4414 matches found
CVE-2018-19583: Insertion of Sensitive Information into Log File
GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token...
PT-2019-9859
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.6 up to 11.3.10 GitLab CE/EE versions 11.4 up to 11.4.7 GitLab CE/EE versions 11.5 up to 11.5.0 Description The issue allows a Guest user to make changes to or delete their own comments on an issue after the issue was...
CVE-2018-19570: Improper Neutralization of Input During Web Page Generation
GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags...
Qualys Cloud Platform (VM, PC) 8.20 New Features
This new release of the Qualys Cloud Platform VM, PC, version 8.20, includes several new features in Qualys Cloud Platform and additional support for multiple technologies in Qualys Policy Compliance. Feature Highlights Qualys Cloud Platform Configure Password Expiration Notification – Now users...
PT-2019-16121
Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible out-of-bound read in the ce t4t data cback function of ce t4t.cc due to a missing bounds check. This could lead to local information disclosure with no additional...
Rockwell Automation/Allen-Bradley PanelView Plus CE 6 700 HMI Terminal
Binary data 751117.prm...
Updated docker packages fix security vulnerability
Security issues fixed for containerd, docker, docker-runc and golang-github-docker-libnetwork: CVE-2018-16873: cmd/go: remote command execution during "go get -u" bsc1118897 CVE-2018-16874: cmd/go: directory traversal in "go get" via curly braces in import paths bsc1118898 CVE-2018-16875:...
CVE-2018-19585
CVE-2018-19585 covers CRLF Injection in GitLab CE/EE Project Mirroring when using the Git protocol. Affected: GitLab versions 8.18–11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. The root cause is CRLF injection in mirroring requests; public material references exploitation o...
PT-2019-9868
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.18 up to 11.x before 11.3.11 GitLab CE/EE versions 11.4.x before 11.4.8 GitLab CE/EE versions 11.5.x before 11.5.1 Description The issue is related to CRLF Injection in Project Mirroring when using the Git protocol...
CVE-2018-19585: Improper Neutralization of CRLF Sequences
GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol...
Rockwell Automation PanelView Plus CE 700 2711P-x7xxx Human Machine Interface
Binary data 753309.prm...
Rockwell Automation PV Plus/PV Plus-CE DeviceNet 2711P-RN10H Communication Adapter
Binary data 752947.prm...
Rockwell Automation PanelView Plus CE 1250 2711P-x12xxx Human Machine Interface
Binary data 753315.prm...
Rockwell Automation PanelView Plus CE 1000 2711P-x10xxx Human Machine Interface
Binary data 753314.prm...
CVE-2018-18643
GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS...
CVE-2018-18643
GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS...
CVE-2018-18643
GitLab CE & EE 11.2 and later and before 11.5.0-rc12, 11.4.6, and 11.3.10 have Persistent XSS...
CVE-2018-18643
CVE-2018-18643 affects GitLab CE & EE versions 11.2 and later, up to but not including 11.5.0-rc12, and includes 11.4.6 and 11.3.10. The vulnerability is a Persistent XSS issue described in the CVE entry. The provided connected documents confirm the existence of a persistent cross‑site scripting ...
