CVE-2017-11437

GitLab Enterprise Edition EE before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the ability to create a project to use the mirroring feature to potentially read repositories belonging to other users...

PT-2017-12011

Name of the Vulnerable Software and Affected Versions GitLab Enterprise Edition EE versions prior to 8.17.7 GitLab Enterprise Edition EE versions prior to 9.0.11 GitLab Enterprise Edition EE versions prior to 9.1.8 GitLab Enterprise Edition EE versions prior to 9.2.8 GitLab Enterprise Edition EE...

ladu24.ee XSS vulnerability

Vulnerable URL: https://www.ladu24.ee/varuosad/5/,,,,%253C%252Fscript%253E%253Cimg%2Bsrc%253Dx%2Bonerror%253Dprompt%2528%252FXSSPOSED%252F%2529%253Egsc.tab=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.10.2017 Vulnerability type:| XSS Vulnerability status:| Public...

CVE-2017-1000009

Akeneo PIM CE and EE are affected by a shell injection vulnerability in the mass edition feature for versions < 1.6.6, < 1.5.15, and

CVE-2017-1000009

Akeneo PIM CE and EE 1.6.6, 1.5.15, 1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution...

PT-2017-10720

Name of the Vulnerable Software and Affected Versions Akeneo PIM CE and EE versions prior to 1.6.6 Akeneo PIM CE and EE versions prior to 1.5.15 Akeneo PIM CE and EE versions prior to 1.4.28 Description The issue concerns shell injection in the mass edition, which can result in remote execution...

ladu24.ee XSS vulnerability

Vulnerable URL: https://www.ladu24.ee/varuosad/3/,,,,%253C%252Fscript%253E%253Cimg%2Bsrc%253Dx%2Bonerror%253Dprompt%2528%252FXSSPOSED%252F%2529%253Egsc.tab=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Public...

ladu24.ee XSS vulnerability

Vulnerable URL: https://www.ladu24.ee/varuosad/2/,,,,%253C%252Fscript%253E%253Cimg%2Bsrc%253Dx%2Bonerror%253Dprompt%2528%252FXSSPOSED%252F%2529%253Egsc.tab=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Public...

ladu24.ee XSS vulnerability

Vulnerable URL: https://www.ladu24.ee/varuosad/0/,,,,%253C%252Fscript%253E%253Cimg%2Bsrc%253Dx%2Bonerror%253Dprompt%2528%252FXSSPOSED%252F%2529%253Egsc.tab=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Public...

CVE-2016-9469

Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitLab instance. For GitLab instances with publicly available projects this vulnerability could be exploited by an unauthenticated user. A fix...

CVE-2016-4010

Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data...

CVE-2016-4010: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted serialized shopping cart data...

PT-2017-8442

Name of the Vulnerable Software and Affected Versions Magento CE and EE versions prior to 2.0.6 Description The issue allows remote attackers to conduct PHP object injection attacks, enabling them to execute arbitrary PHP code. This is achieved by sending crafted serialized shopping cart data...

[SECURITY] Fedora 25 Update: springframework-security-3.2.10-1.fc25

Spring Security is a Java/Java EE framework that provides advanced authentication, authorization and other comprehensive security features for enterprise applications. In addition to having a comprehensive list of security functionality, Spring Security is very configurable and employs the Spring...

Cross-site Scripting Vulnerability in ZhengTong Content Management System

The GovContent Management System is a website management system designed and built on the JAVA EE platform, which is mainly used for the website construction and management of government agencies, enterprises and institutions. A cross-site scripting vulnerability exists in the CMS. The...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.3 for RHEL 7

Updated packages that provides Red Hat JBoss Enterprise Application Platform 7.0.3, fixes several bugs, and adds various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

RHEL 6 : jboss-ec2-eap (RHSA-2016:2072)

An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Moderate: Red Hat Security Advisory: jboss-ec2-eap security and enhancement update for EAP 6.4.11

An update for jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

auto24.ee Open Redirect vulnerability

Open Bug Bounty ID: OBB-176216 Description| Value ---|--- Affected Website:| auto24.ee Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

Apache Struts Dynamic Method Invocation command execution

Added: 05/06/2016 CVE: CVE-2016-3081 Background Apache Struts is an open-source web application framework for developing Java EE web applications. It uses and extends the Java Servlet API to encourage developers to adopt a model-view-controller MVC architecture. The Dynamic Method Invocation...