ZOHO ManageEngine ADManager Plus 安全漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO, Inc. designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

Mattermost Server 9.5.x < 9.5.9 (MMSA-2024-00358)

The version of Mattermost Server installed on the remote host is prior to 9.5.9. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00358 advisory. - Mattermost versions 9.5.x = 9.5.8 fail to properly authorize access to archived channels when viewing archived channels i...

Mattermost Server 9.5.x < 9.5.9 / 9.9.x < 9.9.2 / 9.10.x < 9.10.2 / 9.11.x < 9.11.1 (MMSA-2024-00351)

The version of Mattermost Server installed on the remote host is prior to 9.5.9, 9.9.2, 9.10.2, or 9.11.1. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00351 advisory. - Mattermost versions 9.11.x = 9.11.0, 9.10.x = 9.10.1, 9.9.x = 9.9.2 and 9.5.x = 9.5.8 fail to...

BIT-GITLAB-2024-9623 Incorrect Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

GitLab 11.4 < 17.2.9 / 17.3 < 17.3.5 / 17.4 < 17.4.2 (CVE-2024-5005)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Gitlab reports: Run pipelines on arbitrary branches An attacker can impersonate arbitrary user SSRF in Analytics Dashboard Viewing diffs of MR with conflicts can be slow HTMLi in OAuth page Deploy Key...

CVE-2024-9623

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

UBUNTU-CVE-2024-9623

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

CVE-2024-9623 Incorrect Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

CVE-2024-9623

CVE-2024-9623 affects GitLab CE/EE versions 8.16–17.2.9, 17.3–17.3.5, and 17.4–17.4.2, enabling deploy keys to push to archived repositories. The connected documents confirm the affected ranges and the action (deploy keys abuse), but no explicit root-cause details beyond the described behavior ar...

CVE-2024-9623 Incorrect Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository...

CVE-2024-9623

Removed by vendor...

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE versions 8.16 through prior to 17.2.9,...

RUSTSEC-2024-0436 paste - no longer maintained

The creator of the crate paste has stated in the README.md that this project is not longer maintained as well as archived the repository Possible Alternatives - pastey: a fork of paste and is aimed to be a drop-in replacement with additional features for paste crate - withbuiltinmacros: crate...

paste - no longer maintained

The creator of the crate paste has stated in the README.md that this project is not longer maintained as well as archived the repository Possible Alternatives - pastey: a fork of paste and is aimed to be a drop-in replacement with additional features for paste crate - withbuiltinmacros: crate...

PT-2024-41088 · Paste · Paste

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The creator of the crate paste has stated that this project is no longer maintained and has archived the repository. Recommendations: At the moment, there is no information about a newer...

BIT-MATTERMOST-2024-42406

Mattermost versions 9.11.x = 9.11.0, 9.10.x = 9.10.1, 9.9.x = 9.9.2 and 9.5.x = 9.5.8 fail to properly authorize requests when viewing archived channels is disabled, which allows an attacker to retrieve post and file information about archived channels. Examples are flagged or unread posts as wel...

Improper Authorization

Mattermost is vulnerable to Improper Authorization. The vulnerability is due to inadequate authorization mechanisms when the viewing of archived channels is disabled, allowing unauthorized access to sensitive information...

Mattermost Authorization Issues Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from a failure to properly authorize a request when the ability to view archived channels is disabled, which could be exploited b...

BIT-MATTERMOST-2024-47145

Mattermost versions 9.5.x = 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links...

CVE-2024-47145

Mattermost versions 9.5.x = 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links...