Lucene search
+L

6437 matches found

Mend
Mend
•added 2024/01/26 1:02 a.m.•5 views

CVE-2024-0402

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace...

9.9CVSS0.03783EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/01/26 1:02 a.m.•120 views

CVE-2024-0402

Removed by vendor...

9.9CVSS7.5AI score0.03783EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/26 12:00 a.m.•4 views

CVE-2024-0402: Improper Limitation of a Pathname to a Restricted Directory

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace...

9.9CVSS8.1AI score0.03783EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/01/25 12:00 a.m.•29 views

PT-2024-1286

Name of the Vulnerable Software and Affected Versions GitLab versions 16.0 through 16.5.7 GitLab versions 16.6 through 16.6.5 GitLab versions 16.7 through 16.7.3 GitLab versions 16.8 through 16.8.0 Description The issue is related to an incorrect restriction of the path name to a directory with...

9.9CVSS7.5AI score0.03783EPSS
SaveExploits0References80
Positive Technologies
Positive Technologies
•added 2024/01/24 12:00 a.m.•14 views

PT-2024-2759 · Red Hat +2 · Jenkins Red Hat Dependency Analytics Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Red Hat Dependency Analytics Plugin versions 0.7.1 and earlier Description: The issue is related to the lack of Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers...

8CVSS5.8AI score0.00564EPSS
SaveExploits0References10
Citrix
Citrix
•added 2024/01/19 12:00 a.m.•22 views

Workspace App Upgrade to Version 2311 Causing End User Launch Failures

End users may experience launch issues post Upgrade of workspace app to latest version 2311,In environment where custom VC like Zoom, Webex are installed. Behavior noticed is launch failure with latest CWA 2311.CWA pops up "Preparing resource" CWA pops up "Active" but no desktop is shown to the...

7.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2024/01/12 2:15 p.m.•35 views

CVE-2023-6955

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associated with an agent from another group...

6.6CVSS5.8AI score0.00552EPSS
SaveExploits0References2Affected Software1
osv_ubuntu
osv_ubuntu
•added 2024/01/12 2:15 p.m.•21 views

UBUNTU-CVE-2023-6955

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associated with an agent from another group...

6.6CVSS5.8AI score0.00552EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2024/01/12 1:56 p.m.•90 views

CVE-2023-6955

Removed by vendor...

6.6CVSS6.3AI score0.00552EPSS
SaveExploits0
Mend
Mend
•added 2024/01/12 1:56 p.m.•3 views

CVE-2023-6955

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associated with an agent from another group...

7CVSS0.00552EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/01/12 1:56 p.m.•5 views

CVE-2023-6955 Missing Authorization in GitLab

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associated with an agent from another group...

6.6CVSS6.8AI score0.00552EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/01/12 1:56 p.m.•43 views

CVE-2023-6955 Missing Authorization in GitLab

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associated with an agent from another group...

6.6CVSS5.8AI score0.00552EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•4 views

CVE-2023-6955: Missing Authorization

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associated with an agent from another group...

6.6CVSS6.4AI score0.00552EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/01/12 12:00 a.m.•29 views

CVE-2023-6955

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associated with an agent from another group...

6.6CVSS6.4AI score0.00552EPSS
SaveExploits0References2
Citrix
Citrix
•added 2024/01/09 12:00 a.m.•23 views

Where is the ReceiverCleanupUtility.exe after installing CWA

This article describes the location of ReceiverCleanupUtility.exe Receiver Clean-Up Utility tool after installing Citrix Workspace app for Windows CWA...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2024/01/02 12:00 a.m.•20 views

Workspace App for Windows appears for AllAccount although only one store is configured

Citrix Workspace App for Windows appears for all accounts although with just one store configuration. Workspace App should appear like this if only one store is configured...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2023/12/19 12:00 a.m.•26 views

Citrix Workspace App Shows "Unable to connect to the server."

When starting the Citrix Workspace App, may receive an error message that shows "Unable to connect to the server."...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/12/19 12:00 a.m.•10 views

PT-2023-8248 · Gitlab · Gitlab Remote Development +1

Name of the Vulnerable Software and Affected Versions: GitLab Remote Development versions prior to 16.5.6 GitLab Remote Development version 16.6 prior to 16.6.4 GitLab Remote Development version 16.7 prior to 16.7.2 Description: The issue is related to improper access control in GitLab Remote...

6.6CVSS6.7AI score0.00552EPSS
SaveExploits0References21
BDU FSTEC
BDU FSTEC
•added 2023/12/19 12:00 a.m.•20 views

Edge Panel Component Privilege Escalation

The vulnerability of the Edge Panel component of the VMware Workspace ONE Launcher software lies in the lack of protection for sensitive data. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to protected information...

4.9CVSS5.5AI score0.00405EPSS
SaveExploits0References4Affected Software1
Citrix
Citrix
•added 2023/12/18 12:00 a.m.•18 views

The installer will exit because this version of Citrix Workspace App is already installed.

When trying to install the latest version of Citrix Workspace app for Windows, the following pop-up appears and installation failed. "The installer will exit because this version of Citrix Workspace is already installed."...

7.1AI score
SaveExploits0
Rows per page
Query Builder