter, local-path-provisioner, kubernetes-ingress-defaultbackend, stern, kubernetes, flux-image-reflector-controller, kubernetes-csi-external-attacher, extism, osv-scanner,...
7.5AI Score
Vulnerabilities for packages: bom, ollama, prometheus-statsd-exporter, kube-logging-operator, kubernetes-csi-external-attacher, flux-image-reflector-controller, kubernetes-csi-external-resizer, frp, prometheus, vertical-pod-autoscaler, apko, prometheus-node-exporter, gatekeeper, cloud-sql-proxy,...
6.1CVSS
7.3AI Score
0.001EPSS
CVE-2024-24789 vulnerabilities
Vulnerabilities for packages: datadog-agent, hivemind, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, snyk-cli, cert-exporter,...
5.5CVSS
6.1AI Score
0.0004EPSS
GHSA-2JWV-JMQ4-4J3R vulnerabilities
Vulnerabilities for packages: bom, ipfs, mage, multus-cni, kyverno-policy-reporter-ui, prometheus-statsd-exporter, local-path-provisioner, kubernetes-ingress-defaultbackend, stern, kubernetes, flux-image-reflector-controller, kubernetes-csi-external-attacher, extism, osv-scanner,...
7.5AI Score
GHSA-4V7X-PQXF-CX7M vulnerabilities
Vulnerabilities for packages: datadog-agent, multus-cni, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, docker-cli, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, cert-exporter,...
7.5AI Score
CVE-2024-24790 vulnerabilities
Vulnerabilities for packages: datadog-agent, hivemind, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, snyk-cli, cert-exporter,...
9.8CVSS
9.8AI Score
0.001EPSS
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: bom, ollama, prometheus-statsd-exporter, nats, kube-logging-operator, kubernetes-ingress-defaultbackend, kubernetes-csi-external-attacher, flux-image-reflector-controller, kubernetes-csi-external-resizer, frp, prometheus, vertical-pod-autoscaler, apko,...
7.5CVSS
8.4AI Score
0.002EPSS
GHSA-45X7-PX36-X8W8 vulnerabilities
Vulnerabilities for packages: bom, ollama, prometheus-statsd-exporter, nats, fq, local-path-provisioner, kubernetes, flux-image-reflector-controller, grype, certificate-transparency, step-ca, cadvisor, eksctl, frp, prometheus, conftest, apko, prometheus-node-exporter, gatekeeper, tekton-chains,...
7.5AI Score
GHSA-4374-P667-P6C8 vulnerabilities
Vulnerabilities for packages: bom, ollama, prometheus-statsd-exporter, nats, kube-logging-operator, kubernetes-ingress-defaultbackend, kubernetes-csi-external-attacher, flux-image-reflector-controller, kubernetes-csi-external-resizer, frp, prometheus, vertical-pod-autoscaler, apko,...
7.5AI Score
GHSA-2WRH-6PVC-2JM9 vulnerabilities
Vulnerabilities for packages: bom, ollama, prometheus-statsd-exporter, kube-logging-operator, kubernetes-csi-external-attacher, flux-image-reflector-controller, kubernetes-csi-external-resizer, frp, prometheus, vertical-pod-autoscaler, apko, prometheus-node-exporter, gatekeeper, cloud-sql-proxy,...
7.5AI Score
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: neuvector-agent, pulumi-language-java, dex, dynamic-localpv-provisioner, influxd, envoy-ratelimit, gitlab-pages, falco, slsa-verifier, minio, goreleaser, cilium-envoy, argo-cd, grype, kubernetes-csi-external-attacher, node-problem-detector, pulumi-language-dotnet,...
7.5AI Score
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: nginx-mainline, bom, ollama, nats, kubernetes-csi-external-attacher, grype, frp, prometheus, conftest, gatekeeper, amass, nvidia-device-plugin, pulumi-kubernetes-operator, tctl, flux-notification-controller, thanos, haproxy-ingress, sigstore-scaffolding, traefik,...
