136 matches found
CVE-2023-1072
GitLab CVE-2023-1072 affects all versions from 9.0 up to 15.7.7, 15.8.0–15.8.3 and 15.9.0–15.9.1. It stems from improper filtering for the number of requests to read commit details, enabling a resource depletion attack. NVD lists CVSS v3.1 base score 5.3 (Network, Low attack complexity, None priv...
CVE-2023-1072
Removed by vendor...
CVE-2023-1072
An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible to trigger a resource depletion attack due to improper filtering for number of requests to...
CVE-2023-1072
An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible to trigger a resource depletion attack due to improper filtering for number of requests to...
CVE-2023-1072
An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was possible to trigger a resource depletion attack due to improper filtering for number of requests to...
GitLab 9.0 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2023-1072)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. It was...
SUSE CVE-2011-1144
The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories. NOTE: this vulnerability exists because of an incomplete fix for...
CVE-2022-1072
CVE-2022-1072 is a reserved candidate; however, connected records identify CVE-2022-26254 as the active entry. The affected software is WoWonder The Ultimate PHP Social Network Platform v4.0.0, which contains an access control flaw allowing unauthenticated attackers to arbitrarily rename group ID...
RHEL 8 : httpd:2.4 (RHSA-2022:1072)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:1072 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Errors encountered during...
Important: Red Hat Security Advisory: httpd:2.4 security update
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
SUSE: Security Advisory (SUSE-SU-2014:1072-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 7 : libldb (ELSA-2021-1072)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1072 advisory. 1.5.4-2 - resolves: 1941511 - Fix CVE-2021-20277 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...
RHEL 7 : libldb (RHSA-2021:1072)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1072 advisory. The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases. Securit...
CVE-2021-1072
creationtimestamp| type| source ---|---|--- 2021-02-05 22:35:30+00:00| seen| https://t.me/cibsecurity/23174...
CVE-2021-1072
CVE-2021-1072 affects NVIDIA GeForce Experience up to version 3.21, where the GameStream component (rxdiag.dll) mishandles log files, enabling an arbitrary file deletion that can cause a denial of service. The vulnerability is described across multiple sources as a local issue impacting the softw...
CVE-2020-1072
CVE-2020-1072 is described as a Windows kernel information disclosure vulnerability caused by the kernel’s improper handling of objects in memory. The connected CNVD entry repeats this description, confirming an information-disclosure risk stemming from memory object handling in Windows kernel sp...
KB4556852: Windows Server 2012 May 2020 Security Update
The remote Windows host is missing security update 4556852 or cumulative update 4556840. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited thi...
CVE-2019-1072
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server TFS improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'...