8664 matches found
PT-2024-6674 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.9 through 16.11.5 GitLab CE/EE versions 17.0 through 17.0.3 GitLab CE/EE versions 17.1 through 17.1.1 Description: The issue is related to a stored XSS vulnerability that can be imported from a project with malicious...
CVE-2024-28087
In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...
CVE-2024-28087
The CVE describes an Insecure Direct Object Reference (IDOR) affecting Bonitasoft runtime Community edition. The root cause is the absence of dynamic permissions, whereas dynamic permissions existed only in the Subscription edition and have now been restored in Community edition but are not custo...
PT-2024-22255 · Bonitasoft · Bonitasoft Runtime Community Edition
Name of the Vulnerable Software and Affected Versions: Bonitasoft runtime Community edition affected versions not specified Description: The issue is related to the lack of dynamic permissions in the Community edition of Bonitasoft runtime, which causes an Insecure Direct Object Reference IDOR...
UBUNTU-CVE-2024-4539
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 where abusing the API to filter branch and tags could lead to Denial of Service...
.NET 7.0 Update - May 14, 2024 (KB5038351)
None None...
.NET 8.0 Update - May 14, 2024 (KB5038352)
None None...
GitLab CE/EE 资源管理错误漏洞
GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community edition of GitLab. A resource management error vulnerability exists in GitLab CE/EE. An attacker could u...
.NET 6.0 Update - May 14, 2024 (KB5038350)
None None...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab CE/EE versions prior to 16.11 to...
Ant Media Server 安全漏洞
Ant Media Server is a real-time streaming engine software from Ant Media open source. It provides adaptive ultra-low latency streaming using WebRTC technology with a latency of approximately 0.5 seconds. A security vulnerability exists in Ant Media Server Community Edition prior to version 2.9.0...
编号撤回
SoundCloud is a music community application. This CVE number has been withdrawn...
PT-2024-26036 · Ant Media Server · Ant Media Server Community Edition
Name of the Vulnerable Software and Affected Versions: Ant Media Server Community Edition versions prior to 2.9.0 Description: The issue is related to an improper HTTP header based authorization, allowing the use of non-administrative API calls reserved for authorized users. Recommendations: For...
RLSA-2024:1427 Important: libreoffice security update
LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...
A Bootiful Podcast: Carl Azoury, Zenika founder and CEO
Hi, Spring fans! In this installment I talk to Zenika founder and CEO Carl Azoury, and friend to the community and a part of the Spring story for decades...
CVE-2024-21098
A vulnerability was found in GraalVM and Mandrel Community Edition. Successful attacks of this vulnerability can result in the unauthorized ability to cause a partial denial of service partial DOS. Mitigation No current mitigation is available for this vulnerability...
Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition
GitLab has fixed vulnerabilities in GitLab Enterprise Edition EE and Community Edition CE. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service, or to bypass security measures to gain access to sensitive data or, under specific circumstances, to take over an account ta...
CVE-2024-0916
Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3...