204 matches found
PT-2025-49245
Name of the Vulnerable Software and Affected Versions Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace versions 2025.1.2 and prior Description Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace versions 2025.1.2 and prior are susceptible to a Direct...
BIT-GITLAB-2025-6195 Direct Request ('Forced Browsing') in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 13.7 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated user to view information from security reports under certain configuration conditions...
CVE-2025-6195 Direct Request ('Forced Browsing') in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 13.7 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated user to view information from security reports under certain configuration conditions...
CVE-2025-6195 Direct Request ('Forced Browsing') in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 13.7 before 18.4.5, 18.5 before 18.5.3, and 18.6 before 18.6.1 that could have allowed an authenticated user to view information from security reports under certain configuration conditions...
CVE-2025-6195
CVE-2025-6195 : GitLab EE had a fix for an issue that could allow an authenticated user to view information from security reports under certain configuration conditions. The vulnerability affected all GitLab CE/EE versions up to: 13.7 before 18.4.5; 18.5 before 18.5.3; 18.6 before 18.6.1. The rem...
Drupal CivicTheme Design System 安全漏洞
Drupal CivicTheme Design System is a theme design plugin for the Drupal community. A security vulnerability exists in Drupal CivicTheme Design System versions prior to 1.12.0 that stems from improper authorization and could lead to a forced browsing attack...
Drupal Acquia DAM 安全漏洞
Drupal Acquia DAM is a data synchronization plugin for the Drupal community. A security vulnerability exists in Drupal Acquia DAM versions prior to 1.1.5, which stems from a lack of authorization and could lead to a forced browsing attack...
Drupal Facets 安全漏洞
Drupal Facets is a browser plugin for the Drupal community. A security vulnerability exists in Drupal Facets version 0.0.0 up to and including version 2.0.10 and version 3.0.0 up to and including version 3.0.1, which stems from a lack of authorization and could lead to a forced browsing attack...
Logo Cloud 输入验证错误漏洞
Logo Cloud is a series of cloud-based services and products from Logo Turkey. An input validation error vulnerability exists in versions prior to Logo Cloud 2025.R6, which stems from URL redirection to an untrusted site and could lead to phishing attacks and forced browsing...
Logo Cloud 安全漏洞
Logo Cloud is a series of cloud-based services and products from Logo Turkey. A security vulnerability exists in Logo Cloud versions prior to 0.67, which stems from a user-controllable key leading to an authorization bypass that could lead to forced browsing and resource disclosure...
EUVD-2023-49888
Malicious code in bioql PyPI...
EUVD-2023-50429
Malicious code in bioql PyPI...
EUVD-2023-49890
Malicious code in bioql PyPI...
EUVD-2023-23927
Malicious code in bioql PyPI...
EUVD-2022-34475
Malicious code in bioql PyPI...
EUVD-2025-27987
Malicious code in bioql PyPI...
EUVD-2022-44917
Malicious code in bioql PyPI...
EUVD-2025-8847
Malicious code in bioql PyPI...