CVE-2024-30246 Tuleap deleting or moving an artifact can delete values from unrelated artifacts

Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could exploit this issue on purpose to delete information on the instance or possibly gain access to restricted artifacts. It is however not possible to control exactly which...

BIT-GITLAB-2023-0523

An issue has been discovered in GitLab affecting all versions starting from 15.6 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. An XSS was possible via a malicious email address for certain instances...

GitLab 13.11 < 15.5.7 / 15.6 < 15.6.4 / 15.7 < 15.7.2 (CVE-2022-4167)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group access tokens to continue working even after t...

Jinfornet Jreport 路径遍历漏洞

Jinfornet Jreport is a reporting and data visualization tool from Jinfornet, Inc. A security vulnerability exists in Jinfornet Jreport version 15.6 that stems from a directory traversal vulnerability that could allow an unauthenticated attacker to obtain sensitive information...

PT-2023-11625 · Jinfornet · Jsreport

Name of the Vulnerable Software and Affected Versions: Jinfornet Jreport version 15.6 Description: A directory traversal issue allows unauthenticated attackers to gain sensitive information. Recommendations: For Jinfornet Jreport version 15.6, update to a version that fixes this issue, as no...

CVE-2023-0523

An issue has been discovered in GitLab affecting all versions starting from 15.6 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. An XSS was possible via a malicious email address for certain instances...

GitLab 15.6 < 15.8.5 / 15.9 < 15.9.4 / 15.10 < 15.10.1 (CVE-2023-0523)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 15.6 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. An XSS was possible via a malicious email address for...

Input validation

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. Due to the improper filtering of query parameters in the wiki changes page, an attacker can execute...

CVE-2022-3573

CVE-2022-3573 affects GitLab CE/EE, with versions 15.4 up to before 15.5.7; 15.6 before 15.6.4; and 15.7 before 15.7.2. The issue stems from improper filtering of query parameters on the wiki changes page, allowing an attacker to execute arbitrary JavaScript on self-hosted instances that do not e...

PT-2022-6847

Name of the Vulnerable Software and Affected Versions Apple iPadOS versions prior to 15.6 Apple tvOS versions prior to 15.6 Apple iOS versions prior to 15.6 Apple watchOS versions prior to 8.7 Apple macOS Monterey versions prior to 12.5 Apple Safari versions prior to 15.6 webkit2gtk affected...

Apple iOS 和 iPadOS 权限许可和访问控制问题漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A vulnerability in privilege permission and access control issues exists in Apple iOS prior to 15.6 and iPadOS prior to...

Safari < 15.6 Multiple Vulnerabilities

Binary data 701415.pasl...

Apple iOS 和 iPadOS 信息泄露漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. An information disclosure vulnerability exists in Apple iOS version 15.6 and iPadOS version 15.5, which stems from the...

PT-2017-2992 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.4 through 15.6 Description: The issue is due to insufficient input validation when handling CIP packets, allowing a remote attacker to cause a device reload and denial of service DoS using a specially crafted CIP packet...

Cisco IOS Software IPv6 Denial of Service Vulnerability (cisco-sa-20170320-aniipv6)

A vulnerability in the Autonomic Networking Infrastructure ANI feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

Cisco IOS Denial of Service Vulnerability (CNVD-2016-01211)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in Cisco IOS 15.53M and 15.61T0a on Cisco 1000 Connected Grid routers, which can be exploited by an attacker to cause a denial of service...

Cscope putstring Multiple Buffer Overflow vulnerability

This host has installed Cscope and is prone to Multiple Buffer Overflow vulnerability OpenVAS Vulnerability Test $Id: gbcscopeputstringmultbofvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Cscope putstring Multiple Buffer Overflow vulnerability. Authors: Antu Sanadi Copyright: Copyright c 2009...