CVE-2023-2576 Incorrect Authorization in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. This allowed a developer to remove the CODEOWNERS rules and merge to a protected branch...

CVE-2023-2576

CVE-2023-2576 — GitLab Codeowners bypass . Affects GitLab CE/EE: all versions from 13.7 up to but not including 15.11.10; from 16.0 up to 16.0.5; from 16.1 up to 16.1.0. Root cause: a developer could remove CODEOWNERS rules and merge to a protected branch. Impact stated as enabling modification/m...

FreeBSD : Gitlab -- Vulnerabilities (3117e6cd-1772-11ee-9cd6-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3117e6cd-1772-11ee-9cd6-001b217b3468 advisory. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 befor...

GitLab 13.7 < 15.11.10 / 16.0 < 16.0.6 / 16.1 < 16.1.1 (CVE-2023-2576)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. Th...

K41827200: MySQL vulnerabilities CVE-2018-2562, CVE-2018-2573, CVE-2018-2576, CVE-2018-2583, and CVE-2018-2590

Security Advisory Description CVE-2018-2562 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Partition. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.19 and prior. Easily exploitable vulnerability allows low privileged attack...

SUSE CVE-2015-2576

Unspecified vulnerability in the MySQL Utilities component in Oracle MySQL 1.5.1 and earlier, when running on Windows, allows local users to affect integrity via unknown vectors related to Installation...

io.github.xiaomisum:ryze-coap (=6.1.0), org.apache.camel.karaf:camel-coap (>=4.7.0 <=4.18.2) +34 more potentially affected by CVE-2022-2576 via org.eclipse.californium:californium-core (>=3.0.0 <=3.5.0)

org.eclipse.californium:californium-core MAVEN version =3.0.0, =4.7.0, =3.8.0, =3.8.0, =3.8.0, =4.4.0, =4.4.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.12.0, =2.0.0, =2.0.0-M6, =2.0.0-M15 and more Source cves: CVE-2022-2576 Source advisory: OSV:GHSA-QQ3J-44GW-CF6R...

com.github.xitren.fx:signal-ui-fx (>=1.5.2 <=1.7.10), nl.stijngroenen.tradfri:ikea-tradfri-api (>=1.0.0 <=1.2.0) +26 more potentially affected by CVE-2022-2576 via org.eclipse.californium:californium-core (>=2.0.0 <=2.7.2)

org.eclipse.californium:californium-core MAVEN version =2.0.0, =1.5.2, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.1.0, =1.1.0, =1.1.0, =2.3.0, =3.1.0, =3.1.0, =2.0.0, =2.0.0, =2.3.0, =2.7.2 and more Source cves: CVE-2022-2576 Source advisory:...

CVE-2022-2576

In Eclipse Californium, CVE-2022-2576 affects versions 2.0.0–2.7.2 and 3.0.0–3.5.0. The DTLS resumption handshake can fall back to a full DTLS handshake on parameter mismatch without a HelloVerifyRequest, which, when used with certificate-based cipher suites, enables message amplification that ca...

Mageia: Security Advisory (MGASA-2014-0449)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:0946-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2576-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2576-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2576

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2576

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2020-2576

CVE-2020-2576 refers to the Oracle Outside In Technology vulnerability within Oracle Fusion Middleware (Outside In Filters). Affected is Outside In Filters in 8.5.4; the vulnerability is exploitable remotely over the network via HTTP by an unauthenticated attacker, enabling unauthorized updates/i...

CVE-2019-2576

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2576

The CVE-2019-2576 vulnerability affects Oracle Fusion Middleware’s Oracle Service Bus, Web Container subcomponent, with confirmed impact on versions 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.3.0. The issue allows an unauthenticated attacker who can reach the service over HTTP to compromise Oracle Servic...

CVE-2019-2576

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

RHEL 6 : java-1.7.1-ibm (RHSA-2018:2576)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2576 advisory. - IBM JDK: DoS in the java.math component CVE-2018-1517 - IBM JDK: path traversal flaw in the Diagnostic Tooling Framework CVE-2018-1656 -...