FreeBSD : Gitlab -- multiple vulnerabilities (d1b35142-ff4a-11ec-8be3-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d1b35142-ff4a-11ec-8be3-001b217b3468 advisory. - A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions...

Atlassian Jira < 8.20.1 Improper Authorization

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.20.1. It is, therefore, affected by a vulnerability allowing authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization...

The vulnerability of the Galaxy Store app, related to improper authorization, allows a malicious user to install apps from the Galaxy Store without interacting with the user.

The vulnerability of the Galaxy Store app is related to improper authorization. Exploiting this vulnerability allows a hacker to install apps from the Galaxy Store without any interaction with the user...

GitLab 8.13.x < 14.10.5, 15.0.x < 15.0.4, 15.1.x < 15.1.1 Improper Authorization Vulnerability

GitLab is prone to an improper authorization vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

CVE-2022-2229

An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of...

CVE-2022-2244

An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows project memebers with reporter role to manage issues in project's error tracking feature...

UBUNTU-CVE-2022-2244

An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows project memebers with reporter role to manage issues in project's error tracking feature...

CVE-2022-2244

Removed by vendor...

CVE-2022-2282

Removed by vendor...

PT-2022-15432 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 14.8 through 14.10.4 GitLab EE/CE versions 15.0 through 15.0.3 GitLab EE/CE versions 15.1 through 15.1.0 Description: An improper authorization issue affects GitLab EE/CE, allowing project members with the reporter role ...

Tuleap 安全漏洞

Tuleap is an application lifecycle management system that facilitates agile software development, design projects, V-modeling, requirements management and IT service management. An information disclosure vulnerability exists in versions prior to Tuleap 13.9.99.58 that stems from not properly...

Apache Archiva < 2.2.8 Improper Authorization Vulnerability

Apache Archiva is prone to an improper authorization vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WAVLINK WN579 X3 Information Disclosure Vulnerability (CNVD-2022-61036)

The WAVLINK WN579 X3 is a wireless router from the Chinese company WAVLINK. An information disclosure vulnerability exists in WAVLINK WN579 X3 M79X3.V5030.180719 version, which originates from improper authorization management in /cgi-bin/ExportAllSettings.sh. An attacker can exploit this...

WAVLINK WN535 G3 Information Disclosure Vulnerability

WAVLINK WN535 G3 is a wireless router from WAVLINK China.WAVLINK WN535 G3 version M35G3R.V5030.180927 is vulnerable to an information disclosure vulnerability that stems from improper authorization management on the livemfg.shtml page, which could be exploited by an attacker to obtain sensitive...

WAVLINK AERIAL X 1200M Information Disclosure Vulnerability (CNVD-2022-61032)

WAVLINK AERIAL X 1200M, a WiFi extender from WAVLINK China, is vulnerable to an information disclosure vulnerability in version M79X3.V5030.180719, which stems from improper authorization management on the livecheck.shtml page, and could be exploited by an attacker to The vulnerability is caused ...

WAVLINK AERIAL X 1200M Information Disclosure Vulnerability

WAVLINK AERIAL X 1200M, a WiFi extender from WAVLINK China, has an information disclosure vulnerability in version M79X3.V5030.191012, which stems from improper authorization management in the livemfg.shtml page, and can be exploited by attackers to The livemfg.shtml page can be used to execute t...

CVE-2022-30670

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require...

Authorization

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require...

CVE-2022-30670 Escalate Privileges to Server Admin - Robohelp Server

RoboHelp Server earlier versions than RHS 11 Update 3 are affected by an Improper Authorization vulnerability which could lead to privilege escalation. An authenticated attacker could leverage this vulnerability to achieve full administrator privileges. Exploitation of this issue does not require...

CVE-2022-30670

Adobe RoboHelp Server are affected in versions earlier than RHS 11 Update 3 by an Improper Authorization vulnerability that can allow an authenticated attacker to escalate to full administrator privileges without user interaction. The issue, documented as CVE-2022-30670, has been addressed by Ado...