1241 matches found
CVE-2025-11974
Removed by vendor...
CVE-2025-11974: Allocation of Resources Without Limits or Throttling
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an unauthenticated attacker to create a denial of service condition by uploading large files to specific API endpoints...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /api/v1/secret, and /api/v1/service endpoints. An attacker can retrieve sensitive cluster information by sending unauthenticated requests directly to exposed API paths. Workaround Thi...
PT-2025-43139
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 11.7 through 18.3.5 GitLab CE/EE versions 18.4 through 18.4.3 GitLab CE/EE versions 18.5 through 18.5.1 Description An unauthenticated attacker could create a denial of service condition by uploading large files to specif...
PT-2025-43383
Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description A low-privilege user can access unexpected API endpoints that disclose a small amount of sensitive information. Specifically, a user with limited permissions was able to subscribe to an it...
PT-2025-43392
Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description Jira Align is subject to an authorization issue that allows a low-privilege user to access unexpected API endpoints. This access can lead to the disclosure of a limited amount of sensitive...
PT-2025-43391
Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description A low-privilege user can access unexpected API endpoints, potentially disclosing a limited amount of sensitive information. An example of this issue involves a user with limited permission...
PT-2025-43386
Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description Jira Align is subject to an authorization issue that allows a low-privilege user to access unexpected API endpoints, potentially disclosing a limited amount of sensitive information. An...
PT-2025-43390
Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description Jira Align is subject to an authorization issue that allows a low-privilege user to access unexpected API endpoints, potentially disclosing a limited amount of sensitive information. An...
PT-2025-43388
Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description A low-privilege user can access unexpected API endpoints, potentially disclosing a limited amount of sensitive information. An example of this issue involves a user with limited permission...
PT-2025-43387
Name of the Vulnerable Software and Affected Versions Jira Align affected versions not specified Description A low-privilege user can access unexpected API endpoints, potentially disclosing a small amount of sensitive information. Specifically, a user with limited permissions was able to view...
PT-2025-42392
Name of the Vulnerable Software and Affected Versions Azure Access Technology BLU-IC2 versions through 1.19.5 Azure Access Technology BLU-IC4 versions through 1.19.5 Description A flaw exists in Azure Access Technology BLU-IC2 and BLU-IC4 related to the allocation of resources without limits or...
CVE-2025-59836: Improper Check or Handling of Exceptional Conditions
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, there is a nil pointer dereference vulnerability in the Omni Resource Service allows unauthenticated users to cause a server panic and denial of service by sending empty create/update resource reques...
poc-muliple-dbs
Multi Cosmos DB API A .NET 8 RESTful API demonstrating how to...
EUVD-2017-9992
Malware in sbrugna...
EUVD-2016-10669
Malware in sbrugna...
EUVD-2015-0718
Malware in sbrugna...
EUVD-2021-11948
Malware in sbrugna...