CVE-2024-11741

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting VictorOps integration was not properly protected and could be exposed to users with Viewer permission. Fixed in versions 11.5.0, 11.4.1, 11.3.3, 11.2.6, 11.1.11, 11.0.11 and 10.4.15...

WordPress WP Sessions Time Monitoring Full Automatic Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin WP Sessions Time Monitoring Full Automatic versions = 1.1.1...

CVE-2025-24718 WordPress WP Sessions Time Monitoring Full Automatic Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Reflected XSS.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through = 1.1.1...

CVE-2025-24718 WordPress WP Sessions Time Monitoring Full Automatic Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Reflected XSS.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through = 1.1.1...

CVE-2025-24718

CVE-2025-24718 refers to a reflected XSS in the WordPress plugin “WP Sessions Time Monitoring Full Automatic” (SWIT) for versions up to 1.1.1. The issue stems from improper input neutralization during web page generation. Public docs show a CVSSv3.1 base score of 7.1 (HIGH) with network attack ve...

PT-2025-5532 · WordPress · Swit Wp Sessions Time Monitoring Full Automatic

Name of the Vulnerable Software and Affected Versions: SWIT WP Sessions Time Monitoring Full Automatic versions 1.1.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This mean...

CVE-2024-1211

creationtimestamp| type| source ---|---|--- 2025-01-30 23:46:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113919969169827912 2025-01-31 00:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgypuw6doj2c 2025-01-31 01:12:21+00:00| seen|...

Doppler announces integration with Datadog to streamline security and monitoring

San Francisco, United States / California, 30th January 2025, CyberNewsWire...

CGA-W74G-9PRJ-7C4C

Bulletin has no description...

CVE-2024-48761

creationtimestamp| type| source ---|---|--- 2025-01-29 21:50:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113913850961492595 2025-01-29 22:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvynt5vnm2j 2025-01-30 01:12:10+00:00|...

CERTFR-2023-ALE-001

creationtimestamp| type| source ---|---|--- 2025-01-29 16:47:27+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvgccmngg2d...

CERTFR-2016-ALE-007

creationtimestamp| type| source ---|---|--- 2025-01-29 16:15:46+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvejmqgcv2d...

CERTFR-2024-CTI-009

creationtimestamp| type| source ---|---|--- 2025-01-29 13:51:46+00:00| seen| https://bsky.app/profile/test-cvp.bsky.social/post/3lgv4i5vr332i...

OpenShift GitOps Operator Namespace Isolation Break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

GHSA-58FX-7V9Q-3G56 OpenShift GitOps Operator Namespace Isolation Break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

CVE-2024-13484

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

CVE-2024-13484 Openshift-gitops-operator-container: namespace isolation break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

CVE-2024-13484

Technical details for CVE-2024-13484 are not publicly provided in the connected documents. The SUSE advisories mention the CVE but do not supply affected products/versions or root-cause details. Monitor for updates.

CVE-2024-13484 Openshift-gitops-operator-container: namespace isolation break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...

CVE-2024-13484 Openshift-gitops-operator-container: namespace isolation break

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all namespaces that deploy an ArgoCD CR instance, allowing the namespace to create a rogue PrometheusRule. This issue can have adverse effects on the platform monitoring stack, as the...