CVE-2019-19260

GitLab Community Edition CE and Enterprise Edition EE through 12.5 has Incorrect Access Control issue 2 of 2...

CVE-2019-19259

GitLab Enterprise Edition EE 11.3 and later through 12.5 allows an Insecure Direct Object Reference IDOR...

CVE-2019-19257

GitLab Community Edition CE and Enterprise Edition EE through 12.5 has Incorrect Access Control issue 1 of 2...

CVE-2019-19256

GitLab Enterprise Edition EE 12.2 and later through 12.5 has Incorrect Access Control...

CVE-2019-19261

GitLab Enterprise Edition EE 6.7 and later through 12.5 allows SSRF...

CVE-2019-19260

Technical details about CVE-2019-19260 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories for affected products and fixes.

CVE-2019-19259

CVE-2019-19259 refers to a vulnerability in GitLab Enterprise Edition (EE) 11.3 and later through 12.5 that allows an Insecure Direct Object Reference (IDOR), leading to potential information disclosure. The issue affects the application’s handling of object references and is categorized with a C...

CVE-2019-19257

GitLab Community Edition CE and Enterprise Edition EE through 12.5 has Incorrect Access Control issue 1 of 2...

CVE-2019-19255

CVE-2019-19255 affects GitLab Enterprise Edition (EE) 12.3 through 12.5 due to an Incorrect Access Control flaw. The vulnerability exposes potential partial confidentiality via network attack with low complexity and requires a single authentication (per CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/...

CVE-2019-19255

Removed by vendor...

CVE-2019-19311

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields...

CVE-2019-19311

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 allows XSS in group and profile fields...

CVE-2019-19254

CVE-2019-19254 affects GitLab Community Edition (CE) and Enterprise Edition (EE) from 9.6 up to 12.5, described as an Incorrect Access Control issue. The connected sources confirm the impacted versions and indicate a security release for GitLab 12.5.x (12.5.1) addressing the vulnerability; no exp...

GitLab Information Disclosure Vulnerability (CNVD-2020-20438)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise...

GitLab: Double linking cause XSS (but blokeced by CSP in gitlab.com)

Summary URL display on Gitlab.com is currently broken. There is a risk of XSS due to double conversion of URLs into links. However, 12.5 incorporating the fix has not yet been released and is blocked by CSP at gitlab.com. Steps to reproduce 1. Login to gitlab.com 2. Create new project 3. Create a...

Cisco Unified Communications Manager CVE-2019-12715 Cross Site Scripting Vulnerability

Description Cisco Unified Communications Manager is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...

CVE-2019-1837

A vulnerability in the User Data Services UDS API of Cisco Unified Communications Manager Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the management GUI. The vulnerability is due to improper validation of input parameters in the UDS API...

CVE-2019-1766 Cisco IP Phone 8800 Series File Upload Denial of Service Vulnerability

A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability exists because the...

PT-2019-1724 · Cisco · Cisco Ip Phone 8800 Series

Name of the Vulnerable Software and Affected Versions: Cisco IP Phone 8800 Series versions prior to 12.51SR1 Description: A vulnerability in the web-based management interface of the Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote...

Cross site scripting

A vulnerability in the Security Assertion Markup Language SAML single sign-on SSO interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability is due to...