CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

ALPINE-CVE-2022-30698

NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver returns delegation information for the...

[PNM-002] The expiry of the parent node can be smaller than the one of a child node, violating the guarantee policy

Lines of code Vulnerability details Description By design, the child node's expiry can only be extended up to the parent's current one. Adding these restrictions means that the ENS users only have to look at the name itself's fuses and expiry without traversing the hierarchy to understand what...

GHSA-CJ88-88MR-972W glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service

glob-parent 6.0.0 is vulnerable to Regular Expression Denial of Service ReDoS. This issue is fixed in version 6.0.1. This vulnerability is separate from GHSA-ww39-953v-wcq6...

@hidoo/express-engine-handlebars (0.8.2), @hidoo/gulp-project-generator (0.19.0) potentially affected by CVE-2021-35065 via glob-parent (6.0.0)

glob-parent NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on glob-parent and may be impacted: - @hidoo/express-engine-handlebars 0.8.2 - @hidoo/gulp-project-generator 0.19.0 Source cves: CVE-2021-35065 Source advisory:...

glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service

glob-parent 6.0.0 is vulnerable to Regular Expression Denial of Service ReDoS. This issue is fixed in version 6.0.1. This vulnerability is separate from GHSA-ww39-953v-wcq6...

PT-2022-10388

Name of the Vulnerable Software and Affected Versions glob-parent versions prior to 6.0.1 Description The issue allows ReDoS regular expression denial of service attacks against the enclosure regular expression in the glob-parent package for Node.js. Recommendations For versions prior to 6.0.1,...

MAL-2022-2419 Malicious code in deneuve-package-parent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3824ba1403d398ede377a0b2b56f340f4a5a1b25daca271f3c169e5e8e410d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatsby-theme-parent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f53bb4fb5a2b25bab79f0b368c1d2b32a3030b8cd9c9e83ab142708172d89e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3291 Malicious code in gatsby-theme-parent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f53bb4fb5a2b25bab79f0b368c1d2b32a3030b8cd9c9e83ab142708172d89e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-41754

dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...

CVE-2021-41754

dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...

CVE-2022-1821

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for a subgroup member to access the members list of their parent group...

CVE-2022-1821

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for a subgroup member to access the members list of their parent group...

CVE-2022-1821

CVE-2022-1821 affects GitLab CE/EE: vulnerable in versions 10.8–14.9.4, 14.10.0–14.10.3, and 15.0.0. It may allow a subgroup member to access the parent group’s members list. Remediation: upgrade to fixed versions 14.9.5, 14.10.4, or 15.0.1, respectively. No exploitation details or in-the-wild st...

CVE-2022-1821

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for a subgroup member to access the members list of their parent group...

CVE-2022-1821

Removed by vendor...

CVE-2022-1821

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for a subgroup member to access the members list of their parent group...

PT-2022-14140 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 10.8 through 14.9.4 GitLab CE/EE versions 14.10 through 14.10.3 GitLab CE/EE versions 15.0 through 15.0.0 Description: An issue has been discovered in GitLab CE/EE. It may be possible for a subgroup member to access the...

GitLab Community Edition和GitLab Enterprise Edition 资源管理错误漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A resource management error vulnerability exists in GitLab Community Edition and GitLa...