136 matches found
CVE-2026-2045
creationtimestamp| type| source ---|---|--- 2026-02-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-119/ 2026-02-21 00:02:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd2dwswl2k 2026-02-25 05:40:09+00:00| seen|...
CVE-2012-2045
Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2046, and CVE-2012-2047...
CVE-2025-2045
Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data...
CVE-2025-2045
creationtimestamp| type| source ---|---|--- 2025-03-06 13:34:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6669 2025-03-06 15:30:38+00:00| seen| https://t.me/cvedetector/19695 2025-03-06 15:44:36+00:00| seen|...
CVE-2025-2045 Incorrect Authorization in GitLab
Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data...
CVE-2025-2045 Incorrect Authorization in GitLab
Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data...
CVE-2025-2045
CVE-2025-2045 concerns GitLab Enterprise Edition. Affected: GitLab EE versions 17.7.x before 17.7.6, 17.8.x before 17.8.4, and 17.9.x before 17.9.1. Root cause: improper authorization that allows users with limited permissions to access potentially sensitive project analytics data. Impact: exposu...
CVE-2025-2045
Removed by vendor...
GitLab 17.7.0 < 17.7.6 / 17.8 < 17.8.4 / 17.9 < 17.9.1 (CVE-2025-2045)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive...
Linux Distros Unpatched Vulnerability : CVE-2015-2045
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HYPERVISORxenversion hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive...
Moderate: Red Hat Security Advisory: unbound security update
An update for unbound is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2024-2045
creationtimestamp| type| source ---|---|--- 2024-03-01 01:26:59+00:00| seen| https://t.me/ctinow/197193 2024-03-01 01:27:03+00:00| seen| https://t.me/ctinow/197197...
CVE-2024-2045
Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments...
CVE-2024-2045 Session 1.17.5 - LFR via chat attachment
Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments...
CVE-2024-2045
The CVE-2024-2045 entry concerns Session version 1.17.5. Affected component: Local File Read via chat attachments, enabling retrieval of internal application files and public files from a user’s device without consent. This is a Local attack (LOCAL) requiring user interaction. Descriptions from m...
CVE-2024-2045 Session 1.17.5 - LFR via chat attachment
Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the user's consent. This is possible because the application is vulnerable to Local File Read via chat attachments...
drumcenter.cz Cross Site Scripting vulnerability OBB-3465400
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
EulerOS Virtualization 2.11.1 : libarchive (EulerOS-SA-2023-2045)
According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL...
CVE-2023-2045
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ipekyolu Software Auto Damage Tracking Software allows SQL Injection. This issue affects Auto Damage Tracking Software: before 4...
CVE-2023-2045
CVE-2023-2045 affects Ipekyolu Software Auto Damage Tracking Software prior to version 4. The vulnerability is an SQL Injection caused by improper neutralization of special elements in SQL commands. This can impact confidentiality, integrity, and availability (CVSSv3.1 base score 9.8). The issue ...