4521 matches found
CVE-2021-22188
Removed by vendor...
CVE-2021-22188
An issue has been discovered in GitLab affecting all versions starting with 13.0. Confidential issue titles in Gitlab were readable by an unauthorised user via branch logs...
CVE-2021-22863
An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability, an attacker woul...
CVE-2021-22861
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to gain write access to unauthorized repositories via specifically crafted pull requests and REST API requests. An attacker would need to be able to fork the target...
Improper access control
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to gain write access to unauthorized repositories via specifically crafted pull requests and REST API requests. An attacker would need to be able to fork the target...
Improper access control
An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability, an attacker woul...
CVE-2021-22863
CVE-2021-22863 is an improper access control vulnerability in GitHub Enterprise Server’s GraphQL API. It allowed authenticated users to modify the maintainer collaboration permission on a pull request, potentially exposing head branches of repos where they are a maintainer. Affected versions span...
CVE-2021-22863 Improper access control in GitHub Enterprise Server leading to unauthorized changes to maintainer permissions on pull requests
An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability, an attacker woul...
PT-2021-14899 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 13.0 and later Description: An issue has been discovered in GitLab where confidential issue titles were readable by an unauthorized user via branch logs. Recommendations: For GitLab versions 13.0 and later, consider restrictin...
GitLab 安全漏洞
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions after...
yeikos js.merge security vulnerability
yeikos js.merge is an application by the individual developers at Yeikos USA. It provides tools for merging js. A security vulnerability exists in yeikos js.merge. The vulnerability stems from the fact that all merges of related branches are susceptible to the prototype of this codebase. The...
CVE-2020-8625
BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting valid values for the...
Debian: Security Advisory (DLA-2538-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Arbitrary Code Execution
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
git-big-picture code injection vulnerability
Git Big Ppicture is the Git Big Ppicture team of a Python based can be Git commit records for visual display of the software . A code injection vulnerability exists prior to version 1.0.0 of git-big-picture, which can be exploited to execute code because the program incorrectly handles characters...
CVE-2021-3028
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
DEBIAN-CVE-2021-3028
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
CVE-2021-3028
git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...
