499 matches found
WordPress Plugin Pods 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
[SECURITY] Fedora 38 Update: podman-4.9.4-1.fc38
podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...
[SECURITY] Fedora 38 Update: prometheus-podman-exporter-1.11.0-1.fc38
Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...
[SECURITY] Fedora 39 Update: prometheus-podman-exporter-1.11.0-1.fc39
Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...
[SECURITY] Fedora 40 Update: prometheus-podman-exporter-1.11.0-1.fc40
Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...
WordPress Pods plugin <= 3.0.10 - Missing Authorization vulnerability
Missing Authorization vulnerability discovered by Nex Team in WordPress Plugin Pods versions = 3.0.10...
WordPress Pods plugin <= 3.0.10 - Authenticated (Contributor+) SQL Injection via Shortcode vulnerability
Authenticated Contributor+ SQL Injection via Shortcode vulnerability discovered by Nex Team in WordPress Plugin Pods versions = 3.0.10...
WordPress Pods plugin <= 3.0.10 - Authenticated (Contributor+) Remote Code Execution via Shortcode vulnerability
Authenticated Contributor+ Remote Code Execution via Shortcode vulnerability discovered by Nex Team in WordPress Plugin Pods versions = 3.0.10...
Pods < 3.1 - Contributor+ SQLi
Description The plugin is vulnerable to SQL Injection via shortcode due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor level access or higher, to append...
WordPress Pods Plugin <= 3.0.10 is vulnerable to SQL Injection
Software Pods Type Plugin Vulnerable versions = 3.0.10 Fixed in 3.0.10.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-6967 Patch priority Low CVSS severity Low 8.5 Developer Pods Framework PSID ebff2ccf3db7 Credits Nex Team Required privilege Contributor Published 29 March...
WordPress Pods Plugin <= 3.0.10 is vulnerable to Remote Code Execution (RCE)
Software Pods Type Plugin Vulnerable versions = 3.0.10 Fixed in 3.0.10.2 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2023-6999 Patch priority Medium CVSS severity Medium 9.9 Developer Pods Framework PSID 2f35523a6e52 Credits Nex Team Required privilege Contributor...
WordPress Pods Plugin <= 3.0.10 is vulnerable to Broken Access Control
Software Pods Type Plugin Vulnerable versions = 3.0.10 Fixed in 3.0.10.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-6965 Patch priority Low CVSS severity Low 4.3 Developer Pods Framework PSID 636da473e23f Credits Nex Team Required privilege Contributo...
Pods < 3.1 - Contributor+ Remote Code Execution
Description The plugin is vulnerable to Remote Code Execution via shortcode, allowing authenticated attackers, with contributor level access or higher, to execute code on the server...
PT-2024-9642
Name of the Vulnerable Software and Affected Versions Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00 Dell PowerFlex rack versions prior to RCM 3.8.1.0 and prior to RCM 3.7.6.0 Dell PowerFlex custom node using PowerFlex Manager versions prior to 4.6.1.0 Dell InsightIQ...
Missing Encryption
github.com/cilium/cilium is vulnerable to Missing Encryption between pods. The vulnerability is caused when external key-value store kvstore and Wireguard transparent encryption are enabled. If an attacker has access to the underlying cluster they can intercept sensitive traffic between pods,...
Unencrypted ingress/health traffic when using Wireguard transparent encryption
Impact For Cilium users who are using CRDs to store Cilium state the default configuration and Wireguard transparent encryption, responses from pods to the Ingress and health endpoints are not encrypted. Traffic from the Ingress and health endpoints to pods is not affected by this issue. The heal...
Code injection
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who have enabled an external kvstore and Wireguard transparent encryption, traffic between pods in the affected cluster is not encrypted. This issue affects Cilium v1.14 before v1.14.7 and...
CVE-2024-25631 Unencrypted traffic between pods when using Wireguard and an external kvstore
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who have enabled an external kvstore and Wireguard transparent encryption, traffic between pods in the affected cluster is not encrypted. This issue affects Cilium v1.14 before v1.14.7 and...