17016 matches found
PT-2024-33781 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.1.0 through 16.11.4 GitLab CE/EE versions 17.0.0 through 17.0.2 GitLab CE/EE versions 17.1.0 Description: An issue has been discovered in GitLab CE/EE that allowed for a CSRF attack on GitLab's GraphQL API, leading to...
PT-2024-11745 · Insyde · Insydeh2O
Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O versions 5.0 through 5.5 Description: An issue was discovered in the CapsuleIFWUSmm driver, which does not check the return value from a method or function. This can prevent it from detecting unexpected states and conditions...
Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to an XML External Entity (XXE) injection vulnerability (CVE-2024-22354)
Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM is vulnerable to an XML External Entity XXE injection vulnerability. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected...
BELL-CVE-2024-26921
Bulletin has no description...
VikBooking < 1.6.8 - Insecure Direct Object References
Description The plugin allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of the plugin's they shouldn't be allowed to. PoC https://example.com/wp-admin/admin.php?option=comvikbooking=config...
BELL-CVE-2024-26915
Bulletin has no description...
BELL-CVE-2024-26914
Bulletin has no description...
BELL-CVE-2024-26896
Bulletin has no description...
BELL-CVE-2024-26895
Bulletin has no description...
BELL-CVE-2024-26913
Bulletin has no description...
BELL-CVE-2024-26893
Bulletin has no description...
BELL-CVE-2024-26881
Bulletin has no description...
BELL-CVE-2024-26889
Bulletin has no description...
BELL-CVE-2024-26876
Bulletin has no description...
BELL-CVE-2024-26879
Bulletin has no description...
BELL-CVE-2024-26871
Bulletin has no description...
BELL-CVE-2024-26861
Bulletin has no description...
BELL-CVE-2024-26869
Bulletin has no description...