Lucene search
+L

404 matches found

Prion
Prion
added 2020/12/11 4:15 a.m.21 views

Information disclosure

Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions =8.4 to =13.5 to =13.6 to 13.6.2...

2.1CVSS4.5AI score0.00332EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/12/11 4:15 a.m.5 views

UBUNTU-CVE-2020-26416

Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions =8.4 to =13.5 to =13.6 to 13.6.2...

4.4CVSS5.8AI score0.00332EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2020/12/11 4:15 a.m.28 views

CVE-2020-26416

Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions =8.4 to =13.5 to =13.6 to 13.6.2...

4.4CVSS5.8AI score0.00332EPSS
SaveExploits0References3
CVE
CVE
added 2020/12/11 3:34 a.m.99 views

CVE-2020-26416

GitLab EE Information Disclosure (CVE-2020-26416): The Advanced Search component exposes search terms via Rails logs. Affected: GitLab EE versions 8.4 and later, with specific ranges: >=8.4 to =13.5 to =13.6 to

4.4CVSS4.3AI score0.00332EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/12/11 12:00 a.m.8 views

PT-2020-16421 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.4 through 13.4.6 GitLab EE versions 13.5 through 13.5.4 GitLab EE versions 13.6 through 13.6.1 Description: The issue is related to information disclosure in the Advanced Search component of GitLab EE, starting from versi...

4.4CVSS4.2AI score0.00332EPSS
SaveExploits0References29
CNNVD
CNNVD
added 2020/12/10 12:00 a.m.18 views

GitLab 信息泄露漏洞

GitLab is a product of the U.S. et all are U.S. GitLab company.GitLab is a self-hosted, Git version control system project repository application developed using Ruby on Rails.Git et all are products of Git, a free, open source distributed version control system.Rails et all are products of the...

4.4CVSS5.8AI score0.00332EPSS
SaveExploits0References3
NVD
NVD
added 2020/11/17 7:15 p.m.32 views

CVE-2020-13349

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are =8.12, =13.4, =13.5, 13.5.2...

4.3CVSS4.2AI score0.00911EPSS
SaveExploits0References2
OSV
OSV
added 2020/11/17 7:15 p.m.18 views

CVE-2020-13349

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are =8.12, =13.4, =13.5, 13.5.2...

4.3CVSS6.3AI score
SaveExploits0References2
Prion
Prion
added 2020/11/17 7:15 p.m.20 views

Design/Logic Flaw

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are =8.12, =13.4, =13.5, 13.5.2...

4CVSS4.6AI score0.00911EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/11/17 7:15 p.m.21 views

CVE-2020-13349

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are =8.12, =13.4, =13.5, 13.5.2...

4.3CVSS5.7AI score0.00911EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/11/17 6:22 p.m.42 views

CVE-2020-13349

An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are =8.12, =13.4, =13.5, 13.5.2...

4.3CVSS4.6AI score0.00911EPSS
SaveExploits0References2
CVE
CVE
added 2020/11/17 6:22 p.m.73 views

CVE-2020-13349

CVE-2020-13349 affects GitLab EE; a regular expression used for file-path handling in Advanced Search causes catastrophic backtracking in multiple version ranges. Affected: GitLab EE 8.12 and newer with specific gaps: >=8.12, =13.4, =13.5,

4.3CVSS4.5AI score0.00911EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2020/11/17 6:22 p.m.66 views

CVE-2020-13349

Removed by vendor...

4.3CVSS5.8AI score0.00911EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/11/17 12:00 a.m.6 views

PT-2020-13490 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.12 through 13.3.8 GitLab EE versions 13.4 through 13.4.4 GitLab EE versions 13.5 through 13.5.1 Description: An issue has been discovered in GitLab EE where a regular expression related to a file path resulted in the...

4.3CVSS4.2AI score0.00911EPSS
SaveExploits0References8
Packet Storm
Packet Storm
added 2020/09/30 12:00 a.m.158 views

BearShare Lite 5.2.5 Buffer Overflow

Title: BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in PoC Date: 2020-09-29 Author: Christian Vierschilling Vendor Homepage: http://www.bearshareofficial.com/ Software Link: http://www.oldversion.com.de/windows/bearshare-lite-5-2-5 Versions: 5.1.0 - 5.2.5 Tested on: Windows 10 x64 EN/D...

0.4AI score
SaveExploits0
zdt
zdt
added 2020/09/29 12:00 a.m.39 views

BearShare Lite 5.2.5 - (Advanced Search) Buffer Overflow Exploit

Title: BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in PoC Author: Christian Vierschilling Vendor Homepage: http://www.bearshareofficial.com/ Software Link: http://www.oldversion.com.de/windows/bearshare-lite-5-2-5 Versions: 5.1.0 - 5.2.5 Tested on: Windows 10 x64 EN/DE CVE: NA ---...

SaveExploits0
Kitploit
Kitploit
added 2020/06/26 4:33 a.m.85 views

Spyse: All-In-One Cybersecurity Search Engine

Spyse is a cybersecurity search engine for finding technical information about different internet entities, business data, and vulnerabilities. It’s an all-in-one platform for fast and effortless reconnaissance without using any additional tools. Spyse engine implements a ready-to-use database wi...

4.9CVSS6.4AI score0.02138EPSS
SaveExploits1
CNVD
CNVD
added 2020/05/06 12:00 a.m.5 views

WordPress wp-advanced-search SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.LearnPress is a learning management system plugin used in it. A SQL injection vulnerability exists in the import function in...

8.8CVSS8.3AI score0.01602EPSS
SaveExploits0References1
NVD
NVD
added 2020/05/05 3:15 p.m.39 views

CVE-2020-12104

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation...

8.8CVSS9.1AI score0.01602EPSS
SaveExploits0References2
Prion
Prion
added 2020/05/05 3:15 p.m.21 views

Sql injection

The Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to authenticated SQL injection via an uploaded .sql file. An attacker can use this to execute SQL commands without any validation...

6.5CVSS9AI score0.01602EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder