CVE-2023-4522

An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit...

CVE-2023-4522

Removed by vendor...

CVE-2023-4522

CVE-2023-4522 affects GitLab versions before 16.2.0. The issue causes 500 errors when viewing commits that include directories containing a line feed (LF) character. The description in the connected sources confirms the vulnerable condition but does not provide a confirmed fix in the supplied doc...

CVE-2023-4522 Improper Validation of Specified Type of Input in GitLab

An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 errors when viewing the commit...

Cisco Umbrella Cloud Security Web Interface Unauthorized Access

The vulnerability of the Cisco Umbrella cloud security web interface is related to resource release errors. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and gain unauthorized access to protected information...

OpenSSL Heap Buffer Overflow DoS

The vulnerability of the X509VERIFYPARAMadd0policy function in the OpenSSL library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

CVE-2023-26272

IBM Security Guardium Data Encryption IBM Guardium Cloud Key Manager GCKM 1.10.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID:...

VDA logs FAS event 107 continuously if Advyza is installed

Users cannot access Domain resources like Network shares, Internal websites, Applications which need Domain/Windows authentication after 5 minutes of logon. Users can access Domain resources soon after they logon, but if they try to access any new resource after 5 minutes, it fails or prompts for...

Missing _checkAmountWithBalance check in deposit functions

Lines of code Vulnerability details Impact When computing the input or output amount of a swap checkAmountWithBalance is called to ensure that precision errors do not occur and that the pool does not lose any value. However, checkAmountWithBalance is not called in depositGivenInputAmount and...

PHOENIX CONTACT WP 6xxx Hypertext Link Access

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, is related to errors in processing hypertext links. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

CSI Proxy Privilege Escalation

The vulnerability of the CSI Proxy component, a software tool for managing virtual machine clusters in Kubernetes, is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

IBM Security Guardium Data Encryption security vulnerability

IBM Security Guardium Data Encryption is a software from International Business Machines IBM that is used to secure sensitive data within an organization. The software protects assets located in cloud, virtual, big data and physical environments by controlling access to databases, files,...

PT-2025-53172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the powerpc/iommu subsystem related to the sharing of notifiers between PCI and VIO buses. The fail iommu setup function registers the fail iommu bus...

PT-2023-36730

Уязвимость функции nfs file direct read модуля fs/nfs/direct.c поддержки клиентов NFS ядра операционной системы Linux связана с ошибками обработки данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Node.js process.mainModule.proto.require() Data Compromise

The vulnerability of the process.mainModule.proto.require function in the Node.js software platform is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

D-Link DIR-880 A1 Router DoS

The vulnerability of the FUN00010824 function in D-Link DIR-880 A1 microprogrammed router software is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failure...

StoreFront Propagate Changes not working

Running Propagation results in MMC returning "Snap-in Unavailable: This snap-in performed a non-valid operation and has been unloaded ... Exception Message: Object reference not set to an instance of an object" In event viewer, Citrix Delivery Services Admin records "Error in retrieving...

SAML Metadata Import Errors when Federation Metadata XML file is larger than 64KB

The following messages are observed at the logs: Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903432 0 : "Parsing sso url"Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903433 0 : "Parsing sso url"Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903434...

389 Directory Server Content Synchronization DoS

The vulnerability of the Content Synchronization plugin in the 389 Directory Server service is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures through a specially crafted request...

Firefox Type Conversion Confidential Data Compromise

The vulnerability in the Firefox web browser is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...