3290 matches found
PT-2024-5345
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.0 through 17.0.3 GitLab CE/EE versions 17.1 through 17.1.1 Description The issue is related to insufficient access control in the admin push rules function of the Project-level Deploy Token Handler component in GitLab...
Gitlab -- vulnerabilities
Gitlab reports: An attacker can run pipeline jobs as an arbitrary user Developer user with admincomplianceframework permission can change group URL Admin push rules custom role allows creation of project level deploy token Package registry vulnerable to manifest confusion User with admingroupmemb...
CVE-2024-22377
The deploy directory in PingFederate runtime nodes is reachable to unauthorized users...
CVE-2024-22377
The deploy directory in PingFederate runtime nodes is reachable to unauthorized users...
CVE-2024-22377 PingFederate Runtime Node Path Traversal
The deploy directory in PingFederate runtime nodes is reachable to unauthorized users...
PT-2024-19373 · Unknown · Pingfederate
Name of the Vulnerable Software and Affected Versions: PingFederate affected versions not specified Description: The issue concerns the deploy directory in PingFederate runtime nodes being accessible to unauthorized users. Recommendations: At the moment, there is no information about a newer...
CVE-2024-22377: Improper Limitation of a Pathname to a Restricted Directory
The deploy directory in PingFederate runtime nodes is reachable to unauthorized users...
Malicious code in branch-deploy-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6f8ee439aa1b1732d638e3b68c12f320056784b39327753fbd3ff9f476d39ace The OpenSSF Package Analysis project identified 'branch-deploy-action' @ 2.1.1 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-7421 Malicious code in branch-deploy-action (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6f8ee439aa1b1732d638e3b68c12f320056784b39327753fbd3ff9f476d39ace The OpenSSF Package Analysis project identified 'branch-deploy-action' @ 2.1.1 npm as malicious. It is considered malicious because: - The packa...
@adobe/helix-deploy (>=9.1.9, <=11.1.13), @adobe/helix-universal-devserver (>=1.0.0, <=1.0.1) potentially affected by CVE-2024-38375 via @fastly/js-compute (>=3.1.1, <=3.15.0)
@fastly/js-compute NPM version =3.1.1, =9.1.9, =1.0.0, =1.0.1 Source cves: CVE-2024-38375 Source advisory: OSV:GHSA-MP3G-VPM9-9VQV...
@adobe/helix-deploy (>=9.1.9, <=11.1.13), @adobe/helix-universal-devserver (>=1.0.0, <=1.0.1) potentially affected by CVE-2024-38375 via @fastly/js-compute (>=3.1.1, <=3.15.0)
@fastly/js-compute NPM version =3.1.1, =9.1.9, =1.0.0, =1.0.1 Source cves: CVE-2024-38375 Source advisory: GHSA-MP3G-VPM9-9VQV...
Malicious code in aws_s3-deploy (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in aws-blue_green_deploy (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in auto_deploy-test (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6621 Malicious code in api-deploy (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in api-deploy (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in amoeba-deploy_tools (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6526 Malicious code in aem_deploy (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in aem_deploy (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in pino-deploy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22aa2a34d1bc80289998fa9f16a0a8731eacac719b3068a84c1e3b93dd880f1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...