18124 matches found
CVE-2019-11544
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It allows Information Disclosure. Non-member users who subscribe to notifications of an internal project with issue and repository...
CVE-2019-11544
Removed by vendor...
CVE-2019-11544
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It allows Information Disclosure. Non-member users who subscribe to notifications of an internal project with issue and repository...
CVE-2019-16181: Undefined Security Weakness
In Limesurvey before 3.17.14, admin users can mark other users' notifications as read...
PT-2019-14561
Name of the Vulnerable Software and Affected Versions Limesurvey versions prior to 3.17.14 Description The issue allows admin users to mark other users' notifications as read. Recommendations For versions prior to 3.17.14, update to version 3.17.14 or later to resolve the issue...
PT-2019-12367
Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions 8.x through 11.x before 11.8.9 GitLab Community and Enterprise Edition versions 11.9.x before 11.9.10 GitLab Community and Enterprise Edition versions 11.10.x before 11.10.2 Description The issu...
CVE-2019-11544: Undefined Security Weakness
An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It allows Information Disclosure. Non-member users who subscribe to notifications of an internal project with issue and repository...
CVE-2019-6789: Improper Privilege Management
An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure issue 4 of 6. In some cases, users without project permissions will receive emails after a project move. For private projects, this wi...
Gamification Can Transform Company Cybersecurity Culture
Chief information security officers CISOs of Global 2000 enterprises have one of the toughest jobs in the world, defending their organization’s cyberspace and being the guardian of its assets and private information. But CISOs also have a second, even bigger problem: Their own company employees...
WordPress onesignal-free-web-push-notifications plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. onesignal-free-web-push-notifications is a plugin used to push notifications to site visitors. A cross-site scripting vulnerability...
CVE-2019-15827
The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter...
CVE-2019-15827
The CVE-2019-15827 entry affects the WordPress plugin onesignal-free-web-push-notifications, specifically versions before 1.17.8. The vulnerability is an XSS via the subdomain parameter (POST or input handling) that can lead to client-side script execution within the context of an affected site. ...
CVE-2019-15827: Improper Neutralization of Input During Web Page Generation
The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter...
PT-2019-14416
Name of the Vulnerable Software and Affected Versions onesignal-free-web-push-notifications plugin versions prior to 1.17.8 Description The issue allows for XSS via the subdomain parameter. Recommendations For versions prior to 1.17.8, update to version 1.17.8 or later to resolve the issue...
Scientific Linux Security Update : kde-workspace on SL7.x x86_64 (20190806)
Security Fixes : - kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element CVE-2018-6790 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128224; scriptversion"1.4";...
Nextcloud: Username and Access Token Disclousure
Versions ===================== Nextcloud Server Version: 16.0.3.0 it.tsweb.Nextcloud iOS App Version: 2.23.7 Description ===================== While logging in to an owncloud instance the iOS client sends the Username and password to the ressource /login?redirecturl=/login/flow/grant and recieves...
CVE-2017-18495
The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS...
CVE-2017-18495
The connected records confirm CVE-2017-18495 affects the Gravity Forms SMS Notifications plugin for WordPress, with a cross-site scripting (XSS) vulnerability in versions prior to 2.4.0. The issue arises from insufficient validation of client-side data, enabling an attacker to execute client-side...
