All In One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings Security Vulnerabilities

CVE-2024-5104

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/student_grade_wise.php. The manipulation of the argument grade leads to sql injection. The attack may be...

cellularpoint.ca Cross Site Scripting vulnerability OBB-3928709

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-5103

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/student_first_payment.php. The manipulation of the argument grade leads to sql injection. The...

CVE-2023-44487 affecting package sriov-network-device-plugin for versions less than 3.5.1-2

CVE-2023-44487 affecting package sriov-network-device-plugin for versions less than 3.5.1-2. A patched version of the package is...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, docker, restic, crossplane, k8sgpt, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, k9s, velero, nodetaint, rqlite, buildkitd, cluster-proportional-autoscaler, gh, gomplate, secrets-store-csi-driver-provider-gcp,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, nri-elasticsearch, hey, nri-mongodb, crossplane, sbom-scorecard, k8sgpt, kubebuilder, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, ytt, paranoia, velero, esbuild, wazero, nodetaint, rqlite, buildkitd,...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: cadvisor, docker, zot, skaffold, k3s, skopeo, kots, trivy, runc, zarf, k9s, k3d, ingress-nginx-controller, newrelic-infrastructure-agent, buildkitd, nvidia-device-plugin, telegraf, kubernetes, syft, kubescape, datadog-agent, ctop, nerdctl, kaniko, grype,...

GHSA-VVPX-J8F3-3W6H vulnerabilities

Vulnerabilities for packages: wireguard-go, k3d, hey, gke-gcloud-auth-plugin, restic, dynamic-localpv-provisioner, go, grpcurl,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: gitness, hey, nodetaint, rqlite, buildkitd, secrets-store-csi-driver-provider-gcp, cue, gomplate, gitlab-pages, kaf, pulumi-language-java, kubewatch, nvidia-device-plugin, oauth2-proxy, gitlab-shell, ip-masq-agent, terraform-provider-azurerm, src, envoy-ratelimit,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, docker, restic, crossplane, k8sgpt, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, k9s, velero, nodetaint, rqlite, buildkitd, cluster-proportional-autoscaler, gh, gomplate, secrets-store-csi-driver-provider-gcp,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, hey, harbor-registry, stern, crossplane, kubecolor, mods, k8sgpt, kubebuilder, capslock, confluent-common-docker, k9s, paranoia, secrets-store-csi-driver-provider-gcp, buildkitd, step-ca, cue, gomplate, kyverno-policy-reporter-ui, helm-push,...

CVE-2024-24787 vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, hey, harbor-registry, stern, crossplane, kubecolor, mods, k8sgpt, kubebuilder, capslock, confluent-common-docker, k9s, paranoia, secrets-store-csi-driver-provider-gcp, buildkitd, step-ca, cue, gomplate, kyverno-policy-reporter-ui, helm-push,...

CVE-2023-45285 vulnerabilities

Vulnerabilities for packages: docker-cli, hey, kubernetes-dashboard-metrics-scraper, sbom-scorecard, nsc, kind, aws-flb-kinesis, gosu, render-template, docker-credential-ecr-login, grpcurl, sonobuoy, petname, k3d, gke-gcloud-auth-plugin, smarter-device-manager, goreleaser, go-md2man, helm-push,...

CVE-2023-3978 vulnerabilities

Vulnerabilities for packages: gitness, hey, k8sgpt, flux-image-automation-controller, nodetaint, rqlite, buildkitd, secrets-store-csi-driver-provider-gcp, cue, gomplate, gitlab-pages, kaf, pulumi-language-java, chartmuseum, kubewatch, nvidia-device-plugin, oauth2-proxy,...

CVE-2022-41723 vulnerabilities

Vulnerabilities for packages: wireguard-go, k3d, hey, gke-gcloud-auth-plugin, restic, dynamic-localpv-provisioner, go, grpcurl,...

GHSA-RR6R-CFGF-GC6H vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, nri-elasticsearch, hey, nri-mongodb, crossplane, sbom-scorecard, k8sgpt, kubebuilder, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, ytt, paranoia, velero, esbuild, wazero, nodetaint, rqlite, buildkitd,...

CVE-2024-24784 vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, nri-elasticsearch, hey, nri-mongodb, crossplane, sbom-scorecard, k8sgpt, kubebuilder, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, ytt, paranoia, velero, esbuild, wazero, nodetaint, rqlite, buildkitd,...

