CVE-2024-9188

Specially constructed queries cause cross platform scripting leaking administrator tokens...

CVE-2024-9188

Specially constructed queries cause cross platform scripting leaking administrator tokens...

CVE-2024-9133

A user with administrator privileges is able to retrieve authentication tokens...

CVE-2024-9133

A user with administrator privileges is able to retrieve authentication tokens...

CVE-2024-47517

Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access...

CVE-2024-47517

Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access...

CVE-2024-9188 Specially constructed queries cause cross platform scripting leaking administrator tokens

Specially constructed queries cause cross platform scripting leaking administrator tokens...

CVE-2024-9188

CVE-2024-9188 affects Arista Edge Threat Management - Arista NG Firewall (NGFW) prior to 17.2. The issue arises from specially constructed queries that trigger cross‑platform scripting, leaking administrator tokens and enabling token exposure. Affected software is the NGFW as described in Arista’...

CVE-2024-47517 Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access

Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access...

CVE-2024-47517 Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access

Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access...

CVE-2024-9133 A user with administrator privileges is able to retrieve authentication tokens

A user with administrator privileges is able to retrieve authentication tokens...

CVE-2024-9133 A user with administrator privileges is able to retrieve authentication tokens

A user with administrator privileges is able to retrieve authentication tokens...

CVE-2024-9133

CVE-2024-9133 affects Arista Edge Threat Management - Arista NG Firewall (versions 17.1.1 and earlier). A user with administrator privileges can retrieve authentication tokens via the NGFW UI. The Arista Security Advisory 0105 documents this under CVE-2024-9133 and notes no known mitigation in th...

BIT-GITLAB-2025-0194 Insertion of Sensitive Information into Externally-Accessible File or Directory in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. Under certain conditions, access tokens may have been logged when API requests were made in a specific manner...

PT-2025-2768

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access. This issue concerns the potential...

PT-2025-3711

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The issue involves specially constructed queries that cause cross-platform scripting, resulting in the leakage of administrator tokens. This allows for potential unauthorized access and...

PT-2025-3709

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A user with administrator privileges is able to retrieve authentication tokens. Recommendations At the moment, there is no information about a newer versi...

PT-2025-4723 · Unknown · Zephyr Admin Theme

Name of the Vulnerable Software and Affected Versions: Zephyr Admin Theme versions 1.4.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user...

CVE-2025-0194

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. Under certain conditions, access tokens may have been logged when API requests were made in a specific manner...

UBUNTU-CVE-2025-0194

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. Under certain conditions, access tokens may have been logged when API requests were made in a specific manner...