GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: nemo, prometheus-nats-exporter, karma-fips, kube-vip-cloud-provider, dagdotdev, secrets-store-csi-driver-provider-aws, karpenter, stakater-reloader, addon-resizer, memcached-exporter-fips, cloud-provider-aws-fips, etcd-fips, vexctl, mongodb-kubernetes-operator,...

CVE-2021-34815

CheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the LOGINPAGEDISCLAIMER parameter...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, seaweedfs, bank-vaults, cluster-proportional-autoscaler, direnv, sealed-secrets, velero-plugin-for-microsoft-azure, terraform-provider-time, nri-f5, pdfcpu, vertical-pod-autoscaler, memcached-exporter, xcaddy, protoc-gen-go-grpc,...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, seaweedfs, bank-vaults, cluster-proportional-autoscaler, direnv, sealed-secrets, velero-plugin-for-microsoft-azure, terraform-provider-time, nri-f5, pdfcpu, vertical-pod-autoscaler, memcached-exporter, xcaddy, protoc-gen-go-grpc,...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: nemo, nri-consul, aws-network-policy-agent, nodetaint, skopeo-fips, kafkaexporter-fips, karpenter, kubernetes, kubernetes-csi-external-attacher, trust-manager-fips, crossplane-provider-azure-sql, monstache, aws-application-networking-k8s-fips, dex,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, bank-vaults, direnv, kuberay-operator, velero-plugin-for-microsoft-azure, kiali, nri-f5, pdfcpu, vertical-pod-autoscaler, memcached-exporter, argo-events, xcaddy, protoc-gen-go-grpc, containerd, render-template, modelmesh-runtime-adapter,...

Canopy Cross-Site Scripting Vulnerability

CheckSec Canopy is a team collaboration system for cyber security from CheckSec UK. The system includes features such as document management, report generation and management, and schedule management. A cross-site scripting vulnerability exists in versions of CheckSec Canopy prior to 3.5.2, which...

CVE-2021-34815

CheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the LOGINPAGEDISCLAIMER parameter...

CVE-2021-34815

CheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the LOGINPAGEDISCLAIMER parameter...

Cross site scripting

CheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the LOGINPAGEDISCLAIMER parameter...

CVE-2021-34815

Summary: CVE-2021-34815 affects CheckSec Canopy prior to 3.5.2, enabling XSS on the login page through the LOGIN_PAGE_DISCLAIMER parameter. Affected product: CheckSec Canopy (team collaboration system).Vulnerability details: Cross-site scripting on the login page via a parameter controlled in the...

CVE-2021-34815

CheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the LOGINPAGEDISCLAIMER parameter...

CheckSec Canopy 跨站脚本漏洞

CheckSec Canopy is a team collaboration system for cyber security from CheckSec UK. The system includes features such as document management, report generation and management, and schedule management. A cross-site scripting vulnerability exists in versions of CheckSec Canopy prior to 3.5.2, which...

Cross site scripting

CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users...

CVE-2018-9036

CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users...

CVE-2018-9036

CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users...

CVE-2018-9036

CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users...

CVE-2018-9036

CVE-2018-9036 affects CheckSec Canopy 3.x before 3.0.7. The vulnerability is a stored XSS via the Login Page Disclaimer, enabling attacks by low-privileged users against higher-privileged users. The public records describe the issue and its impact, but do not provide a remediation or patch versio...