4302 matches found
CVE-2023-5009 Incorrect Authorization in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of CVE-2023-3932...
CVE-2023-5009
CVE-2023-5009 affects GitLab EE versions 13.12–before 16.2.7 and 16.3–before 16.3.4. An attacker could run pipeline jobs as an arbitrary user via scheduled security scan policies, bypassing CVE-2023-3932 and adding impact. The issue is described as a bypass of CVE-2023-3932 with additional impact...
CVE-2023-5009
Removed by vendor...
FreeBSD : Gitlab -- vulnerability (32a4896a-56da-11ee-9186-001b217b3468)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 32a4896a-56da-11ee-9186-001b217b3468 advisory. - An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7 an...
PT-2023-31438 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 13.12 through 16.2.7 GitLab versions 16.3 through 16.3.4 Description: A critical vulnerability in GitLab allows attackers to run pipelines as other users, potentially granting access to internal repositories and closed project...
GitLab 13.12 < 16.2.7 / 16.3 < 16.3.4 (CVE-2023-5009)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs ...
GitLab 0.0 < 16.2.7 / 16.3 < 16.3.4 (CVE-2023-4998)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Gitlab reports: Attacker can abuse scan execution policies to run pipelines as another user CVE-2023-4998 Note that Nessus has not tested for this issue but has instead relied only on the application'...
Gitlab -- vulnerability
Gitlab reports: Attacker can abuse scan execution policies to run pipelines as another user...
SUSE SLES12: kernel-livepatch-4_12_14-150100_197_120-default / etc (SUSE-SU-2023:3603-1)
The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3603-1 advisory. This update for the Linux Kernel 4.12.14-122139 fixes several issues. The following security issues were fixed: - CVE-2023-3567: Fixed...
PT-2023-5448
Name of the Vulnerable Software and Affected Versions GitLab EE versions 13.12 through 16.2.7 GitLab EE versions 16.3 through 16.3.4 GitLab Community Edition CE versions 13.12 through 16.2.7 GitLab Community Edition CE versions 16.3 through 16.3.4 Description The issue is related to a flaw in...
The vulnerability of the React Native Bluetooth Scan component of the Bluezone application, which allows a intruder to gain unauthorized access to protected information.
The vulnerability of the React Native Bluetooth Scan component of the Bluezone application’s software interface is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
Python Installed Packages
Binary data pythonpackageswininstalled.nbin...
Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client
CVE-2021-1366 Cisco AnyConnect Posture HostScan Local Privil...
CVE-2023-36308
disintegration Imaging 1.6.2 allows attackers to cause a panic because of an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequenc...
PT-2023-25523 · Unknown +1 · Disintegration Imaging +1
Name of the Vulnerable Software and Affected Versions: Disintegration Imaging version 1.6.2 Description: The issue allows attackers to cause a panic due to an integer index out of range during a Grayscale call via a crafted TIFF file to the scan function of scanner.go. It is unclear whether there...
NetScaler EPA scan fails on Mac OS Client
EPA scan fails on Mac OS client only, libs folder is missing in /Library/Application Support/Citrix. Note: Where the symbol indicates the relevant Mac OS user's home directory path...
Occasional EPA scan failures may occur due to incomplete downloading of the Client EPA plugin
Occasional failures in downloading the Client EPA plugin can result in the EPA scan not functioning properly...
Urgent FBI Warning: Barracuda Email Gateways Vulnerable Despite Recent Patches
The U.S. Federal Bureau of Investigation FBI is warning that Barracuda Networks Email Security Gateway ESG appliances patched against a recently disclosed critical flaw continue to be at risk of potential compromise from suspected Chinese hacking groups. It also deemed the fixes as "ineffective"...
Thousands of Unpatched Openfire XMPP Servers Still Exposed to High-Severity Flaw
Thousands of Openfire XMPP servers are unpatched against a recently disclosed high-severity flaw and are susceptible to a new exploit, according to a new report from VulnCheck. Tracked as CVE-2023-32315 CVSS score: 7.5, the vulnerability relates to a path traversal vulnerability in Openfire's...
