92 matches found
CVE-2023-23635
Jellyfin 10.8.x through 10.8.3 is affected by a stored XSS in the name of a collection that can exfiltrate the victim’s access tokens from localStorage. This is documented across multiple sources (NVD, Red Hat, GHSA, OSV, etc.). The vulnerability impact is limited to confidentiality through token...
Denial of service
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Improper data handling on branch creation could have been used to trigger high CPU usage...
CVE-2022-3639
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Improper data handling on branch creation could have been used to trigger high CPU usage...
CVE-2022-35909
In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality...
Cross site scripting
In Jellyfin before 10.8, stored XSS allows theft of an admin access token...
Jellyfin 跨站脚本漏洞
Jellyfin is a freeware media system. It allows you to control the management and streaming of media. It is an alternative to the proprietary Emby and Plex and can serve media from a dedicated server to end-user devices through multiple applications. A cross-site scripting vulnerability exists in...
mariadb: server crash in Item_field::fix_outer_field for INSERT SELECT
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Itemfield::fixouterfield...
mariadb: server crash in Item_field::fix_outer_field for INSERT SELECT
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Itemfield::fixouterfield...
PT-2021-22747 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 10.8 and later Description: The issue allows for information disclosure from SendEntry in GitLab, exposing the full URL of artifacts stored in object-storage. This exposure occurs via Rails logs and is temporary...
ownCloud < 10.8 Multiple Vulnerabilities
ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...
IBM Security Verify Privilege Manager XML External Entity Injection Vulnerability
IBM Security Verify Privilege Manager is a security management software for endpoint privilege management and application control in corporate environments from IBM, USA. The software stops unintentional downloads of malware and ransomware from attacking applications by removing local...
IBM Security Verify Privilege Manager 代码问题漏洞
IBM Security Verify Privilege Manager is a security management software for endpoint privilege management and application control in corporate environments from IBM, USA. The software stops unintentional downloads of malware and ransomware from attacking applications by removing local...
Security Bulletin: A Security Vulnerability Has Been Identified In IBM Security Secret Server
Summary A security vulnerability identified on IBM Security Secret Server has been addressed in the release 10.8. Vulnerability Details CVEID: CVE-2020-4843 DESCRIPTION: IBM Security Secret Server stores potentially sensitive information in config files that could be read by an authenticated user...
CVE-2020-13345
An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes...
CVE-2020-13345
An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes...
Cross site scripting
An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes...
CVE-2020-13345
Removed by vendor...
Dell Encryption and Dell Endpoint Security Suite Elevation of Privilege Vulnerability
Dell Encryption and Dell Endpoint Security Suite are both products of Dell Inc.Dell Encryption is a data protection solution. Dell Encryption is a data protection solution that includes compliance management, authentication, disk data encryption, and port encryption.Dell Endpoint Security Suite i...
Security Bulletin: A Security Vulnerability Has Been Identified In IBM Security Secret Server (CVE-2020-4342)
Summary A security vulnerability identified on IBM Security Secret Server has been addressed in the release 10.8. Vulnerability Details CVEID: CVE-2020-4342 DESCRIPTION: IBM Security Secret Server could disclose sensitive information included in installation files to an unauthorized user. CVSS Ba...
Security Bulletin: A Security Vulnerability Has Been Identified In IBM Security Secret Server (CVE-2020-4322)
Summary A security vulnerability identified on IBM Security Secret Server has been addressed in the release 10.8. Vulnerability Details CVEID: CVE-2020-4322 DESCRIPTION: IBM Security Secret Server could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to...