GitLab CE/EE Incorrect Access Control Vulnerability (CNVD-2019-23575)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. An incorre...

CVE-2018-19496

An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access control vulnerability that permits a user with insufficient privileges to promote a project milestone to a group milestone...

CVE-2018-19496

An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access control vulnerability that permits a user with insufficient privileges to promote a project milestone to a group milestone...

Improper access control

An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access control vulnerability that permits a user with insufficient privileges to promote a project milestone to a group milestone...

CVE-2018-19496

An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an incorrect access control vulnerability that permits a user with insufficient privileges to promote a project milestone to a group milestone...

CVE-2018-19496

Removed by vendor...

FreeBSD : Gitlab -- Multiple Vulnerabilities (4091069e-860b-11e9-a05f-001b217b3468)

Gitlab reports : Remote Command Execution Vulnerability on Repository Download Feature Confidential Issue Titles Revealed to Restricted Users on Unsubscribe Disclosure of Milestone Metadata through the Search API Private Project Discovery via Comment Links Metadata of Confidential Issues Disclose...

Additional Lifecycle Information for StoreFront

This article is a supplement to the Non-Sale ProductsLifecycle information StoreFront is an integral component of Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop but can be used with several versions of Citrix Virtual Apps and Desktops and XenApp and XenDesktop. For customers that...

Eclipse RDF4j XML Parser XML External Entity Injection Vulnerability

Eclipse RDF4j is an Eclipse Foundation Java framework for working with RDF data . The framework can be used for RDF data creation, parsing , scalable storage and querying . An XML external entity injection vulnerability exists in the XML parser in Eclipse RDF4j versions prior to 2.4.0 Milestone 2...

CVE-2018-14606

An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur via a Milestone name during a promotion...

Design/Logic Flaw

An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur via a Milestone name during a promotion...

CVE-2018-14606

An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur via a Milestone name during a promotion...

CVE-2018-14606

An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. XSS can occur via a Milestone name during a promotion...

CVE-2018-14606

CVE-2018-14606 affects GitLab Community and Enterprise Edition prior to 10.8.7, 11.0.x prior to 11.0.5, and 11.1.x prior to 11.1.2. It enables cross-site scripting via a Milestone name during a promotion. Remediation is provided by updating to 10.8.7 or later in the 11.x branches (i.e., 11.0.5+ a...

CVE-2018-14606

Removed by vendor...

GitLab CE and EE Cross-Site Scripting Vulnerability (CNVD-2019-06642)

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github for accessing the contents of a project's files, commit history, bug lists, and more. A cross-site scriptin...

Siemens Milestone XProtect Video Management Software Deserialization Elevation of Privilege Vulnerability

Siemens Milestone XProtect Video Management Software is a suite of video management software for managing surveillance video and other content. A deserialization elevation of privilege vulnerability exists in a .NET remote endpoint in multiple versions of Milestone XProtect Video Management...

Deserialization of untrusted data

The Milestone XProtect Video Management Software Corporate, Expert, Professional+, Express+, Essential+ 2016 R1 10.0.a to 2018 R1 12.1a contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution...

CVE-2018-7891

The Milestone XProtect Video Management Software Corporate, Expert, Professional+, Express+, Essential+ 2016 R1 10.0.a to 2018 R1 12.1a contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution...

CVE-2018-7891

The Milestone XProtect Video Management Software Corporate, Expert, Professional+, Express+, Essential+ 2016 R1 10.0.a to 2018 R1 12.1a contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution...