CVE-2022-2244

An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows project memebers with reporter role to manage issues in project's error tracking feature...

CVE-2022-2244

An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows project memebers with reporter role to manage issues in project's error tracking feature...

PT-2022-15432 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 14.8 through 14.10.4 GitLab EE/CE versions 15.0 through 15.0.3 GitLab EE/CE versions 15.1 through 15.1.0 Description: An improper authorization issue affects GitLab EE/CE, allowing project members with the reporter role ...

CVE-2022-2244: Undefined Security Weakness

An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows project memebers with reporter role to manage issues in project's error tracking feature...

GitLab security vulnerabilities

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab EE/CE versions 14.8 through 14.10.5 o...

io.jenkins.blueocean:blueocean-config (>=1.2.0-beta-5, <=1.2.4), io.jenkins.blueocean:blueocean-git-pipeline (>=1.2.0-beta-5, <=1.2.4) +6 more potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.21)

org.jenkins-ci.plugins:junit MAVEN version 1.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - io.jenkins.blueocean:blueocean-config =1.2.0-beta-5, =1.2.0-beta-5, =1.2.0-beta-5, =bn, =1.3.0, =1.179,...

org.jenkins-ci.plugins:junit-realtime-test-reporter (0.6), org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.5.3) potentially affected by CVE-2022-34176 via org.jenkins-ci.plugins:junit (1.24)

org.jenkins-ci.plugins:junit MAVEN version 1.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:junit and may be impacted: - org.jenkins-ci.plugins:junit-realtime-test-reporter 0.6 - org.jenkins-ci.plugins:templating-engine =1.6,...

org.jenkins-ci.main:jenkins-test-harness (1.623), org.jenkins-ci.main:jenkins-war (1.623) +2 more potentially affected by CVE-2022-34171 via org.jenkins-ci.main:jenkins-core (1.623)

org.jenkins-ci.main:jenkins-core MAVEN version 1.623 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.623 - org.jenkins-ci.main:jenkins-war 1.623 -...

MAL-2022-3504 Malicious code in gulp-csslint-lesss-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85982fe0ce26bdc8da8bfc26e08e0388a911ab5db3c0c43fc6a0a9633696ca62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in gulp-csslint-lesss-reporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in gulp-csslint-lesss-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85982fe0ce26bdc8da8bfc26e08e0388a911ab5db3c0c43fc6a0a9633696ca62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4109 Malicious code in karma-cuj-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c86cac65926436f48931d5240c93bfeb7ea537f38444c504bcd892caad6234c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in karma-cuj-reporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in karma-cuj-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c86cac65926436f48931d5240c93bfeb7ea537f38444c504bcd892caad6234c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in karma-failed-tests-reporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in karma-failed-tests-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 936e6328b59bb0287da11b8311dd6a223d84756be95bf201c9e3b87d6c056eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3790 Malicious code in ig-influx-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54886c66dcf047ce39d69f2ae2f1e07d4a7219e38fd8e265e16c1e1e32801f93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ig-influx-reporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in ig-influx-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54886c66dcf047ce39d69f2ae2f1e07d4a7219e38fd8e265e16c1e1e32801f93 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Oracle Application Express Data Reporter Privilege Escalation

The vulnerability of the Oracle Application Express Data Reporter component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to modify, add, or delete data, or gain...