52 matches found
MINI-VC7H-5655-X934
Bulletin has no description...
MINI-5655-9RF3-CG7Q
Bulletin has no description...
SUSE CVE-2026-5655
SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service...
DEBIAN-CVE-2026-5655
SDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 allows denial of service...
CVE-2026-5655
Wireshark SDP protocol dissector crash vulnerability CVE-2026-5655 affects Wireshark 4.6.0–4.6.4, likely a use-after-free issue causing Denial of Service (availability impact HIGH). Exploitation details are not provided in the documents; no in‑the‑wild exploit status is stated. A fixed version is...
EUVD-2020-5655
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2024-5655
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1...
CVE-2025-5655
A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument subcategory leads to sql injection. It is possible to initiate the attack remotely. T...
CVE-2025-5655
CVE-2025-5655 affects PHPGurukul Complaint Management System 2.0, with SQL injection in the /admin/edit-subcategory.php file via the subcategory parameter. Public disclosures and multiple feeds confirm remote exploitation potential and reliance on unsanitized input in the subcategory parameter. T...
CVE-2025-5655 PHPGurukul Complaint Management System edit-subcategory.php sql injection
A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument subcategory leads to sql injection. It is possible to initiate the attack remotely. T...
CVE-2020-5655
NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...
GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Jobs
GitLab has shipped another round of updates to close out security flaws in its software development platform, including a critical bug that allows an attacker to run pipeline jobs as an arbitrary user. Tracked as CVE-2024-6385, the vulnerability carries a CVSS score of 9.6 out of a maximum of 10....
GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others
GitLab has released security updates to address 14 security flaws, including one critical vulnerability that could be exploited to run continuous integration and continuous deployment CI/CD pipelines as any user. The weaknesses, which affect GitLab Community Edition CE and Enterprise Edition EE,...
GitLab 15.8 < 16.11.5 / 17.0 < 17.0.3 / 17.1 < 17.1.1 (CVE-2024-5655)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker...
CVE-2024-5655 Improper Access Control in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances...
CVE-2024-5655 Improper Access Control in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows an attacker to trigger a pipeline as another user under certain circumstances...
CVE-2024-5655
GitLab CVE-2024-5655 affects GitLab CE/EE versions: 15.8–16.11.4, 17.0–17.0.2, and 17.1–17.1.0 (all builds before fixed releases). The issue allows an attacker to trigger a pipeline as another user under certain circumstances (improper access control). Remediation per sources: update to GitLab 16...
CVE-2023-5655
creationtimestamp| type| source ---|---|--- 2023-10-20 07:34:55+00:00| seen| https://t.me/cibsecurity/72638...
CVE-2023-5655
...
CVE-2023-5655
CVE-2023-5655 duplicates CVE-2023-5534 and, per connected sources, affects the WordPress AI ChatBot plugin by QuantumCloud. The vulnerability is Cross-Site Request Forgery due to missing or incorrect nonce validation on AJAX actions that can be invoked by unauthenticated users to perform actions ...