PT-2021-6607 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 9.3 through 13.11.6 GitLab CE/EE version 13.12.6 GitLab CE/EE version 14.0.2 Description: The issue is related to improper code rendering while rendering merge requests, which could be exploited to submit malicious code...

CVE-2021-22329

CVE-2021-22329 is a license-management vulnerability in Huawei products (S12700, S1700, S2700, S5700, S6700, S7700, S9700 and others) where improper license management allows an attacker with high privileges to perform operations that enable a license file to be applied, compromising device integ...

Siemens TIM 4R-IE Devices

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: TIM 4R-IE Vulnerabilities: Incorrect Type Conversion or Cast, Improper Input Validation, Improper Authentication, Security Features, Null Pointer Dereference, Data Processing Errors,...

The vulnerability of the PMIx MPI resource manager plugin, developed by SLURM, arises from buffer overflows in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PMIx MPI resource manager plugin by SLURM is related to buffer overflow in memory. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Apache SpamAssassin spam filtering software lies in the lack of measures to neutralize special elements. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Apache SpamAssassin spam filtering software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Containerd’s execution environment, related to the lack of privilege checks for containers with UID 0 in the same namespace as the shim, allows a attacker to access confidential data and compromise its integrity.

The vulnerability of Containerd’s execution environment is related to the lack of privilege checks for containers with UID 0 in the same namespace as the shim. Exploiting this vulnerability allows an attacker to access confidential data and compromise its integrity...

The vulnerability of the WebUSB component in Google Chrome, related to integer overflow of values, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebUSB component in Google Chrome relates to a potential overflow of values. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the Samba networking communication package is related to deficiencies in authentication procedures, which allow attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Samba network communication package is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integrity...

The vulnerability of the “next” parameter in the user interface of OpenStack Horizon services arises from the lack of a mechanism for controlling redirection to malicious websites. This allows attackers to access confidential data and compromise its integrity.

The vulnerability of the “next” parameter in the user interface of OpenStack Horizon is related to the lack of checks for this parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential data and compromise its integrity...

The vulnerability of the prive/formulaires/configurer_preferences.php component of the SPIP content management system, related to a lack of mechanism for managing code generation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the prive/formulaires/configurerpreferences.php component of the SPIP content management system is related to a lack of mechanisms for managing code generation. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity...

The vulnerability of the Google Chrome browser’s media component relates to the use of memory after it is freed. This allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s media component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Google Chrome browser’s background fetch component allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Google Chrome browser’s background fetch component is related to the operation of pushing operations beyond the acceptable data buffer limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and caus...

The vulnerability of the WebRTC technology implemented in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC technology implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of Google Chrome’s browser password managers allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s browser password managers is related to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the 3D rendering software SwiftShader in the Google Chrome browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the 3D rendering software SwiftShader in the Google Chrome browser is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of Google Chrome’s IndexedDB component allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s IndexedDB component relates to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the shell autocompletion function in the UNIX command shell Zsh allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the shell autocompletion function in the UNIX command shell Zsh is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of Google Chrome’s Skia graphics library allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s Skia graphics library is related to the execution of operations that go beyond the allowed data buffer limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the audio component in the Google Chrome browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the audio component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Google Chrome’s developer tools components allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s developer tools component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...