library.rikkyo.ac.jp Cross Site Scripting vulnerability OBB-3865534

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

lamvisanhatbangiare.blogspot.com.xx3.kz Cross Site Scripting vulnerability OBB-3865533

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

elderly.bokss.org.hk Cross Site Scripting vulnerability OBB-3865522

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

eichler.vhugot.com.xx3.kz Cross Site Scripting vulnerability OBB-3865521

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sperkove-kameny.cz Cross Site Scripting vulnerability OBB-3865489

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

buyingbuddy.com Cross Site Scripting vulnerability OBB-3865460

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-kinesis, cortex, kubernetes-dns-node-cache, crossplane-provider-azure-authorization, crossplane-provider-aws-route53, k3s, buf, ctop, melange, restic, secrets-store-csi-driver-provider-gcp, policy-controller, kpt, apisix-ingress-controller,...

chandlerfuneralhome.net Cross Site Scripting vulnerability OBB-3865446

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

iahrmedialibrary.net Cross Site Scripting vulnerability OBB-3865441

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: caddy-fips, metacontroller, pgpool2exporter, kuberay-operator, ferretdb, temporal-ui-server-fips, k3s, kube-fluentd-operator, aws-efs-csi-driver, kiam, src, fulcio-fips, crossplane-provider-aws, k8sgpt-operator, temporal-server-fips, gotenberg, capslock,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: mockery, cortex, hello-world-golang, k3s, kube-rbac-proxy, kubernetes-dns-node-cache, ctop, docker-cli, secrets-store-csi-driver-provider-gcp, render-template, kpt, kind, php-fpmexporter, sbom-scorecard, wazero, nri-mssql, speedtest-go, yam, nri-prometheus,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: mockery, cortex, hello-world-golang, k3s, kube-rbac-proxy, kubernetes-dns-node-cache, ctop, docker-cli, secrets-store-csi-driver-provider-gcp, render-template, kpt, kind, php-fpmexporter, sbom-scorecard, wazero, nri-mssql, speedtest-go, yam, nri-prometheus,...

congresochihuahua.gob.mx Cross Site Scripting vulnerability OBB-3865432

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

heerfashion.com Cross Site Scripting vulnerability OBB-3865425

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

unjourunerecette.fr Cross Site Scripting vulnerability OBB-3865413

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ncdhd.org Cross Site Scripting vulnerability OBB-3865393

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

muntanyescostadaurada.cat Cross Site Scripting vulnerability OBB-3865392

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

montesson.fr Cross Site Scripting vulnerability OBB-3865390

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mundoamigo.es Cross Site Scripting vulnerability OBB-3865391

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fwupd: world readable password in /etc/fwupd/redfish.conf

A flaw was found in fwupd. When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without proper restriction, allowing any user on the system to read the same configuration file...