CVE-2023-2485 Incorrect Privilege Assignment in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A malicious maintainer in a project can escalate other users to Owners in that project if they...

CVE-2023-2485 Incorrect Privilege Assignment in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A malicious maintainer in a project can escalate other users to Owners in that project if they...

CVE-2023-2485 Incorrect Privilege Assignment in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A malicious maintainer in a project can escalate other users to Owners in that project if they...

GitLab 14.1 < 15.10.8 / 15.11 < 15.11.7 / 16.0 < 16.0.2 (CVE-2023-2485)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A...

SUSE CVE-2013-2485

The FCSP dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 allows remote attackers to cause a denial of service infinite loop via a malformed packet...

CVE-2022-2485 AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information

Any attempt good or bad to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets...

CVE-2022-2485

CVE-2022-2485 – AutomationDirect Stride Field I/O vulnerability affecting Stride Field I/O devices with listed SIO-MB04RTDS, SIO-MB04ADS, SIO-MB04THMS, SIO-MB08ADS-1/2, SIO-MB08THMS, SIO-MB04DAS, SIO-MB12CDR, SIO-MB16CDD2, SIO-MB16ND3 and related batch numbers. Root cause: cleartext transmission ...

CVE-2022-2485 AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information

Any attempt good or bad to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets...

CVE-2021-2485

CVE-2021-2485 affects Oracle E-Business Suite Trade Management (Quotes) with affected versions 12.1.1–12.1.3. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise data, potentially enabling unauthorized creation, deletion, or modification of critical data w...

CVE-2010-2485

CVE-2010-2485 is rejected/not used; the entry has been withdrawn by its CNA.

SUSE: Security Advisory (SUSE-SU-2012:0844-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Low: Red Hat Security Advisory: gettext security update

An update for gettext is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

PRODSECBUG-2485: Information Disclosure via File upload functionality

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...

Oracle E-Business Multiple Vulnerabilities (Jan 2019 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2019 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the January 2019 Critical Patch Update advisory : - Oracle CRM Technical Foundation Messages component is...

CVE-2019-2485

CVE-2019-2485: Oracle E-Business Suite – Mobile Field Service Administration is affected. Affected versions include 12.1.1–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Mobile Field Service, with human interaction required, potentia...

CVE-2018-2485

The CVE-2018-2485 entry relates to SAP Fiori Client where a malicious app can cause the SAP Fiori app to execute JavaScript, enabling reading/writing information and invoking device JS APIs. Connected documents indicate SAP Fiori Client version 1.11.5 in Google Play addresses these issues, and us...

SUSE SLED12 Security Update : libreoffice (SUSE-SU-2018:2485-1)

This update for libreoffice to 6.0.5.2 fixes the following issues: Security issues fixed : - CVE-2018-10583: An information disclosure vulnerability occurs during automatic processing and initiating an SMB connection embedded in a malicious file, as demonstrated by...

Oracle Linux 6 : git (ELSA-2017-2485)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2485 advisory. 1.7.1-9 - prevent command injection via malicious ssh URLs Resolves: CVE-2017-1000117 Tenable has extracted the preceding description block directly from the...

Virtuozzo Linux Errata and Security Advisory 2017:2485 Important

Upstream security update. Follow RHSA-2017:2485 for details...

CVE-2017-2485

CVE-2017-2485 affects multiple Apple platforms via the Security component: a crafted X.509 certificate can cause remote code execution or memory corruption leading to an app crash. Affected products include iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, and watchOS before 3.2. The issue...