Lucene search
+L

423 matches found

Qualys Blog
Qualys Blog
•added 2024/05/02 5:35 p.m.•29 views

Agentless FIM for Detecting Network Configuration Changes

Dealing with multiple network administrators making frequent configuration changes with a monitoring solution that provides insights into device change without causing resource constraints. The performance and capabilities of a network device are entirely dependent upon its configuration settings...

7.2AI score
SaveExploits0
Cvelist
Cvelist
•added 2024/05/02 1:11 p.m.•35 views

CVE-2024-23462 ZCC Mac validinstaller file integrity check missing

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4...

3.3CVSS4.5AI score0.00191EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/02 1:11 p.m.•16 views

CVE-2024-23462 ZCC Mac validinstaller file integrity check missing

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4...

3.3CVSS7AI score0.00191EPSS
SaveExploits0References1
Qualys Blog
Qualys Blog
•added 2024/04/15 5:37 p.m.•37 views

Navigating the EU NIS2 Directive

How Qualys Cybersecurity Solutions Ensure Compliance The European Union’s revised Network and Information Security NIS2 Directive is a comprehensive cybersecurity regulation aimed at bolstering the resilience of critical entities and essential services across the EU. As organizations grapple with...

7.6AI score
SaveExploits0
Cvelist
Cvelist
•added 2024/04/09 5:19 p.m.•39 views

CVE-2024-31454 PsiTransfer file integrity violation vulnerability

PsiTransfer is an open source, self-hosted file sharing solution. Prior to version 2.2.0, the absence of restrictions on the endpoint, which is designed for uploading files, allows an attacker who received the id of a file distribution to change the files that are in this distribution. The...

6.5CVSS6.7AI score0.00524EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/09 5:19 p.m.•17 views

CVE-2024-31454 PsiTransfer file integrity violation vulnerability

PsiTransfer is an open source, self-hosted file sharing solution. Prior to version 2.2.0, the absence of restrictions on the endpoint, which is designed for uploading files, allows an attacker who received the id of a file distribution to change the files that are in this distribution. The...

6.5CVSS7.2AI score0.00524EPSS
SaveExploits0References2
osv_bit
osv_bit
•added 2024/03/06 11:11 a.m.•45 views

BIT-GITLAB-2023-1178

An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. File integrity may be compromised when source code or installation packages are pulled from a tag or from a...

5.7CVSS5.6AI score0.00894EPSS
SaveExploits0References4
osv_bit
osv_bit
•added 2024/03/06 10:56 a.m.•38 views

BIT-GITLAB-2023-5512 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

5.7CVSS5.2AI score0.00494EPSS
SaveExploits0References3
osv_bit
osv_bit
•added 2024/03/06 10:55 a.m.•33 views

BIT-GITLAB-2023-6051 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installation packages are pulled from a specific tag...

6.5CVSS5.9AI score0.00632EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/01/25 12:00 a.m.•20 views

AppleMobileFileIntegrity Disclosure

The vulnerability of AppleMobileFileIntegrity in the Safari browser and operating systems macOS, iOS, iPadOS is related to permission handling errors. Exploiting this vulnerability can allow attackers to disclose sensitive information...

5.5CVSS5.8AI score0.00213EPSS
SaveExploits0References4Affected Software4
GithubExploit
GithubExploit
•added 2023/12/26 1:36 a.m.•498 views

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

winDED Custom exploit for CVE-2023-38831 using python. Int...

7.8CVSS7.7AI score0.99815EPSS
SaveExploits49
NVD
NVD
•added 2023/12/15 4:15 p.m.•31 views

CVE-2023-5512

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

5.7CVSS0.00494EPSS
SaveExploits0References2
NVD
NVD
•added 2023/12/15 4:15 p.m.•31 views

CVE-2023-6051

An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installation packages are pulled from a specific tag...

6.5CVSS0.00632EPSS
SaveExploits0References2
Prion
Prion
•added 2023/12/15 4:15 p.m.•27 views

Code injection

An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installation packages are pulled from a specific tag...

4CVSS6.8AI score0.00632EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2023/12/15 4:15 p.m.•42 views

CVE-2023-6051

An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installation packages are pulled from a specific tag...

6.5CVSS6.5AI score0.00632EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2023/12/15 4:15 p.m.•20 views

CVE-2023-5512

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

5.7CVSS6AI score0.00494EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2023/12/15 4:15 p.m.•18 views

UBUNTU-CVE-2023-6051

An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when source code or installation packages are pulled from a specific tag...

6.5CVSS5.8AI score0.00632EPSS
SaveExploits0References2
Prion
Prion
•added 2023/12/15 4:15 p.m.•22 views

Design/Logic Flaw

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

3.5CVSS6.5AI score0.00494EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/12/15 4:03 p.m.•102 views

CVE-2023-5512

CVE-2023-5512 affects GitLab CE/EE and concerns file integrity being compromised when specific HTML encoding is used for file names, causing incorrect UI representations. Affected versions: 16.3–16.4.3, 16.5–16.5.3, and 16.6–16.6.1. Root cause is a UI/filename encoding issue; no exploit details a...

5.7CVSS5.3AI score0.00494EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/12/15 4:03 p.m.•53 views

CVE-2023-5512 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.3 before 16.4.4, all versions starting from 16.5 before 16.5.4, all versions starting from 16.6 before 16.6.2. File integrity may be compromised when specific HTML encoding is used for file names leading for incorrect...

4.8CVSS5.9AI score0.00494EPSS
SaveExploits0References2
Rows per page
Query Builder