GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, crossplane-provider-aws-sns, terraform-provider-aws, nri-prometheus, envoy-ratelimit, flux-notification-controller, atlantis, prometheus-operator, restic, nerdctl, gomplate, syft, crossplane-provider-aws-cloudwatchlogs,...

chandlerfuneralhome.net Cross Site Scripting vulnerability OBB-3865446

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

iahrmedialibrary.net Cross Site Scripting vulnerability OBB-3865441

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, wavefront-collector-for-kubernetes, kubescape, timestamp-authority, hubble-ui-backend-fips, trillian-fips, metallb, secrets-store-csi-driver-provider-azure, kine, request-1279, rqlite, dynamic-localpv-provisioner, kube-fluentd-operator,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, nri-prometheus, envoy-ratelimit, controller-gen, prometheus-operator, speedtest-go, nerdctl, gomplate, helm-operator, docker-credential-gcr, aws-flb-firehose, kubevela, newrelic-infrastructure-agent, kube-state-metrics, dagger,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-resizer, amass, nri-prometheus, envoy-ratelimit, controller-gen, prometheus-operator, speedtest-go, nerdctl, gomplate, helm-operator, docker-credential-gcr, aws-flb-firehose, kubevela, newrelic-infrastructure-agent, kube-state-metrics, dagger,...

congresochihuahua.gob.mx Cross Site Scripting vulnerability OBB-3865432

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

heerfashion.com Cross Site Scripting vulnerability OBB-3865425

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

unjourunerecette.fr Cross Site Scripting vulnerability OBB-3865413

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ncdhd.org Cross Site Scripting vulnerability OBB-3865393

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

muntanyescostadaurada.cat Cross Site Scripting vulnerability OBB-3865392

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

montesson.fr Cross Site Scripting vulnerability OBB-3865390

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mundoamigo.es Cross Site Scripting vulnerability OBB-3865391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fwupd: world readable password in /etc/fwupd/redfish.conf

A flaw was found in fwupd. When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file...

2c2a.com Cross Site Scripting vulnerability OBB-3865358

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hvezdarnacb.cz Cross Site Scripting vulnerability OBB-3865293

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

enumi.pl Cross Site Scripting vulnerability OBB-3865282

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aytocubillasderueda.es Cross Site Scripting vulnerability OBB-3865261

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pyurihamo.grupo.jp Cross Site Scripting vulnerability OBB-3865242

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

michaeljono.mee.nu Cross Site Scripting vulnerability OBB-3865235

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...