24935 matches found
CVE-2024-2211
creationtimestamp| type| source ---|---|--- 2024-03-06 12:26:25+00:00| seen| https://t.me/ctinow/201274 2024-03-06 12:26:27+00:00| seen| https://t.me/ctinow/201276...
BIT-GITLAB-2020-13314
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Omniauth endpoint allowed a malicious user to submit content to be displayed back to the user within error messages...
BIT-GITLAB-2021-22169
An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages...
BIT-SEOPANEL-2024-22647
An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...
BIT-DISCOURSE-2023-23935 Presence of restricted personal Discourse messages may be leaked if tagged with a tag
Discourse is an open-source messaging platform. In versions 3.0.1 and prior on the stable branch and versions 3.1.0.beta2 and prior on the beta and tests-passed branches, the count of personal messages displayed for a tag is a count of all personal messages regardless of whether the personal...
BIT-MEDIAWIKI-2023-45360
An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is XSS in youhavenewmessagesmanyusers and youhavenewmessages i18n messages. This is related to MediaWiki:Youhavenewmessagesfromusers...
BIT-MEDIAWIKI-2023-51704
An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In includes/logging/RightsLogFormatter.php, group--member messages can result in XSS on Special:log/rights...
BIT-GRAFANA-2023-2183
Grafana is an open-source platform for monitoring and observability. The option to send a test alert is not available from the user panel UI for users having the Viewer role. It is still possible for a user with the Viewer role to send a test alert using the API as the API does not check access t...
BIT-ARGO-CD-2021-23135
Exposure of System Data to an Unauthorized Control Sphere vulnerability in web UI of Argo CD allows attacker to cause leaked secret data into web UI error messages and logs. This issue affects Argo CD 1.8 versions prior to 1.8.7; 1.7 versions prior to 1.7.14...
BIT-ARGO-CD-2023-25163
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v2.6.0-rc1 have an output sanitization bug which leaks repository access credentials in error messages. These error messages are visible to the user, and they are logged. The error...
CVE-2024-26624
creationtimestamp| type| source ---|---|--- 2024-03-06 08:27:13+00:00| seen| https://t.me/ctinow/201100 2024-03-06 19:56:40+00:00| seen| https://t.me/ctinow/201728...
CVE-2024-26623
creationtimestamp| type| source ---|---|--- 2024-03-06 08:27:09+00:00| seen| https://t.me/ctinow/201099 2024-03-06 19:56:41+00:00| seen| https://t.me/ctinow/201729...
CVE-2024-24766
creationtimestamp| type| source ---|---|--- 2024-03-06 02:43:54+00:00| published-proof-of-concept| https://github.com/IceWhaleTech/CasaOS-UserService/security/advisories/GHSA-c967-2652-gfjm 2024-03-06 20:26:45+00:00| seen| https://t.me/ctinow/201756 2024-03-06 20:36:15+00:00| seen|...
CVE-2024-27278
creationtimestamp| type| source ---|---|--- 2024-03-06 01:26:18+00:00| seen| https://t.me/ctinow/200917 2024-03-06 01:26:28+00:00| seen| https://t.me/ctinow/200924...
CVE-2024-22889
creationtimestamp| type| source ---|---|--- 2024-03-06 01:26:13+00:00| seen| https://t.me/ctinow/200915 2024-03-06 01:26:26+00:00| seen| https://t.me/ctinow/200922...
CVE-2023-45290
creationtimestamp| type| source ---|---|--- 2024-03-06 00:26:41+00:00| seen| https://t.me/ctinow/200854 2024-03-06 00:26:59+00:00| seen| https://t.me/ctinow/200866 2024-03-06 04:41:50+00:00| seen| https://t.me/ctinow/200996 2024-03-07 08:33:41+00:00| seen| https://t.me/arpsyndicate/4128...
PT-2024-20544 · Unknown · Casaos-Userservice
Name of the Vulnerable Software and Affected Versions: CasaOS-UserService versions 0.4.4.3 through 0.4.6 Description: The CasaOS Login page has a username enumeration issue, allowing an attacker to enumerate CasaOS usernames using the application response. If the username is incorrect, the...
Dell PowerScale OneFS Insufficient Logging Vulnerability (CNVD-2024-16222)
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A logging insufficiency vulnerability exists in Dell PowerScale OneFS, which can be exploited by an attacker to cause audit messages to be lost and unrecorded for...
AZL-37119 CVE-2024-24786 affecting package node-problem-detector for versions less than 0.8.17-2
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...