CVE-2019-15577

Removed by vendor...

PT-2019-14293

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions prior to 12.3.2 GitLab CE/EE versions prior to 12.2.6 GitLab CE/EE versions prior to 12.1.12 Description An information disclosure issue exists that allows project milestones to be disclosed via groups browsing...

CVE-2019-15575: Improper Neutralization of Special Elements used in a Command

A command injection exists in GitLab CE/EE...

PT-2019-17704

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions prior to 12.3.2 GitLab CE/EE versions prior to 12.2.6 GitLab CE/EE versions prior to 12.1.12 Description A authentication bypass vulnerability exists in the Salesforce login integration that could be used by an attacker t...

PT-2019-14291

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions prior to 12.3.2 GitLab CE/EE versions prior to 12.2.6 GitLab CE/EE versions prior to 12.1.12 Description A command injection issue exists that allows an attacker to inject commands via the API through the blobs scope...

PT-2019-14292

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions prior to 12.3.2 GitLab CE/EE versions prior to 12.2.6 GitLab CE/EE versions prior to 12.1.12 Description An information disclosure issue exists that allows an attacker to view private system notes from a GraphQL endpoint...

PT-2019-17705

Name of the Vulnerable Software and Affected Versions Gitlab EE versions prior to 12.3.3 Gitlab EE versions prior to 12.2.7 Gitlab EE versions prior to 12.1.13 Description An issue exists that allows the group search feature with Elasticsearch to return private code, merge requests, and commits d...

CVE-2019-15576: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in GitLab CE/EE...

CVE-2019-15577: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in GitLab CE/EE...

CVE-2019-5486: Authentication Bypass Using an Alternate Path or Channel

A authentication bypass vulnerability exists in GitLab CE/EE...

CVE-2019-5487: Improper Access Control

An improper access control vulnerability exists in Gitlab EE...

CVE-2019-15631

CVE-2019-15631 is a remote code execution vulnerability affecting MuleSoft Mule CE/EE 3.x and API Gateway 2.x, described as exploitable to run arbitrary code by a remote attacker and linked to releases before 31 October 2019. The connected records consistently identify the affected product family...

PT-2019-14308

Name of the Vulnerable Software and Affected Versions MuleSoft Mule CE/EE versions 3.x MuleSoft API Gateway versions 2.x Description A Remote Code Execution issue allows remote attackers to execute arbitrary code. Recommendations For MuleSoft Mule CE/EE versions 3.x, update to a version released...

CVE-2019-15631: Undefined Security Weakness

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code...

CVE-2019-18454

An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki pages feature. It has XSS...

CVE-2019-18462

An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4. It has Insecure Permissions...

CVE-2019-2897

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

Oracle Mojarra JSF / Eclipse Mojarra JSF 2.2 / 2.3 Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Reflected Cross-Site Scripting XSS product: Oracle Mojarra JSF included in Java EE 7 Eclipse Mojarra JSF vulnerable version: 2.2 & 2.3 fixed version:...

CVE-2019-5463

An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...

CVE-2019-5467

An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vulnerability was addressed in 12.1.2, 12.0.4, and 11.11.6...