PT-2023-20571 · Sitecore · Sitecore Xp/Xm

Name of the Vulnerable Software and Affected Versions: Sitecore XP/XM version 10.3 Description: An issue exists where an authenticated Sitecore user can upload language files without restrictions, leading to direct code execution on the content management server. Recommendations: For Sitecore XP/...

CVE-2023-26262

An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload vulnerability exists the can lead to direct code execution on the content management CM server...

AVS4YOU AVS Audio Converter 安全漏洞

AVS4YOU AVS Audio Converter is a software application from AVS4YOU Inc. It is used to convert audio files from one format to another according to your wishes and save them to your hard drive. A security vulnerability exists in AVS4YOU AVS Audio Converter version 10.3 that stems from vulnerability...

PT-2022-27166 · Unknown · Avs Audio Converter

Name of the Vulnerable Software and Affected Versions: AVS Audio Converter version 10.3 Description: The issue is related to a Buffer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

GitLab 9.4.x - 9.5.10, 10.x - 10.1.5, 10.2.x - 10.2.5, 10.3.x - 10.3.3 SQLi Vulnerability

GitLab is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

Gitlab CE/EE Input Validation Error Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in Gitlab CE/EE version...

Gitlab deployment keys component improper authorization vulnerability

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository , which has features similar to Github , you can check out the project's file content , commit history , bug lists , etc. GitLab Community Edition CE ...

Gitlab GitLab CI runner component path traversal vulnerability

GitLab is a set of Ruby on Rails development of open source applications , can be realized as a self-hosted Git version control system project repository , which has similar features to Github , you can access the project's file content , commit history , bug lists , etc. GitLab Community Edition...

Path traversal

Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution...

Authorization

Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login...

Remote code execution

Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the systemhookpush queue through web hook component resulting in remote code execution...

CVE-2017-0918

Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution...

CVE-2017-0926

GitLab Community Edition 10.3 is affected by an improper authorization in the Oauth sign-in component, enabling unauthorized user login. Root cause: OAuth sign-in bypass allows login without proper authorization. Impact: unauthorized access via OAuth flow with partial/ high impact credentials (pe...

CVE-2017-0927

CVE-2017-0927 affects GitLab Community Edition 10.3 in the deployment keys component, with an improper authorization flaw that allowed guest users to unauthorized use deployment keys. According to NVD, CVSS v3 base score is 6.5 (network, low attack complexity, privileges required: low, no user in...

PostgreSQL RCE Vulnerability (Feb 2018) - Linux

PostgreSQL is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security fix for the ALT Linux 8 package postgresql10 version 10.3-alt0.M80P.1

10.3-alt0.M80P.1 built March 2, 2018 Alexei Takaseev in task 201180 March 2, 2018 Alexei Takaseev - 10.3 - Fixes CVE-2018-1058...

Sync Breeze 10.2.12 Denial Of Service

============================================= MGC ALERT 2017-007 - Original release date: November 30, 2017 - Last revised: December 14, 2017 - Discovered by: Manuel GarcAa CA!rdenas - Severity: 7,5/10 CVSS Base Score - CVE-ID: CVE-2017-17088 ============================================= I...

MariaDB 10.3.x < 10.3.1 Multiple DoS Vulnerabilities

The version of MariaDB running on the remote host is prior to 10.3.1. It is, therefore, affected by multiple denial of service vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid105078; scriptversion"1.6"; scriptcvsdate"Date: 2018/11/15 20:50:21";...

Credentials sent through the Lenovo ToolsCenter may be exposed to local users - Lenovo Support US

No description provided...

UBUNTU-CVE-2017-2476

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...