PT-2023-18709 · Unknown · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue arises when archiving a team, as Mattermost fails to sanitize the related Websocket event sent to currently connected clients. This allows the clients to see the name, display...

Mattermost 信息泄露漏洞

Mattermost is an open source collaboration platform from US-based Mattermost. Mattermost suffers from an information disclosure vulnerability that stems from an inability to clean up related websocket events sent to the currently connected client. An attacker exploiting the vulnerability could vi...

PT-2023-22993 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 8.0.4 and 1.7.8.9 Description: The issue concerns the ValidateCore::isCleanHTML method of PrestaShop, which misses hijackable events, leading to cross-site scripting XSS injection. This is allowed by the presence ...

CVE-2023-1624

creationtimestamp| type| source ---|---|--- 2023-04-24 22:19:32+00:00| seen| https://t.me/cibsecurity/62743 2025-02-06 02:42:29+00:00| seen| Telegram/Sa2g86eHn7FrTNZFgc56tZGggvAUlADWDoG1ExA75wlaN37...

UBUNTU-CVE-2023-2019

A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system...

WordPress Chronosly Events Calendar Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Chronosly Events Calendar Type Plugin Vulnerable versions = 2.6.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-31093 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID de80c38a0ada Credits Mika Requir...

The vulnerability of the RDMA emulator hardware component in QEMU allows a hacker to trigger a service failure.

The vulnerability of the RDMA hardware emulation component of QEMU is related to the allocation and initialization of a large number of page tables, which will be used as descriptors for CQ and asynchronous events. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2023-26048

creationtimestamp| type| source ---|---|--- 2023-04-19 00:29:32+00:00| seen| https://t.me/cibsecurity/62391 2023-11-27 22:29:21+00:00| seen| https://t.me/arpsyndicate/601 2024-01-28 00:58:14+00:00| seen| https://t.me/arpsyndicate/3141...

CVE-2018-17449

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Remote attackers could obtain sensitive information about issues, comments, and project titles via events API insecure direct object reference...

CVE-2018-17449

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Remote attackers could obtain sensitive information about issues, comments, and project titles via events API insecure direct object reference...

CVE-2018-17449

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Remote attackers could obtain sensitive information about issues, comments, and project titles via events API insecure direct object reference...

Information disclosure

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Remote attackers could obtain sensitive information about issues, comments, and project titles via events API insecure direct object reference...

CVE-2023-2097

creationtimestamp| type| source ---|---|--- 2023-04-15 16:26:40+00:00| seen| https://t.me/cibsecurity/62227 2023-11-25 03:26:59+00:00| seen| https://t.me/arpsyndicate/565 2023-12-10 17:35:21+00:00| seen| https://t.me/arpsyndicate/1665...

CVE-2023-2092

creationtimestamp| type| source ---|---|--- 2023-04-15 14:39:48+00:00| seen| https://t.me/cibsecurity/62221 2023-11-25 01:25:46+00:00| seen| https://t.me/arpsyndicate/559 2023-12-10 12:26:55+00:00| seen| https://t.me/arpsyndicate/1617...

PT-2023-10696 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 11.1.0 through 11.1.7 GitLab Community and Enterprise Edition versions 11.2.x through 11.2.4 GitLab Community and Enterprise Edition versions 11.3.x through 11.3.1 Description: An issue allows...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab, which stems from an insecure direct...

CVE-2018-17449

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. Remote attackers could obtain sensitive information about issues, comments, and project titles via events API insecure direct object reference...

CVE-2018-17449

Removed by vendor...

WordPress Events Made Easy Plugin <= 2.3.14 is vulnerable to SQL Injection

Software Events Made Easy Type Plugin Vulnerable versions = 2.3.14 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-28660 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID b6f80ca22af2 Credits Joshua Martinelle Tenable Research Required...

WordPress Amr Ical Events Lists Plugin <= 6.6 is vulnerable to Cross Site Scripting (XSS)

Software Amr Ical Events Lists Type Plugin Vulnerable versions = 6.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1021 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 29580a26d815 Credits Shreya Pohekar Require...