CVE-2023-4532 Incorrect Authorization in GitLab

An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. Users were capable of linking CI/CD jobs of private projects which they are not a member of...

CVE-2023-4532 Incorrect Authorization in GitLab

An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. Users were capable of linking CI/CD jobs of private projects which they are not a member of...

CVE-2023-4532

GitLab CVE-2023-4532 affects all versions from 16.2 up to but not including 16.2.8; 16.3 up to but not including 16.3.5; and 16.4 up to but not including 16.4.1. The issue allows users to link CI/CD jobs for private projects they are not members of. The provided documents describe the affected ve...

GitLab 16.2 < 16.2.8 / 16.3 < 16.3.5 / 16.4 < 16.4.1 (CVE-2023-4532)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. Users were...

CVE-2019-4532

CVE-2019-4532 affects IBM Resilient OnPrem. The vulnerability exists in IBM Resilient versions 33.x and 34.0 where the platform does not properly limit the number or frequency of interactions with an actor (e.g., password reset requests). This could enable abuse of reset flows. Remediation: upgra...

Ubuntu 18.04 LTS : Netty vulnerabilities (USN-4532-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4532-1 advisory. It was discovered that Netty incorrectly handled certain HTTP headers. By sending an HTTP header with whitespace before the colon, a remote attacker coul...

CVE-2020-4532

CVE-2020-4532 affects IBM Business Automation Workflow and IBM Business Process Manager. Affected: IBM BPM/Business Automation Workflow (IBM BPM Express 8.5.5, 8.5.6, 8.5.7, and 8.6; BPM 8.6; and related 18.0.0.1/19.0.0.3 lines per bulletin). Description: remote attacker can obtain sensitive info...

Security Bulletin: Information disclosure vulnerability affects IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-4532

Summary IBM Business Process Manager and IBM Business Automation Workflow are vulnerable to an information disclosure attack. Vulnerability Details CVEID: CVE-2020-4532 DESCRIPTION: IBM Business Automation Workflow and IBM Business Process Manager could allow a remote attacker to obtain sensitive...

CVE-2013-4532

creationtimestamp| type| source ---|---|--- 2020-01-02 18:49:07+00:00| seen| https://t.me/cibsecurity/8943...

CVE-2013-4532

CVE-2013-4532 affects QEMU 1.1.2+dfsg through 2.1+dfsg. The issue is a buffer overrun that could allow arbitrary code execution on the host with the QEMU process privileges. The connected resources corroborate the same impact. The provided materials do not specify a fixed version or remediation; ...

CVE-2013-4532

Qemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process...

CVE-2010-4532

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks...

CVE-2010-4532

CVE-2010-4532 affects offlineimap prior to 6.3.2. The issue is that SSL certificate validation is not performed when the option “ssl = yes” is used, enabling potential man-in-the-middle attacks. This is caused by missing certificate validation in the SSL path of the client. Impact is limited to c...

Debian DSA-4532-1 : spip - security update

It was discovered that SPIP, a website engine for publishing, would allow unauthenticated users to modify published content and write to the database, perform cross-site request forgeries, and enumerate registered users. C Tenable Network Security, Inc. The descriptive text and package checks in...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4532)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4532 advisory. - ext4: validate that metadata blocks do not overlap superblock Theodore Ts'o Orabug: 28220451 CVE-2018-1094 - ext4: always initialize the crc32c...

CVE-2017-4532

CVE-2017-4532 is rejected/not used; this candidate does not represent an active vulnerability entry.

Trihedral VTScada 8.x < 11.2.02 Multiple Vulnerabilities

Binary data scadatrihedralvtscada11202.nbin...

CVE-2016-4532

The CVE covers Trihedral VTScada (WAP interface) directory-traversal vulnerability affecting VTScada/VTS 8.x through 11.2.02. A crafted pathname enables remote attackers to read arbitrary files due to improper path restrictions and, per ZDI, authentication may be bypassed. Impact: sensitive file ...

bonappetit.com XSS vulnerability

Vulnerable URL: http://www.bonappetit.com/?s=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E=&global-search-submit;=submit Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

ESA-2015-131: EMC Documentum Content Server Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-131: EMC Documentum Content Server Multiple Vulnerabilities EMC Identifier: ESA-2015-131 CVE Identifier: CVE-2015-4531, CVE-2015-4532, CVE-2015-4533, CVE-2015-4534, CVE-2015-4535, CVE-2015-4536 Severity Rating: CVSS v2 Base Score: See below f...