11354 matches found
GitLab 权限许可和访问控制问题漏洞
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A privilege permission and access control issue...
PT-2021-6590 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.0 and later Description: The issue is related to improper authorization in GitLab, affecting guests in private projects. This allows unauthorized access to view CI/CD analytics. The vulnerability can be exploited...
CVE-2021-39155
Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. According to RFC 4343, Istio authorization policy should compare the hostname in the HTTP Host header in a case...
Path traversal
Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio 1.11.0, 1.10.3 and below, and 1.9.7 and below contain a remotely exploitable vulnerability where an HTTP request...
Security Bulletin: Vulnerabilities in IBM Java Runtime affect IBM Integration Bus and IBM App Connect Enterpise v11, v12 (CVE-2020-27221)
Summary Vulnerabilities in IBM® SDK Java™ Technology ,used by IBM Integration Bus & IBM App Connect Enterprise v11, v12. These issues were disclosed as part of the IBM Java SDK updates in January 2021. Vulnerability Details CVEID: CVE-2020-27221 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a...
ICSA-21-231-01_AVEVA SuiteLink Server
1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: AVEVA Software, LLC Equipment: SuiteLink Server Vulnerabilities: Heap-based Buffer Overflow, Null Pointer Dereference, Improper Handling of Exceptional Conditions 2. RISK EVALUATION Successful...
vulhub
This repository is an offensive tool for vulnerability research and exploitation. It contains a collection of vulnerable environments and exploits for various software and frameworks, including Docker, Git, and Oracle Java. The repository is maintained by phith0n and is licensed under the MIT...
CVE-2021-39270
In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur...
CVE-2021-39270
In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur...
Design/Logic Flaw
In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur...
CVE-2021-39270
In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur...
CVE-2021-39270
In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur...
CVE-2021-39270
Ping Identity RSA SecurID Integration Kit vulnerable before version 3.2, where user impersonation is possible. The issue affects the RSA SecurID Integration Kit (Ping Identity) prior to 3.2 and is described as a design/logic flaw enabling impersonation of users. Impact is limited to the affected ...
Moderate: Red Hat Security Advisory: Red Hat Integration Camel Quarkus Tech-Preview 2 security update
An update to the Red Hat Integration Camel Quarkus tech preview is now available. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability...
[SECURITY] Fedora 34 Update: libtpms-0.8.4-2.20210624gita594c4692a.fc34.0
A library providing TPM functionality for VMs. Targeted for integration into Qemu...
Ping Identity RSA SecurID Integration Kit 访问控制错误漏洞
The Ping Identity RSA SecurID Integration Kit is Ping Identity's PingFederate Integration Kit for RSA SecurID® that adds Identity Provider IdP integration options to PingFederate by providing an RSA SecurID adapter that acts as an RSA® Authentication Agent. Program IdP integration option to...
IBM API Connect HOST Injection Vulnerability
IBM API Connect APIConnect is an integration solution for managing the lifecycle of APIs from IBM. The product supports creating, running, managing and securing APIs and microservices, etc. An injection vulnerability exists in IBM API Connect HOST, which stems from the product's host header not...
IBM DataPower Gateway Code Injection Vulnerability
IBM DataPower Gateway is a set of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interface API, web, service-oriented architecture SOA, B2B and cloud workloads. The platform protects, integrates, and optimizes access across channel...
Prioritize Security Controls for Critical AWS Assets
Learn best practices for securing your sensitive data in your Amazon Web Services AWS environments with automated tools that integrate into your pipeline...
ALBA-2021:3055 NetworkManager bug fix and enhancement update
NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...