GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: crossplane, trivy, zot, kaniko, loki, ctop, grype, cadvisor, docker-compose, ko, kargo, spire-server, buildkitd, tkn, melange, cilium-cli, kubescape, aactl, conftest-fips, wolfictl, up, syft, buf, dagger, spire-server-fips, prometheus, conftest, cadvisor-fips...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: sops, minio, goreleaser, aactl, nerdctl, kubernetes-dashboard, k3s, tekton-chains, gomplate, skopeo, vexctl, falcoctl, guac, skaffold, kots, rekor, cloudflared, zot, terragrunt, grpc-health-probe, timestamp-authority, rabbitmq-messaging-topology-operator,...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo allows Reflected XSS.This issue affects Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo: from n/a through 2.2.24...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: eksctl, crane, kubevela, policy-controller, helm, helm-operator, rancher-machine, trivy, kots, zot, slsa-verifier, falcoctl-fips, cadvisor-fips, k3s, vexctl, k9s, pulumi, docker-machine-driver-harvester, newrelic-infrastructure-agent, falcoctl, ctop, k3d, gitsign,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: eksctl, crane, kubevela, policy-controller, helm, helm-operator, rancher-machine, trivy, kots, zot, slsa-verifier, falcoctl-fips, cadvisor-fips, k3s, vexctl, k9s, pulumi, docker-machine-driver-harvester, newrelic-infrastructure-agent, falcoctl, ctop, k3d, gitsign,...

CVE-2023-6278

CVE-2023-6278 affects the Biteship for WooCommerce WordPress plugin prior to 2.2.25. The issue is a reflected XSS caused by unsanitized and unescaped biteship_error and biteship_message parameters, displayed back on the page and exploitable against high-privilege admins. Remediation: upgrade to v...

CVE-2023-49767

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Biteship Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo allows Stored XSS.This issue affects Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo: from n/a through 2.2.24...

CVE-2023-49767

CVE-2023-49767 affects WordPress plugin Biteship (Ongkos Kirim Kurir Instant, Reguler, Kargo). A Stored XSS vulnerability exists in versions up to 2.2.24 (patched in 2.2.28). Exploitation requires authenticated access by Shop Manager or higher, enabling stored script execution via plugin settings...

Unfixed XSS vulnerability at www.mngkargo.com.tr

Security researcher TurKPoweR, has submitted on 19/07/2008 a cross-site-scripting XSS vulnerability affecting www.mngkargo.com.tr, which at the time of submission ranked 118609 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/11/2008. It is...