2617 matches found
CVE-2024-58296 CE Phoenix v3.0.1 Stored Cross-Site Scripting via admin/currencies.php
CE Phoenix v3.0.1 contains a stored cross-site scripting vulnerability in the currencies administration panel that allows attackers to inject malicious scripts. Attackers can insert XSS payloads in the title field to execute arbitrary JavaScript when administrators view the currencies page...
EUVD-2025-202659
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that, under certain conditions could have allowed an authenticated user to perform unauthorized actions on behalf of another user by creating wiki pages with...
Fedora 43 : singularity-ce (2025-5ad0214a85)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-5ad0214a85 advisory. Upgrade to 4.3.5 upstream version. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
PT-2025-50581
GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability...
CE Phoenix 跨站脚本漏洞
CE Phoenix is a powerful e-commerce store from Phoenix Cart open source. A cross-site scripting vulnerability exists in CE Phoenix version v3.0.1, which stems from the presence of stored cross-site scripting in the Currency Management Panel that could lead to the execution of arbitrary JavaScript...
Fedora 42 : singularity-ce (2025-54d78b9fed)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-54d78b9fed advisory. Upgrade to 4.3.5 upstream version. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
EUVD-2024-55303
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 prior to 18.4.5, 18.5 prior to 18.5.3, and 18.6 prior to 18.6.1 that could have allowed an authenticated user to obtain credentials from higher-privileged users and perform actions in their context under specific...
CVE-2024-9183
Removed by vendor...
GHSA-765H-QJXV-5F44 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-QQGX-2P2H-9C37 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-3C6G-PVG8-GQW2 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2019-20920 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-WX77-RP39-C6VG vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2024-36361 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2019-16777 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-M5H6-HR3Q-22H5 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-4328-8HGF-7WJR vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2013-4116 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...