GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubeflow, temporal-ui-server, timoni, runc, k8sgpt-operator, k9s, src, kubernetes-csi-external-provisioner, terraform-provider-google, crossplane-provider-aws, vault-k8s, influx, crossplane-provider-aws-ec2, smarter-device-manager, k3d, prometheus-operator, kwok,...

chandlerfuneralhome.net Cross Site Scripting vulnerability OBB-3865446

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

iahrmedialibrary.net Cross Site Scripting vulnerability OBB-3865441

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: prometheus-pushgateway-fips, falcosidekick-fips, skaffold, temporal-server-fips, terragrunt, crossplane-provider-family-aws, prometheus-operator, skopeo, kubescape, kube-state-metrics-fips, src, helm-operator-fips, osv-scanner, terraform, temporal-ui-server,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, timoni, runc, sbomqs, k8sgpt-operator, src, kubernetes-csi-external-provisioner, mage, nri-haproxy, vault-k8s, influx, smarter-device-manager, speedtest-go, k3d, nri-apache, ytt, pombump, delve, prometheus-operator, s5cmd, shfmt, dive, kwok,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, timoni, runc, sbomqs, k8sgpt-operator, src, kubernetes-csi-external-provisioner, mage, nri-haproxy, vault-k8s, influx, smarter-device-manager, speedtest-go, k3d, nri-apache, ytt, pombump, delve, prometheus-operator, s5cmd, shfmt, dive, kwok,...

congresochihuahua.gob.mx Cross Site Scripting vulnerability OBB-3865432

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

heerfashion.com Cross Site Scripting vulnerability OBB-3865425

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

unjourunerecette.fr Cross Site Scripting vulnerability OBB-3865413

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ncdhd.org Cross Site Scripting vulnerability OBB-3865393

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

muntanyescostadaurada.cat Cross Site Scripting vulnerability OBB-3865392

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

montesson.fr Cross Site Scripting vulnerability OBB-3865390

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mundoamigo.es Cross Site Scripting vulnerability OBB-3865391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fwupd: world readable password in /etc/fwupd/redfish.conf

A flaw was found in fwupd. When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file...

2c2a.com Cross Site Scripting vulnerability OBB-3865358

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hvezdarnacb.cz Cross Site Scripting vulnerability OBB-3865293

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

enumi.pl Cross Site Scripting vulnerability OBB-3865282

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aytocubillasderueda.es Cross Site Scripting vulnerability OBB-3865261

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pyurihamo.grupo.jp Cross Site Scripting vulnerability OBB-3865242

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

michaeljono.mee.nu Cross Site Scripting vulnerability OBB-3865235

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...