Lucene search
+L

73 matches found

Vulnrichment
Vulnrichment
added 2023/01/27 12:0 a.m.7 views

CVE-2022-4255

An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload...

4.3CVSS5AI score0.00491EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2023/01/27 12:0 a.m.79 views

CVE-2022-4255

Removed by vendor...

5.3CVSS6AI score0.00491EPSS
Exploits0
CVE
CVE
added 2023/01/27 12:0 a.m.217 views

CVE-2022-4255

CVE-2022-4255 affects GitLab EE: information leakage via webhook payload exposes user email IDs for all GitLab EE versions 13.7–15.4.5, 15.5–15.5.4, and 15.6–15.6.0. Root cause is an info leak in webhook payloads; affected versions before fixes. Remediation: upgrade to GitLab EE 15.4.6 or later, ...

5.3CVSS4.9AI score0.00491EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/01/16 12:0 a.m.41 views

GitLab 13.7 < 15.4.6 / 15.5 < 15.5.5 / 15.6 < 15.6.1 (CVE-2022-4255)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload...

5.3CVSS5.8AI score0.00491EPSS
Exploits0References3
Circl
Circl
added 2022/12/19 12:41 a.m.5 views

CVE-2021-4255

creationtimestamp| type| source ---|---|--- 2022-12-19 00:41:08+00:00| seen| https://t.me/cibsecurity/54829...

6.1CVSS6.1AI score0.00385EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/12/18 12:0 a.m.4 views

CVE-2021-4255 ctrlo lenio contractor.tt cross site scripting

A vulnerability was found in ctrlo lenio and classified as problematic. Affected by this issue is some unknown functionality of the file views/contractor.tt. The manipulation of the argument contractor.name leads to cross site scripting. The attack may be launched remotely. The name of the patch ...

3.5CVSS4.1AI score0.00385EPSS
Exploits0References2
CVE
CVE
added 2022/12/18 12:0 a.m.60 views

CVE-2021-4255

CVE-2021-4255 affects ctrlo lenio. The vulnerability lies in an unknown functionality of views/contractor.tt where manipulating the contractor.name parameter leads to cross-site scripting. Exploitation is described as potentially remote. A patch identifier is provided (e1646d5cd0a2fbab9eb505196dd...

6.1CVSS4.8AI score0.00385EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2022/11/29 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2022:4255-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.6AI score0.14024EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2020/01/30 12:0 a.m.123 views

Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-4255-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4255-2 advisory. USN-4255-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...

7.8CVSS7.5AI score0.01447EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2020/01/29 12:0 a.m.71 views

Ubuntu: Security Advisory (USN-4255-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.01447EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2019/12/18 12:0 a.m.34 views

RHEL 6 : kernel (RHSA-2019:4255)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4255 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Memory corruption due to...

7.8CVSS6.8AI score0.00774EPSS
Exploits1References6
OSV
OSV
added 2019/01/11 6:29 p.m.4 views

CVE-2018-4255

In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation...

5.5CVSS5.8AI score0.00293EPSS
Exploits0References1
CVE
CVE
added 2019/01/11 6:0 p.m.55 views

CVE-2018-4255

CVE-2018-4255 is documented in Apple HT208849 as a kernel‑level input validation issue in macOS High Sierra (10.13.4). The vulnerability could allow a local attacker to execute arbitrary code with kernel privileges. It was mitigated by enhanced kernel input validation, with remediation delivered ...

5.5CVSS5.8AI score0.00293EPSS
Exploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/15 10:34 p.m.39 views

Security Bulletin: Multiple vulnerabilities in IBM OpenPages Platform with Application Server

Summary The following security vulnerabilities have been identified in versions of IBM OpenPages with Application Server. See Vulnerability Details for CVE IDs. Vulnerability Details Customers who have IBM OpenPages with Application Server are potentially impacted by the following vulnerabilities...

6.8CVSS1.2AI score0.38152EPSS
Exploits8Affected Software1
Apple
Apple
added 2018/06/01 12:0 a.m.212 views

About the security content of macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan

About the security content of macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan This document describes the security content of macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan. About Apple security updat...

10CVSS0.8AI score0.87606EPSS
Exploits43References1Affected Software3
OSV
OSV
added 2016/07/13 2:1 a.m.1 views

CVE-2016-4255

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors...

8.8CVSS6.1AI score
Exploits0References4
CVE
CVE
added 2016/07/13 1:0 a.m.75 views

CVE-2016-4255

Adobe Reader/Acrobat affected by CVE-2016-4255 (Use-after-free) on Windows and OS X. Vulnerable components: Adobe Reader and Acrobat before 11.0.17; Acrobat/Reader DC Classic before 15.006.30198 and DC Continuous before 15.017.20050. Vulnerability allows arbitrary code execution via unspecified v...

8.8CVSS9.3AI score0.05297EPSS
Exploits0References4Affected Software4
Tenable Nessus
Tenable Nessus
added 2016/07/13 12:0 a.m.36 views

Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (Mac OS X)

The version of Adobe Acrobat installed on the remote Mac OS X host is prior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. An...

10CVSS9.2AI score0.27116EPSS
Exploits21References39
OpenVAS
OpenVAS
added 2016/05/03 12:0 a.m.100 views

Oracle WebLogic Server Multiple Unspecified Vulnerabilities (cpujul2014, cpuapr2016)

Oracle WebLogic Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS6.9AI score0.62924EPSS
Exploits8References2
RedhatCVE
RedhatCVE
added 2015/10/30 9:54 a.m.20 views

CVE-2007-4255

Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msqlconnect function...

7.5CVSS8.4AI score0.09333EPSS
Exploits0References2
Rows per page
Query Builder