Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see Security Notification For Specific Versions) Security Vulnerabilities

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS

PT-2021-02: Encryption bypass when downloading a firmware update in Diebold-Nixdorf RM3/CRS RM3/CRS dispenser firmware (all versions up to and including 41128 1002 RM3_CRS.BTR + 170329 2332 RM3_CRS.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5

PT-2021-01: Encryption bypass when downloading a firmware update in Diebold-Nixdorf CMDv5 CMDv5 dispenser firmware (all versions up to and including 141128 1002 CD5_ATM.BTR + 170329 2332 CD5_ATM.FRM) Severity: Severity level: High Encryption bypass when downloading a firmware update in...

Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny

Meta's decision to offer an ad-free subscription in the European Union (E.U.) has faced a new setback after regulators accused the social media behemoth of breaching the bloc's competition rules by forcing users to choose between seeing ads or paying to avoid them. The European Commission said the....

Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware

A China-nexus cyber espionage group named Velvet Ant has been observed exploiting a zero-day flaw in Cisco NX-OS Software used in its switches to deliver malware. The vulnerability, tracked as CVE-2024-20399 (CVSS score: 6.0), concerns a case of command injection that allows an authenticated,...

CVE-2024-5349 LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'map_style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute...

CVE-2024-5349 LA-Studio Element Kit for Elementor <= 1.3.8.1 - Authenticated (Contributor+) Local File Inclusion

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.8.1 via the 'map_style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute...

Australian Man Charged for Fake Wi-Fi Scam on Domestic Flights

An Australian man has been charged with running a fake Wi-Fi access point during a domestic flight with an aim to steal user credentials and data. The unnamed 42-year-old "allegedly established fake free Wi-Fi access points, which mimicked legitimate networks, to capture personal data from...

CVE-2024-5419

The Void Contact Form 7 Widget For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cf7_redirect_page' attribute within the plugin's Void Contact From 7 widget in all versions up to, and including, 2.4 due to insufficient input sanitization and...

CVE-2024-5419

The Void Contact Form 7 Widget For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cf7_redirect_page' attribute within the plugin's Void Contact From 7 widget in all versions up to, and including, 2.4 due to insufficient input sanitization and...

CVE-2024-5419 Void Contact Form 7 Widget For Elementor Page Builder <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via cf7_redirect_page Attribute

The Void Contact Form 7 Widget For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cf7_redirect_page' attribute within the plugin's Void Contact From 7 widget in all versions up to, and including, 2.4 due to insufficient input sanitization and...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: gitsign, goreleaser, spire-server, tekton-chains, melange, apko, tkn, kubescape, aactl, zot, falco, falcoctl, skaffold, flux-source-controller, ko, wolfictl, vexctl, neuvector-sigstore-interface, zarf, policy-controller,...

CVE-2024-6104 vulnerabilities

Vulnerabilities for packages: bank-vaults, keda, gitsign, goreleaser, spire-server, terragrunt, gh, scorecard, snyk-cli, fulcio, terraform-provider-azurerm, tekton-chains, vault-csi-provider, k3d, flux-kustomize-controller, kargo, flux, rook, step-ca, timestamp-authority,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kaf, fuse-overlayfs-snapshotter, gitness, kubevela, tomcat, nri-prometheus, kubescape, kubernetes-csi-livenessprobe, kubewatch, helm, flux-notification-controller, aactl, hey, spark-operator, frp, node-problem-detector, envoy-ratelimit, grpcurl, dotnet, skaffold,...

CVE-2024-29018 vulnerabilities

Vulnerabilities for packages: goreleaser, spire-server, trivy, kargo, up, buf, dagger, melange, prometheus, cadvisor, telegraf, datadog-agent, tkn, kubescape, kaniko, docker-compose, aactl, grype, loki, crossplane, zot, syft, wolfictl, ko, ctop, buildkitd,...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: goreleaser, spire-server, trivy, kargo, up, buf, dagger, melange, prometheus, cadvisor, telegraf, datadog-agent, tkn, kubescape, kaniko, docker-compose, aactl, grype, loki, crossplane, zot, syft, wolfictl, ko, ctop, buildkitd,...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: bank-vaults, kaf, kubernetes-csi-external-snapshotter, vault-k8s, boring-registry, fuse-overlayfs-snapshotter, gitness, istio-pilot-agent, k9s, tekton-chains, thanos-operator, istio-pilot-discovery, trillian, karpenter, prometheus-node-exporter,...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: keda, temporal-server, trillian, amass, kube-bench, argo-workflows, telegraf, vault, ferretdb, k3s, kots, spicedb, caddy, kine, src,...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: keda, temporal-server, trillian, amass, kube-bench, argo-workflows, telegraf, vault, ferretdb, k3s, kots, spicedb, caddy, kine, src,...

GHSA-232P-VWFF-86MP vulnerabilities

Vulnerabilities for packages: up, helm, melange, ko, ctop, bom,...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: argo-cd, aws-efs-csi-driver, cluster-autoscaler,...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, argo-cd, melange, pulumi-kubernetes-operator,...

CVE-2023-38470 vulnerabilities

Vulnerabilities for packages:...

GHSA-5QM6-J92F-79JP vulnerabilities

Vulnerabilities for packages:...

GHSA-797F-63WG-8CHV vulnerabilities

Vulnerabilities for packages: python,...

GHSA-JM46-725R-HH9V vulnerabilities

Vulnerabilities for packages: python,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, cluster-autoscaler, kubernetes-csi-driver-hostpath, ip-masq-agent, nodetaint, kubernetes, calico, aws-ebs-csi-driver, local-static-provisioner, spark-operator,...

CVE-2022-3736 vulnerabilities

Vulnerabilities for packages:...

GHSA-5V6F-5GPQ-2628 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-5680 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-3154 vulnerabilities

Vulnerabilities for packages: buildah,...

CVE-2024-5837 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5841 vulnerabilities

Vulnerabilities for packages:...

GHSA-CXR8-69XQ-5R5P vulnerabilities

Vulnerabilities for packages:...

GHSA-FCHP-8M28-G68F vulnerabilities

Vulnerabilities for packages:...

GHSA-G9F9-C2XM-RWMM vulnerabilities

Vulnerabilities for packages:...

GHSA-RW9Q-CWC5-QQP5 vulnerabilities

Vulnerabilities for packages:...

GHSA-X989-52FC-4VR4 vulnerabilities

Vulnerabilities for packages: hubble,...

CVE-2024-0874 vulnerabilities

Vulnerabilities for packages: cloudflared, kubernetes-dns-node-cache,...

GHSA-HMR7-M48G-48F6 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter,...

CVE-2024-35241 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-35242 vulnerabilities

Vulnerabilities for packages:...

GHSA-CF7P-GM2M-833M vulnerabilities

Vulnerabilities for packages:...

CVE-2021-38698 vulnerabilities

Vulnerabilities for packages: k3d,...

GHSA-6HW5-6GCX-PHMW vulnerabilities

Vulnerabilities for packages: k3d,...

GHSA-Q6H7-4QGW-2J9P vulnerabilities

Vulnerabilities for packages: k3d,...

CVE-2023-43618 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-43620 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-43621 vulnerabilities

Vulnerabilities for packages:...

CVE-2022-23471 vulnerabilities

Vulnerabilities for packages:...

CVE-2022-24769 vulnerabilities

Vulnerabilities for packages:...