CVE-2019-15576

An information disclosure vulnerability exists in GitLab CE/EE v12.3.2, v12.2.6, and v12.1.12 that allowed an attacker to view private system notes from a GraphQL endpoint...

CVE-2019-15577

Removed by vendor...

CVE-2019-15577

CVE-2019-15577 affects GitLab CE/EE < v12.3.2, < v12.2.6,

CVE-2019-5486

Removed by vendor...

CVE-2019-15577: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in GitLab CE/EE...

CVE-2019-15575: Improper Neutralization of Special Elements used in a Command

A command injection exists in GitLab CE/EE...

PT-2019-14291

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions prior to 12.3.2 GitLab CE/EE versions prior to 12.2.6 GitLab CE/EE versions prior to 12.1.12 Description A command injection issue exists that allows an attacker to inject commands via the API through the blobs scope...

PT-2019-14293

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions prior to 12.3.2 GitLab CE/EE versions prior to 12.2.6 GitLab CE/EE versions prior to 12.1.12 Description An information disclosure issue exists that allows project milestones to be disclosed via groups browsing...

CVE-2019-5486: Authentication Bypass Using an Alternate Path or Channel

A authentication bypass vulnerability exists in GitLab CE/EE...

PT-2019-17704

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions prior to 12.3.2 GitLab CE/EE versions prior to 12.2.6 GitLab CE/EE versions prior to 12.1.12 Description A authentication bypass vulnerability exists in the Salesforce login integration that could be used by an attacker t...

CVE-2019-15576: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in GitLab CE/EE...

PT-2019-14292

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions prior to 12.3.2 GitLab CE/EE versions prior to 12.2.6 GitLab CE/EE versions prior to 12.1.12 Description An information disclosure issue exists that allows an attacker to view private system notes from a GraphQL endpoint...

CVE-2019-15631

CVE-2019-15631 is a remote code execution vulnerability affecting MuleSoft Mule CE/EE 3.x and API Gateway 2.x, described as exploitable to run arbitrary code by a remote attacker and linked to releases before 31 October 2019. The connected records consistently identify the affected product family...

CVE-2019-15631: Undefined Security Weakness

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code...

PT-2019-14308

Name of the Vulnerable Software and Affected Versions MuleSoft Mule CE/EE versions 3.x MuleSoft API Gateway versions 2.x Description A Remote Code Execution issue allows remote attackers to execute arbitrary code. Recommendations For MuleSoft Mule CE/EE versions 3.x, update to a version released...

CVE-2019-18454

An issue was discovered in GitLab Community and Enterprise Edition 10.5 through 12.4 in link validation for RDoc wiki pages feature. It has XSS...

CVE-2019-18462

An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4. It has Insecure Permissions...

CVE-2019-15967

The CVE-2019-15967 issue affects Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software. A vulnerability in the CLI allows an authenticated, local attacker to enable audio recording without user notification by exploiting unnecessary debug commands and gaining unrestricted acces...

PT-2019-4327

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software affected versions not specified Description The issue is related to a vulnerability in the CLI of the affected software, which could allow an authenticated, local attacker ...

PT-2019-3964

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint CE affected versions not specified Cisco TelePresence Codec TC affected versions not specified Cisco RoomOS Software affected versions not specified Description A vulnerability in the CLI of Cisco...