Lucene search
+L

52 matches found

Kitploit
Kitploit
•added 2026/10/03 12:33 p.m.•8 views

joniles__mpxj_CVE-2020-35460_8-3-4

MPXJ MPXJ へようこそ! このライブラリは、Java、.Net、Ruby、その他の言語でプロジェクト情報を操作できるようにする一連の機能を提供します。 リリースノートを含む完全なドキュメントは、http://mpxj.org でオンラインで参照できます。...

5.3CVSS6.8AI score0.01864EPSS
SaveExploits0
OSV
OSV
•added 2026/06/25 4:34 a.m.•17 views

CVE-2026-3176 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with limited permissions to access project information due to insufficient authorization...

3.1CVSS5.5AI score
SaveExploits0References6
CVE
CVE
•added 2026/06/25 4:34 a.m.•134 views

CVE-2026-3176

GitLab EE contained a vulnerability CVE-2026-3176 where an authenticated user with limited permissions could access project information due to insufficient authorization checks. Affected releases: GitLab EE 18.6 up to but not including 18.11.6; 19.0 up to but not including 19.0.3; 19.1 up to but ...

3.1CVSS5.5AI score0.0029EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2026/06/25 4:34 a.m.•85 views

CVE-2026-3176

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with limited permissions to access project information due to insufficient authorization...

3.1CVSS5.9AI score0.0029EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•2 views

CVE-2026-3176: Missing Authorization

GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with limited permissions to access project information due to insufficient authorization...

3.1CVSS5.6AI score0.0029EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/02/04 9:07 p.m.•47 views

CVE-2025-27550 IBM Jazz Reporting Service Information Disclosure

IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server...

3.5CVSS0.00223EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:40 p.m.•27 views

CVE-2023-43503

A vulnerability has been identified in COMOS All versions V10.4.4. Caching system in the affected application leaks sensitive information such as user and project information in cleartext via UDP...

7.5CVSS6.4AI score0.00309EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/08 12:00 a.m.•21 views

PT-2025-49605

Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.1762431347 of Tuleap Community Edition and Tuleap Enterprise Edition below 17.0-2, 16.13-7 and 16.12-10 allow attackers to access file release system information in projects they do not...

6.5CVSS6.5AI score0.00279EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2016-5847

Malware in sbrugna...

4.3CVSS4.8AI score0.01366EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-33406

Malicious code in bioql PyPI...

5.3CVSS6.3AI score0.00558EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 8:21 a.m.•8 views

CVE-2024-10240

An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7, all versions starting from 17.4 before 17.4.4, all versions starting from 17.5 before 17.5.2 in which an unauthenticated user may be able to read some information about an MR in a private project,...

5.3CVSS6.6AI score0.00558EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:35 p.m.•18 views

CVE-2021-43575

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic...

8.8CVSS6.3AI score0.00418EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:13 p.m.•13 views

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS6.6AI score0.00418EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:27 p.m.•15 views

CVE-2021-25771

In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed...

5CVSS6.6AI score0.01546EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:09 a.m.•14 views

CVE-2019-19312

GitLab EE 8.14 through 12.5, 12.4.3, and 12.3.6 has Incorrect Access Control. After a project changed to private, previously forked repositories were still able to get information about the private project through the API...

5.8CVSS6.4AI score0.01082EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/26 8:21 a.m.•17 views

CVE-2024-12244

An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1...

4.3CVSS6.2AI score0.00306EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/24 8:15 a.m.•35 views

CVE-2024-12244

An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1...

4.3CVSS0.00306EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•1 views

CVE-2024-12244: Missing Authorization

An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1...

4.3CVSS5.4AI score0.00306EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/04/23 12:00 a.m.•8 views

PT-2025-17662 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 17.7 through 17.9.6 GitLab EE versions 17.10 through 17.10.4 GitLab EE versions 17.11 through 17.11.0 Description: An issue has been discovered in access controls that could allow users to view certain restricted project...

4.3CVSS5.7AI score0.00306EPSS
SaveExploits1References16
CNNVD
CNNVD
•added 2025/01/26 12:00 a.m.•17 views

Gradle 安全漏洞

Gradle is a set of JVM-based project building tools from Gradle, Inc. that supports maven, Ivy repositories, and more. A security vulnerability exists in Gradle Develocity versions prior to 2024.1.8, which stems from an incorrectly migrated project access control configuration that results in...

7.1CVSS6.6AI score0.00345EPSS
SaveExploits0References1
Rows per page
Query Builder