19 matches found
CVE-2025-13927
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.9 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an unauthenticated user to create a denial of service condition by sending crafted requests with malformed authentication data...
EUVD-2005-4378
Malware in sbrugna...
EUVD-2005-4377
Malware in sbrugna...
EUVD-2005-4379
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2023-1084
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15....
CVE-2021-26947
Cross-site scripting XSS issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via a crafted link...
Odoo 跨站脚本漏洞
Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, with PostgreSQL as the database, and includes modules for sales management, inventory management, and financial management. A security...
Odoo 安全漏洞
Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, with PostgreSQL as the database, and includes modules for sales management, inventory management, and financial management. A security...
CVE-2018-20495
An issue was discovered in GitLab Community and Enterprise Edition 11.3.x and 11.4.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows Information Exposure...
The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the rsyslog-debuginfo-7.4.7 package for the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...
The vulnerability of the CentOS operating system, which allows a malicious individual to compromise the accessibility of protected information
The vulnerability of the CentOS operating system’s hypervkvpd-debuginfo-0 package can lead to a violation of the accessibility of protected information. Exploiting this vulnerability can be carried out locally...
CVE-2005-4384
CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid 1 fuseaction parameter to index.cfm and 2 documentid parameter to document/docWindow.cfm...
CVE-2005-4382
The CVE-2005-4382 entry describes an SQL injection vulnerability in CitySoft Community Enterprise 4.x. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying crafted values for (1) nodeID, (2) pageID, (3) ID, (4) parentid parameters to index.cfm and (5) documentF...
CVE-2005-4384
CVE-2005-4384 affects CitySoft Community Enterprise 4.x. The vulnerability enables remote attackers to disclose the server’s full path via invalid parameters: (1) fuseaction in index.cfm and (2) documentid in document/docWindow.cfm. The connected documents provide this concrete detail; no vendor/...
CVE-2005-4384
CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid 1 fuseaction parameter to index.cfm and 2 documentid parameter to document/docWindow.cfm...
CVE-2005-4383
Cross-site scripting XSS vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote attackers to inject arbitrary web script or HTML via the 1 presentationSite, 2 docPublishYear, 3 docDescription, 4 publishState, 5 docAuthor, 6 docTitle, 7 subTopic, 8 topic, 9 topicRadio, 10...
CVE-2005-4383
CVE-2005-4383 describes a cross-site scripting (XSS) vulnerability in CitySoft Community Enterprise 4.x, specifically in index.cfm. The vulnerability arises via multiple parameters (presentationSite, docPublishYear, docDescription, publishState, docAuthor, docTitle, subTopic, topic, topicRadio, t...
Community Enterprise 4.x - Multiple Input Validation Vulnerabilities
Community Enterprise 4.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15963/info Community Enterprise is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...
Community Enterprise 4.x Multiple vuln.
Community Enterprise 4.x Multiple vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html vendor:http://www.citysoft.com/ affected version: 4.x and prior Product Description: CitySoft's Community Enterprise...