CVE-2023-45288 vulnerabilities

Vulnerabilities for packages: cadvisor, nri-elasticsearch, nri-mongodb, restic, kubeadm-controlplane-controller, esbuild, wazero, nri-kafka, kyverno-policy-reporter-ui, gcsfuse, oauth2-proxy, nfs-subdir-external-provisioner, terraform-provider-azurerm, src, kuberay-operator, kubevela,...

GHSA-4V7X-PQXF-CX7M vulnerabilities

Vulnerabilities for packages: cadvisor, nri-elasticsearch, nri-mongodb, restic, kubeadm-controlplane-controller, esbuild, wazero, nri-kafka, kyverno-policy-reporter-ui, gcsfuse, oauth2-proxy, nfs-subdir-external-provisioner, terraform-provider-azurerm, src, kuberay-operator, kubevela,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, hey, harbor-registry, stern, crossplane, kubecolor, mods, k8sgpt, kubebuilder, capslock, confluent-common-docker, k9s, paranoia, secrets-store-csi-driver-provider-gcp, buildkitd, step-ca, cue, gomplate, kyverno-policy-reporter-ui, helm-push,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: gitness, hey, k8sgpt, flux-image-automation-controller, nodetaint, rqlite, buildkitd, secrets-store-csi-driver-provider-gcp, cue, gomplate, kubernetes-ingress-defaultbackend, gitlab-pages, kaf, pulumi-language-java, chartmuseum, kubewatch, nvidia-device-plugin,...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, nri-elasticsearch, hey, nri-mongodb, crossplane, sbom-scorecard, k8sgpt, kubebuilder, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, ytt, paranoia, velero, esbuild, wazero, nodetaint, rqlite, buildkitd,...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, nri-elasticsearch, hey, nri-mongodb, crossplane, sbom-scorecard, k8sgpt, kubebuilder, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, ytt, paranoia, velero, esbuild, wazero, nodetaint, rqlite, buildkitd,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, nri-elasticsearch, hey, nri-mongodb, crossplane, sbom-scorecard, k8sgpt, kubebuilder, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, ytt, paranoia, velero, esbuild, wazero, nodetaint, rqlite, buildkitd,...

CVE-2023-39326 vulnerabilities

Vulnerabilities for packages: docker-cli, hey, kubernetes-dashboard-metrics-scraper, sbom-scorecard, nsc, kind, aws-flb-kinesis, gosu, render-template, docker-credential-ecr-login, grpcurl, sonobuoy, petname, k3d, gke-gcloud-auth-plugin, smarter-device-manager, goreleaser, go-md2man, helm-push,...

GHSA-9F76-WG39-X86H vulnerabilities

Vulnerabilities for packages: docker-cli, hey, kubernetes-dashboard-metrics-scraper, sbom-scorecard, nsc, kind, aws-flb-kinesis, gosu, render-template, docker-credential-ecr-login, grpcurl, sonobuoy, petname, k3d, gke-gcloud-auth-plugin, smarter-device-manager, goreleaser, go-md2man, helm-push,...

GHSA-5F94-VHJQ-RPG8 vulnerabilities

Vulnerabilities for packages: docker-cli, hey, kubernetes-dashboard-metrics-scraper, sbom-scorecard, nsc, kind, aws-flb-kinesis, gosu, render-template, docker-credential-ecr-login, grpcurl, sonobuoy, petname, k3d, gke-gcloud-auth-plugin, smarter-device-manager, goreleaser, go-md2man, helm-push,...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: gitness, hey, k8sgpt, flux-image-automation-controller, nodetaint, rqlite, buildkitd, secrets-store-csi-driver-provider-gcp, cue, gomplate, kubernetes-ingress-defaultbackend, gitlab-pages, kaf, pulumi-language-java, chartmuseum, kubewatch, nvidia-device-plugin,...

GHSA-2WRH-6PVC-2JM9 vulnerabilities

Vulnerabilities for packages: gitness, hey, k8sgpt, flux-image-automation-controller, nodetaint, rqlite, buildkitd, secrets-store-csi-driver-provider-gcp, cue, gomplate, gitlab-pages, kaf, pulumi-language-java, chartmuseum, kubewatch, nvidia-device-plugin, oauth2-proxy,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gitness, hey, nodetaint, rqlite, buildkitd, secrets-store-csi-driver-provider-gcp, cue, gomplate, gitlab-pages, kaf, pulumi-language-java, kubewatch, nvidia-device-plugin, oauth2-proxy, gitlab-shell, ip-masq-agent, terraform-provider-azurerm, src, envoy-ratelimit,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: ko, argo-cd, kots, flux-source-controller, node-problem-detector, thanos, kubernetes-csi-external-attacher, dex, tctl, k3d, pulumi-language-dotnet, keda, buildkitd, flux-helm-controller, helm, pulumi-language-yaml, spark-operator, terraform,...

