GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: nodetaint, crossplane-provider-aws-cloudwatchlogs, gitness, kubernetes-csi-external-provisioner, prometheus-adapter, falcoctl, falcosidekick, scorecard, docker, temporal-server, smarter-device-manager, k9s, buf, oauth2-proxy, goreleaser, volume-modifier-for-k8s,...

openSUSE: Security Advisory for Golang Prometheus (SUSE-SU-2023:3888-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19

CVE-2021-44716 affecting package prometheus-process-exporter for versions less than 0.7.10-19. A patched version of the package is available...

The vulnerability of the export plugin for Better PDF Exporter, a data processing center for Atlassian Jira Server and Data Center, allows a hacker to view arbitrary PDF files.

The vulnerability of the Better PDF Exporter plugin for exporting PDF files from Atlassian Jira Server and Data Center lies in insufficient testing of server-side requests. Exploiting this vulnerability could allow attackers to view arbitrary PDF files...

CVE-2021-44716 affecting package prometheus-node-exporter for versions less than 1.3.1-24

CVE-2021-44716 affecting package prometheus-node-exporter for versions less than 1.3.1-24. A patched version of the package is available...

CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.7.10-18

CVE-2022-21698 affecting package prometheus-process-exporter for versions less than 0.7.10-18. A patched version of the package is available...

CVE-2022-21698 affecting package prometheus-node-exporter for versions less than 1.3.1-23

CVE-2022-21698 affecting package prometheus-node-exporter for versions less than 1.3.1-23. A patched version of the package is available...

Fedora: Security Advisory for prometheus-podman-exporter (FEDORA-2024-3fd1bc9276)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-a53b24023d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: prometheus-podman-exporter-1.7.0-1.fc38

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

[SECURITY] Fedora 39 Update: prometheus-podman-exporter-1.7.0-1.fc39

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

Prometheus SNMP Exporter: Basic Authentication Bypass

Background The Prometheus SNMP Exporter is the recommended way to expose SNMP data in a format which Prometheus can ingest. Description A vulnerability has been discovered in Prometheus SNMP Exporter. Please review the CVE identifier referenced below for details. Impact A user who knows the...

GLSA-202401-15 : Prometheus SNMP Exporter: Basic Authentication Bypass

The remote host is affected by the vulnerability described in GLSA-202401-15 Prometheus SNMP Exporter: Basic Authentication Bypass - Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users...

CVE-2020-36769

The Widget Settings Importer/Exporter Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wpajaximportwidgetdataparameter AJAX action in versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2020-36769

CVE-2020-36769 affects the WordPress plugin Widget Settings Importer/Exporter (versions up to and including 1.5.3). The issue is a Stored Cross-Site Scripting vulnerability in the wp_ajax_import_widget_dataparameter AJAX action caused by insufficient input sanitization and output escaping. It ena...

WordPress plugin Widget Settings Importer/Exporter security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2023-11906 · WordPress · Widget Settings Importer/Exporter Plugin

Name of the Vulnerable Software and Affected Versions: The Widget Settings Importer/Exporter Plugin for WordPress versions up to, and including, 1.5.3 Description: The issue is related to Stored Cross-Site Scripting via the "wp ajax import widget data" parameter AJAX action due to insufficient...

WordPress Plugin WP Ultimate Exporter Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

turkishexporter.com.tr Cross Site Scripting vulnerability OBB-3805045

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-45066 WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Smackcoders Export All Posts, Products, Orders, Refunds & Users.This issue affects Export All Posts, Products, Orders, Refunds & Users: from n/a through 2.4.1...