Lucene search
K

147 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/21 10:12 p.m.2 views

CVE-2026-5512

An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositories by their numeric ID. The mobile upload policy API endpoint did not perform an early authorization check, and validation error...

5.3CVSS5.8AI score0.00038EPSS
Exploits0References8Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/05 5:8 p.m.14 views

CVE-2025-5512

A vulnerability, which was classified as critical, was found in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file /api/sys/user/verifyPassword/ of the component Administrator Backend. The manipulation leads to improper authentication. It is possible to launch the atta...

7.5CVSS6.8AI score0.00803EPSS
Exploits1References1
Circl
Circl
added 2025/06/03 6:11 p.m.8 views

CVE-2025-5512

creationtimestamp| type| source ---|---|--- 2025-06-03 18:11:32+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpv7tqir4j2 2025-06-03 18:35:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpwlxujyi2r...

9.8CVSS7.3AI score0.00803EPSS
Exploits1References2
NVD
NVD
added 2025/06/03 5:15 p.m.8 views

CVE-2025-5512

A vulnerability, which was classified as critical, was found in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file /api/sys/user/verifyPassword/ of the component Administrator Backend. The manipulation leads to improper authentication. It is possible to launch the atta...

9.8CVSS0.00803EPSS
Exploits1References5
CVE
CVE
added 2025/06/03 5:0 p.m.52 views

CVE-2025-5512

Summary (CVE-2025-5512) : quequnlong shiyi-blog, up to version 1.2.1, has an improper authentication flaw in the Administrator Backend at /api/sys/user/verifyPassword/. The vulnerability affects the Administrator Backend component and can be exploited remotely; multiple sources (NVD/NVD mirror, R...

9.8CVSS7AI score0.00803EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/06/03 5:0 p.m.16 views

CVE-2025-5512 quequnlong shiyi-blog Administrator Backend verifyPassword improper authentication

A vulnerability, which was classified as critical, was found in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file /api/sys/user/verifyPassword/ of the component Administrator Backend. The manipulation leads to improper authentication. It is possible to launch the atta...

7.5CVSS0.00803EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 4:32 a.m.5 views

CVE-2023-5512

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

5.7CVSS6.3AI score0.00296EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:3 p.m.3 views

CVE-2020-5512

Gila CMS 1.11.8 allows /admin/media?path=../ Path Traversal...

6.8CVSS7AI score0.00799EPSS
Exploits1References1
Circl
Circl
added 2024/03/19 7:11 p.m.0 views

CVE-2020-5512

creationtimestamp| type| source ---|---|--- 2024-03-19 19:11:49+00:00| seen| https://t.me/ctinow/211850...

6.8CVSS6.4AI score0.00799EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2024/02/20 12:46 p.m.8 views

CVE-2014-5512

Removed by vendor...

5.8AI score
Exploits0
Circl
Circl
added 2024/01/11 4:31 p.m.0 views

CVE-2023-5512

creationtimestamp| type| source ---|---|--- 2024-01-11 16:31:36+00:00| seen| https://t.me/ctinow/166619 2025-05-22 04:44:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17249...

5.7CVSS5.6AI score0.00296EPSS
Exploits0References2
NVD
NVD
added 2023/12/15 4:15 p.m.14 views

CVE-2023-5512

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

5.7CVSS0.00296EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2023/12/15 4:15 p.m.13 views

CVE-2023-5512

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

5.7CVSS6AI score0.00296EPSS
Exploits0References1
CVE
CVE
added 2023/12/15 4:3 p.m.64 views

CVE-2023-5512

CVE-2023-5512 affects GitLab CE/EE and concerns file integrity being compromised when specific HTML encoding is used for file names, causing incorrect UI representations. Affected versions: 16.3–16.4.3, 16.5–16.5.3, and 16.6–16.6.1. Root cause is a UI/filename encoding issue; no exploit details a...

5.7CVSS5.3AI score0.00296EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2023/12/15 4:3 p.m.14 views

CVE-2023-5512

Removed by vendor...

5.7CVSS6.2AI score0.00296EPSS
Exploits0
Cvelist
Cvelist
added 2023/12/15 4:3 p.m.19 views

CVE-2023-5512 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

4.8CVSS5.9AI score0.00296EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/12/14 12:0 a.m.23 views

GitLab 16.3 < 16.4.4 / 16.5 < 16.5.4 / 16.6 < 16.6.2 (CVE-2023-5512)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrit...

5.7CVSS5.8AI score0.00296EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/12/14 12:0 a.m.44 views

FreeBSD : Gitlab -- vulnerabilities (e2fb85ce-9a3c-11ee-af26-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e2fb85ce-9a3c-11ee-af26-001b217b3468 advisory. - Gitlab reports: Smartcard authentication allows impersonation of arbitrary user using user's...

8.8CVSS6.6AI score0.00296EPSS
Exploits0References10
OpenVAS
OpenVAS
added 2023/10/03 12:0 a.m.32 views

Debian: Security Advisory (DSA-5512-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.5AI score0.65812EPSS
Exploits5References4
F5 Networks
F5 Networks
added 2023/02/21 6:54 p.m.26 views

K51754851: BIG-IP system vulnerability CVE-2018-5512

Security Advisory Description When Large Receive Offload LRO and SYN cookies are enabled default settings, undisclosed traffic patterns may cause TMM to restart. CVE-2018-5512 Impact An attacker may be able to cause a disruption of service. Exposure to this vulnerability is limited to the data...

7.8CVSS7.4AI score0.02225EPSS
Exploits0Affected Software13
Rows per page
Query Builder