7.5AI Score
GHSA-49GW-VXVF-FC2G vulnerabilities
Vulnerabilities for packages: datadog-agent, hivemind, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, snyk-cli, cert-exporter,...
7.5AI Score
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: bom, ipfs, mage, multus-cni, kyverno-policy-reporter-ui, prometheus-statsd-exporter, local-path-provisioner, kubernetes-ingress-defaultbackend, stern, kubernetes, flux-image-reflector-controller, kubernetes-csi-external-attacher, extism, osv-scanner,...
6.5AI Score
0.0004EPSS
GHSA-236W-P7WF-5PH8 vulnerabilities
Vulnerabilities for packages: datadog-agent, hivemind, kyverno-policy-reporter-ui, protoc-gen-go-grpc, local-path-provisioner, kubernetes-csi-external-resizer, step-ca, conftest, prometheus-node-exporter, amass, nri-redis, protoc-gen-go, chartmuseum, haproxy-ingress, snyk-cli, cert-exporter,...
7.5AI Score
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
5.4CVSS
5.2AI Score
EPSS
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
5.4CVSS
5.2AI Score
EPSS
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
5.4CVSS
EPSS
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
5.4CVSS
EPSS
IBM InfoSphere Information Server 11.7 is vulnerable stored to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
6.4CVSS
EPSS
IBM InfoSphere Information Server 11.7 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references. IBM X-Force ID: ...
5.4CVSS
5.2AI Score
EPSS
IBM InfoSphere Information Server 11.7 is vulnerable stored to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
6.4CVSS
5.8AI Score
EPSS
IBM InfoSphere Information Server 11.7 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references. IBM X-Force ID: ...
5.4CVSS
EPSS
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. IBM X-Force ID: ...
5.4CVSS
EPSS
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. IBM X-Force ID: ...
5.4CVSS
5.1AI Score
EPSS
IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: ...
5.4CVSS
EPSS
IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: ...
5.4CVSS
5.3AI Score
EPSS
CVE-2023-50964 IBM InfoSphere Information Server cross-site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
5.4CVSS
EPSS
CVE-2024-28794 IBM InfoSphere Information Server cross-site scripting
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
5.4CVSS
EPSS
CVE-2023-50953 IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. IBM X-Force ID: ...
5.4CVSS
EPSS
CVE-2023-50952 IBM InfoSphere Information Server server-side request forgery
IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: ...
5.4CVSS
EPSS
CVE-2024-28797 IBM InfoSphere Information Server cross-site scripting
IBM InfoSphere Information Server 11.7 is vulnerable stored to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
6.4CVSS
EPSS
CVE-2024-31898 IBM InfoSphere Information Server data modification
IBM InfoSphere Information Server 11.7 could allow an authenticated user to read or modify sensitive information by bypassing authentication using insecure direct object references. IBM X-Force ID: ...
5.4CVSS
EPSS
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks against the system. IBM X-Force ID: ...
5.3CVSS
EPSS
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks against the system. IBM X-Force ID: ...
5.3CVSS
4.9AI Score
EPSS
IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
7.2CVSS
EPSS
IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...
7.2CVSS
6.2AI Score
EPSS
IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the system. IBM X-Force ID: ...
4.3CVSS
EPSS
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: ...
4.3CVSS
EPSS
IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the system. IBM X-Force ID: ...
4.3CVSS
4.2AI Score
EPSS
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: ...
4.3CVSS
4.7AI Score
EPSS
CVE-2023-50954 IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the system. IBM X-Force ID: ...
4.3CVSS
EPSS
CVE-2024-31902 IBM InfoSphere Information Server cross-site request forgery
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: ...
4.3CVSS
EPSS
CVE-2024-35119 IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks against the system. IBM X-Force ID: ...
5.3CVSS
EPSS