13 matches found
CVE-2026-47716
Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, In affected versions, the issue list view authorizes access through the project in the URL, but applies the requested bulk action to the submitted issue IDs without also requiring those issues to belong to that project. This...
EUVD-2020-5543
Malware in sbrugna...
CVE-2025-38101
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...
SUSE CVE-2017-15571
In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/list.html.erb via crafted column data...
CVE-2020-13283
For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title...
CVE-2020-13283
For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title...
CVE-2020-13283: Improper Neutralization of Input During Web Page Generation
For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title...
PT-2020-13424 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.0.12 GitLab versions prior to 13.1.6 GitLab versions prior to 13.2.3 Description: A cross-site scripting issue exists in the issues list via milestone title. Recommendations: For versions prior to 13.0.12, update t...
CVE-2019-18369: Incorrect Default Permissions
In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible...
PT-2019-15378
Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2019.2.55152 Description The issue allows removing tags from the issues list without having the corresponding permission. Recommendations For versions prior to 2019.2.55152, update to version 2019.2.55152 o...
Redmine cross-site scripting vulnerability (CNVD-2017-31957)
Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . A cross-site scripting vulnerability exists in the app/views/issues/list.html.erb file in Redmine...
