Lucene search
+L

28 matches found

Positive Technologies
Positive Technologies
•added 2023/03/03 12:00 a.m.•16 views

PT-2023-16792 · Unknown · Kylin-Activation

Name of the Vulnerable Software and Affected Versions: kylin-activation versions prior to 1.3.11-23 and 1.30.10-5.p23 Description: A critical issue was found in the File Import component of kylin-activation, leading to improper authorization. The attack must be approached locally. The exploit has...

8.4CVSS7.2AI score0.00381EPSS
SaveExploits1References5
Prion
Prion
•added 2018/07/03 9:29 p.m.•32 views

Authorization

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously unauthorized...

5CVSS7.4AI score0.01083EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2018/07/03 9:29 p.m.•32 views

CVE-2017-0919

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously unauthorized...

7.5CVSS6.9AI score
SaveExploits0References1
Debian CVE
Debian CVE
•added 2018/07/03 9:00 p.m.•67 views

CVE-2017-0919

Removed by vendor...

7.5CVSS7.1AI score0.01083EPSS
SaveExploits0
Cvelist
Cvelist
•added 2018/07/03 9:00 p.m.•54 views

CVE-2017-0919

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously unauthorized...

7.5AI score0.01083EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/03 12:00 a.m.•4 views

CVE-2017-0919: Missing Authentication for Critical Function

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously unauthorized...

7.5CVSS7.3AI score0.01083EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/03/22 12:00 a.m.•19 views

Gitlab project import component remote code execution vulnerability

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository , which has similar features to Github , you can access the project's file content , commit history , bug lists , etc. GitLab Community Edition CE is...

7.8CVSS7.1AI score0.02839EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/03/18 12:00 a.m.•9 views

PT-2018-16134 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: Gitlab Community and Enterprise Editions version 10.3.3 Description: The issue is related to an insecure temporary file in the project import component, which can result in remote code execution. Recommendations: For Gitlab Community and...

9.8CVSS7.4AI score0.05514EPSS
SaveExploits1References21
Rows per page
Query Builder