Max's Image Uploader Security Vulnerabilities

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, gitsign, goreleaser, spire-server, terragrunt, gh, scorecard, snyk-cli, fulcio, terraform-provider-azurerm, tekton-chains, vault-csi-provider, k3d, flux-kustomize-controller, kargo, flux, rook, step-ca, timestamp-authority,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, istio-pilot-agent, k9s, tekton-chains, thanos-operator, istio-pilot-discovery, trillian, karpenter, prometheus-node-exporter,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: bank-vaults, boring-registry, buf, kubevela, configmap-reload, nri-prometheus, tkn, flux-notification-controller, litefs, shfmt, nuclei, php-fpm_exporter, lazygit, tempo, vexctl, nri-couchbase, kpt, gobuster, kuberay-operator, argo-workflows, prometheus-nats-exporter,....

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, docker-credential-acr-env, go-bindata, k9s, tekton-chains, wait-for-port, trillian, karpenter, go, smarter-device-manager, dockerize,...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, goreleaser, spire-server, terragrunt, velero, trivy, boring-registry, restic, sqlpad, fulcio, argo-workflows, tekton-chains, flux-kustomize-controller, flux, rook, step-ca, timestamp-authority, gitlab-runner, flux-image-reflector-controller, up,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, docker-credential-acr-env, go-bindata, k9s, tekton-chains, wait-for-port, trillian, karpenter, go, smarter-device-manager, dockerize,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: bank-vaults, boring-registry, helm-docs, buf, kubevela, configmap-reload, nri-prometheus, tkn, libnvidia-container, flux-notification-controller, gops, litefs, shfmt, php-fpm_exporter, nerdctl, lazygit, tempo, vexctl, nri-couchbase, kpt, docker, gobuster,...

GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, gitsign, goreleaser, spire-server, terragrunt, gh, scorecard, snyk-cli, fulcio, terraform-provider-azurerm, tekton-chains, vault-csi-provider, k3d, flux-kustomize-controller, kargo, flux, rook, step-ca, timestamp-authority,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, thanos-operator, trillian, karpenter, prometheus-node-exporter, kubevela, kubernetes-csi-external-resizer, nri-prometheus, tkn, kubernetes-csi-livenessprobe,...

CVE-2023-48795 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, vault-k8s, boring-registry, gitness, istio-pilot-agent, docker-credential-acr-env, fq, tekton-chains, istio-pilot-discovery, trillian, prometheus-node-exporter, buf, dockerize, cadvisor, go-licenses, tkn, kubescape, kubewatch, nsc, helm, aactl,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: gitsign, goreleaser, trivy, scorecard, kubeflow-katib, argo-workflows, istio-pilot-agent, bom, k9s, kots, tekton-chains, kargo, istio-pilot-discovery, gitlab-runner, flux-image-reflector-controller, up, kubevela, dagger, filebeat, prometheus, cadvisor, telegraf, guac,....

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, istio-pilot-agent, k9s, tekton-chains, thanos-operator, istio-pilot-discovery, trillian, karpenter, prometheus-node-exporter,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, goreleaser, spire-server, terragrunt, velero, trivy, boring-registry, restic, sqlpad, fulcio, argo-workflows, tekton-chains, flux-kustomize-controller, flux, rook, step-ca, timestamp-authority, gitlab-runner, flux-image-reflector-controller, up,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: bank-vaults, boring-registry, buf, kubevela, configmap-reload, nri-prometheus, tkn, flux-notification-controller, litefs, shfmt, nuclei, php-fpm_exporter, lazygit, tempo, vexctl, nri-couchbase, kpt, gobuster, kuberay-operator, argo-workflows, prometheus-nats-exporter,....

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, docker-credential-acr-env, go-bindata, k9s, tekton-chains, wait-for-port, trillian, karpenter, go, smarter-device-manager, dockerize,...

CVE-2024-24790 vulnerabilities

Vulnerabilities for packages: bank-vaults, boring-registry, helm-docs, buf, kubevela, configmap-reload, nri-prometheus, tkn, libnvidia-container, flux-notification-controller, gops, litefs, shfmt, php-fpm_exporter, nerdctl, lazygit, tempo, vexctl, nri-couchbase, kpt, docker, gobuster,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, istio-pilot-agent, tekton-chains, thanos-operator, istio-pilot-discovery, trillian, karpenter, go, prometheus-node-exporter, kubevela,...

