15843 matches found
PT-2024-3736
Name of the Vulnerable Software and Affected Versions: Oracle Java SE version 8u401 Oracle GraalVM Enterprise Edition versions 20.3.13 and 21.3.9 Description: The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE and Oracle GraalVM...
PT-2024-4881
Name of the Vulnerable Software and Affected Versions: Oracle Java SE versions 8u401, 8u401-perf, 11.0.22 Oracle GraalVM Enterprise Edition versions 20.3.13, 21.3.9 Description: The issue is related to insufficient input validation in the Concurrency component of Oracle Java SE and Oracle GraalVM...
Calendarista Basic Edition < 3.0.3 - Cross-Site Request Forgery
Description The Calendarista Basic Edition plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.2. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to perform...
PT-2024-4349 · Oracle +1 · Oracle Graalvm For Jdk +2
Name of the Vulnerable Software and Affected Versions: Oracle GraalVM for JDK versions 17.0.10, 21.0.2, 22 Oracle GraalVM Enterprise Edition versions 20.3.13, 21.3.9 Description: The issue is related to a vulnerability in the Compiler component of Oracle GraalVM for JDK and Oracle GraalVM...
Oracle Java SE 安全漏洞
Oracle Java SE and Oracle GraalVM are both products of Oracle Corporation.Oracle Java SE is a product for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle GraalVM is a suite of on-the-fly compilers written in the Java languag...
PT-2024-3734
Name of the Vulnerable Software and Affected Versions: Oracle Java SE version 8u401 Oracle GraalVM Enterprise Edition versions 20.3.13 and 21.3.9 Description: A difficult to exploit vulnerability in the JavaFX component of Oracle Java SE and Oracle GraalVM Enterprise Edition allows an...
Oracle Java SE 安全漏洞
Oracle Java SE is a for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in Oracle Java SE for Oracle Java SE and Oracle GraalVM Enterprise Edition, which can be exploited by an attacker to gain...
CVE-2024-31942
Cross-Site Request Forgery CSRF vulnerability in typps Calendarista Basic Edition calendarista-basic-edition.This issue affects Calendarista Basic Edition: from n/a through = 3.0.2...
CVE-2024-31942
Calendarista Basic Edition (WordPress) is affected by a Cross-Site Request Forgery (CSRF) vulnerability for Calendarista Booking actions in versions up to 3.0.2. The issue is confirmed as fixed (Patched) in a newer release; upgrade to a patched version when available. If upgrading is not possible...
CVE-2024-31942 WordPress Calendarista Basic Edition plugin <= 3.0.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in typps Calendarista Basic Edition calendarista-basic-edition.This issue affects Calendarista Basic Edition: from n/a through = 3.0.2...
UBUNTU-CVE-2024-3092
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. A payload may lead to a Stored XSS while using the diff viewer, allowing attackers to perform arbitrary actions on behalf of victims...
PT-2024-15047 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions prior to 16.8.6 GitLab EE versions 16.9 through 16.9.3 GitLab EE versions 16.10 through 16.10.1 Description: An issue has been discovered in GitLab EE that allows an attacker to cause a denial of service using maliciously...
Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition
GitLab has fixed vulnerabilities in GitLab Enterprise Edition EE and Community Edition CE. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service, or to execute a Cross-Site Scripting attack. Such an attack could result in execution of arbitrary code in the victim's...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE/EE. An attacker exploited the...
GitLab 跨站脚本漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A cross-site scripting vulnerability exists in GitLab CE/EE versions 16.9 throu...
PT-2024-14968 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.7.7 through 16.8.5 GitLab CE/EE versions 16.9 through 16.9.3 GitLab CE/EE versions 16.10 through 16.10.1 Description: A denial of service issue was identified in GitLab CE/EE, which allows an attacker to increase the...
CVE-2023-6678
An issue has been discovered in GitLab EE affecting all versions before 16.8.6, all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. It was possible for an attacker to cause a denial of service using malicious crafted content in a junit test report file...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab EE. An attacker exploited the...