GHSA-32CH-6X54-Q4H9 vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, nri-elasticsearch, hey, nri-mongodb, crossplane, sbom-scorecard, k8sgpt, kubebuilder, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, ytt, paranoia, velero, esbuild, wazero, nodetaint, rqlite, buildkitd,...

CVE-2024-24783 vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, nri-elasticsearch, hey, nri-mongodb, crossplane, sbom-scorecard, k8sgpt, kubebuilder, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, ytt, paranoia, velero, esbuild, wazero, nodetaint, rqlite, buildkitd,...

CVE-2024-24785 vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, nri-elasticsearch, hey, nri-mongodb, crossplane, sbom-scorecard, k8sgpt, kubebuilder, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, ytt, paranoia, velero, esbuild, wazero, nodetaint, rqlite, buildkitd,...

GHSA-XR7R-F8XQ-VFVV vulnerabilities

Vulnerabilities for packages: cadvisor, docker, zot, skaffold, k3s, skopeo, kots, trivy, runc, zarf, k9s, k3d, ingress-nginx-controller, newrelic-infrastructure-agent, buildkitd, nvidia-device-plugin, telegraf, kubernetes, syft, kubescape, datadog-agent, ctop, nerdctl, kaniko, grype,...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, hey, harbor-registry, stern, crossplane, kubecolor, mods, k8sgpt, kubebuilder, capslock, confluent-common-docker, k9s, paranoia, secrets-store-csi-driver-provider-gcp, buildkitd, step-ca, cue, gomplate, kyverno-policy-reporter-ui, helm-push,...

CVE-2023-45290 vulnerabilities

Vulnerabilities for packages: cadvisor, gitness, nri-elasticsearch, hey, nri-mongodb, crossplane, sbom-scorecard, k8sgpt, kubebuilder, capslock, kubeadm-controlplane-controller, flux-image-automation-controller, ytt, paranoia, velero, esbuild, wazero, nodetaint, rqlite, buildkitd,...

bdi.eu Cross Site Scripting vulnerability OBB-3928708

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-5103 Campcodes Complete Web-Based School Management System student_first_payment.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/student_first_payment.php. The manipulation of the argument grade leads to sql injection. The...

dahaboo.com Cross Site Scripting vulnerability OBB-3928707

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-36078

In Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable file permissions. This allowed a local attacker on the server to modify the gem's files, injecting arbitrary code into Zammad processes (which run with the environment and permissions of the Zammad...

chez-robineau.com Cross Site Scripting vulnerability OBB-3928706

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-36078

In Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable file permissions. This allowed a local attacker on the server to modify the gem's files, injecting arbitrary code into Zammad processes (which run with the environment and permissions of the Zammad...

CVE-2024-36070

tine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain sensitive authentication information via setup.php because of getRegistryData in Setup/Frontend/Json.php. (An update is also available for the 2022.11...

Exploit for CVE-2024-29269

🚀 CVE-2024-29269 Exploit This repository contains an exploit...

CVE-2024-36070

tine before 2023.11.8, when an LDAP backend is used, allows anonymous remote attackers to obtain sensitive authentication information via setup.php because of getRegistryData in Setup/Frontend/Json.php. (An update is also available for the 2022.11...

bingemans.ca Cross Site Scripting vulnerability OBB-3928704

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

CVE-2024-35931

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip do PCI error slot reset during RAS recovery Why: The PCI error slot reset maybe triggered after inject ue to UMC multi times, this caused system hang. [ 557.371857] amdgpu 0000:af:00.0: amdgpu: GPU reset...

CVE-2024-35927

In the Linux kernel, the following vulnerability has been resolved: drm: Check output polling initialized before disabling In drm_kms_helper_poll_disable() check if output polling support is initialized before disabling polling. If not flag this as a warning. Additionally in...

rallies.info Cross Site Scripting vulnerability OBB-3928702

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...