GHSA-9763-4F94-GFCH vulnerabilities

Vulnerabilities for packages: keda, gitsign, goreleaser, spire-server, terragrunt, scorecard, boring-registry, gitness, tekton-chains, flux-kustomize-controller, flux, terraform-provider-google, flux-image-automation-controller, kubevela, melange, sops, apko, actions-runner-controller, tkn,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

GHSA-49GW-VXVF-FC2G vulnerabilities

Vulnerabilities for packages: bank-vaults, boring-registry, helm-docs, buf, kubevela, configmap-reload, nri-prometheus, tkn, libnvidia-container, flux-notification-controller, gops, litefs, shfmt, php-fpm_exporter, nerdctl, lazygit, tempo, vexctl, nri-couchbase, kpt, docker, gobuster,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, istio-pilot-agent, tekton-chains, thanos-operator, istio-pilot-discovery, trillian, karpenter, go, prometheus-node-exporter, kubevela,...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, vault-k8s, boring-registry, gitness, istio-pilot-agent, docker-credential-acr-env, fq, tekton-chains, istio-pilot-discovery, trillian, prometheus-node-exporter, buf, dockerize, cadvisor, go-licenses, tkn, kubescape, kubewatch, nsc, helm, aactl,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, thanos-operator, trillian, karpenter, prometheus-node-exporter, kubevela, kubernetes-csi-external-resizer, nri-prometheus, tkn, kubernetes-csi-livenessprobe,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, docker-credential-acr-env, go-bindata, k9s, tekton-chains, wait-for-port, trillian, karpenter, go, smarter-device-manager, dockerize,...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: bank-vaults, boring-registry, helm-docs, buf, kubevela, configmap-reload, nri-prometheus, tkn, libnvidia-container, flux-notification-controller, gops, litefs, shfmt, php-fpm_exporter, nerdctl, lazygit, tempo, vexctl, nri-couchbase, kpt, docker, gobuster,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: gitsign, goreleaser, trivy, scorecard, kubeflow-katib, argo-workflows, istio-pilot-agent, bom, k9s, kots, tekton-chains, kargo, istio-pilot-discovery, gitlab-runner, flux-image-reflector-controller, up, kubevela, dagger, filebeat, prometheus, cadvisor, telegraf, guac,....

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: nri-apache, kaf, cni-plugins, kubernetes-csi-external-snapshotter, vault-k8s, fuse-overlayfs-snapshotter, gitness, nri-nginx, docker-credential-acr-env, fq, go-bindata, nri-memcached, thanos-operator, wait-for-port, trillian, prometheus-node-exporter,...

Security Bulletin: Security vulnerabilities may affect IBM WebSphere Application Server Liberty shipped with with IBM CICS TX Advanced.

Summary Security vulnerabilities may affect IBM WebSphere Application Server Liberty shipped with IBM CICS TX Advanced. IBM CICS TX Advanced has addressed the issues. Vulnerability Details ** CVEID: CVE-2024-25026 DESCRIPTION: **IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere...

Security Bulletin: TSSC/IMC is vulnerable to arbitrary code execution due to Linux Kernel

Summary TSSC/IMC is vulnerable to aritrary code excecution due to kernel. A patch has been provided that updates the kernel library. CVE-2022-42896, CVE-2023-1281, CVE-2023-1829, CVE-2023-2124, CVE-2023-2194, CVE-2023-2235. Vulnerability Details ** CVEID: CVE-2022-42896 DESCRIPTION: **Linux...

GeoServer's Server Status shows sensitive environmental variables and Java properties

GeoServer's Server Status page and REST API (at /geoserver/rest/about/status) lists all environment variables and Java properties to any GeoServer user with administrative rights as part of those modules' status message. These variables/properties can also contain sensitive information, such as...

WordPress Security Research Series: WordPress Request Architecture and Hooks

Welcome to Part 1 of the WordPress Security Research Beginner Series! If you haven’t had a chance, please review the series introduction blog post for more details on the goal of this series and what to expect. Before diving into the security features of WordPress, it's critical to understand the.....

CVE-2024-34696

GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and prior to versions 2.24.4 and 2.25.1, GeoServer's Server Status page and REST API lists all environment variables and Java properties to any GeoServer user with administrative...

CVE-2024-34696

GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and prior to versions 2.24.4 and 2.25.1, GeoServer's Server Status page and REST API lists all environment variables and Java properties to any GeoServer user with administrative...

CVE-2024-21482

Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs...

CVE-2024-21482

Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs...

CVE-2024-34696 GeoServer's Server Status shows sensitive environmental variables and Java properties

GeoServer is an open source server that allows users to share and edit geospatial data. Starting in version 2.10.0 and prior to versions 2.24.4 and 2.25.1, GeoServer's Server Status page and REST API lists all environment variables and Java properties to any GeoServer user with administrative...

CVE-2024-21482 Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader

Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs...

Exploit for Path Traversal in Solarwinds Serv-U

CVE-2024-28995 Automated Path Traversal & Local File Read...

Exploit for CVE-2024-37765

Description MachForm up to version 19 is affected by an...

Simple Laboratory Management System 1.0 SQL Injection

...

WordPress WPCode Lite 2.1.14 Cross Site Scripting

...

CVE-2024-24792

Parsing a corrupt or malicious image with invalid color indices can cause a panic. Bugs ...