The vulnerability of the software platform based on Git for collaborative code development in GitLab Enterprise Edition is related to deficiencies in the authentication process, which allows a malicious actor to execute pipeline tasks under the name of any user.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute pipeline tasks on behalf of any user...

The vulnerability of the Snow License Manager Service Provider Edition software, related to privilege management errors, allows a violator to gain unauthorized access to protected information.

The vulnerability of the Snow License Manager Service Provider Edition software-related license management software is related to privilege management errors. Exploiting this vulnerability allows an intruder to gain unauthorized access to protected information...

Security Bulletin: Multiple vulnerabilities exist in the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Manager.

Summary Multiple vulnerabilities exist in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Manager IP Edition v4.2. CVE-2023-21930, CVE-2023-21967, CVE-2023-21954, CVE-2023-21939, CVE-2023-21968, CVE-2023-21937, CVE-2023-21938, CVE-2023-2597 Vulnerability Details...

Security Bulletin: A vulnerability exists in the IBM® SDK, Java™ Technology Edition affecting IBM Tivoli Network Manager (CVE-2023-22045, CVE-2023-22049).

Summary Vulnerabilities CVE-2023-22045, CVE-2023-22049 exist in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Manager IP Edition v4.2. Vulnerability Details CVEID: CVE-2023-22045 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component...

CVE-2023-45746

Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. Affected products/versions are as follows: Movable Type 7 r.5405 and earlier Movable Type 7 Series, Movable Type Advanced 7 r.5405 and earlier Movable Type 7 Series,...

PT-2023-29662 · Unknown · Movable Type Advanced +5

Name of the Vulnerable Software and Affected Versions: Movable Type versions 7 r.5405 and earlier Movable Type Advanced versions 7 r.5405 and earlier Movable Type Premium version 1.58 and earlier Movable Type Premium Advanced version 1.58 and earlier Movable Type Cloud Edition Version 7 versions...

CVE-2023-46289

Rockwell Automation FactoryTalk View Site Edition (V11.0 affected) suffers from improper input validation (CVE-2023-46289). Insufficient validation could allow a remote attacker to submit malicious data, potentially rendering the product unavailable and requiring a restart to recover, i.e., a den...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker due to IBM SDK Java Technology Edition

Summary IBM App Connect Enterprise and IBM Integration Bus are vulnerable to a remote attacker due to IBM SDK Java Technology Edition CVE-2023-22049. Vulnerability Details CVEID: CVE-2023-22049 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow a...

CVE-2023-46374

ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting XSS...

Cross site scripting

ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting XSS...

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to one-time password bypass (CVE-2023-43045)

Summary IBM Sterling Partner Engagement Manager has addressed a reflected one-time password bypass vulnerability. Vulnerability Details CVEID: CVE-2023-43045 DESCRIPTION: IBM Sterling Partner Engagement Manager could allow a remote user to perform unauthorized actions due to improper...

Nature Easy Soft Network Technology ZenTao Cross-Site Scripting Vulnerability

Nature Easy Soft Network Technology ZenTao is China's easy soft Tianchuang network technology Nature Easy Soft Network Technology company's open source project management software. The software includes product management, project management, quality management and document management and other...

PT-2023-29983 · Unknown · Zentao Enterprise Edition

Name of the Vulnerable Software and Affected Versions: ZenTao Enterprise Edition versions 4.1.3 and before Description: The issue is related to Cross Site Scripting XSS, which is a type of attack where an attacker injects malicious scripts into a website, allowing them to steal user data or take...

CVE-2023-46374

Summary of CVE-2023-46374 : ZenTao Enterprise Edition versions 4.1.3 and earlier are affected by a Cross Site Scripting (XSS) vulnerability. The connected documents consistently identify the affected software and version range, and describe the issue as an XSS flaw without detailing root-cause sp...

Movable Type vulnerable to cross-site scripting

Overview Movable Type provided by Six Apart Ltd. contains a cross-site scripting vulnerability CWE-79. Six Apart Ltd. reported this vulnerability to JPCERT/CC to notify users of the solutions through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning...

The vulnerability of the Analytics Web Dashboards component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Analytics Web Dashboard component of the Oracle Business Intelligence Enterprise Edition software is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibili...

Six Apart Movable Type Security Vulnerability

Six Apart Movable Type is an application from Six Apart USA. It provides features including multiple users, comments, references TrackBack, themes, and more. A security vulnerability exists in Six Apart Movable Type, which stems from a cross-site scripting XSS vulnerability. Affected Products and...

Netgate pfSense CE Security Vulnerability

Netgate pfSense CE is a free and open source FreeBSD-based firewall and router software. A security vulnerability exists in Netgate pfSense CE version 2.6.0, which stems from the vulnerability to receive an unrate-limited attack that allows an attacker to create multiple malicious users in the...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to weaker than expected security (CVE-2023-46158)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to weaker than expected security with the appSecurity-1.0, appSecurity-2.0, appSecurity-3.0, appSecurity-4.0 or appSecurity-5.0 feature enabled. Vulnerability Details Refer to the...

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to cross-site scripting (CVE-2023-38722)

Summary IBM Sterling Partner Engagement Manager has addressed a reflected cross-site scripting vulnerability. Vulnerability Details CVEID:CVE-2023-38722 DESCRIPTION: IBM Sterling Partner Engagement Manager is vulnerable to stored cross-site scripting. This vulnerability allows users to embed...