16 matches found
The vulnerability of the mechanism for displaying discussions about commit messages and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE allows a perpetrator to compromise the confidentiality of the protected information.
The vulnerability of the mechanism for displaying commit discussions and project-specific links on the Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to...
EUVD-2019-7909
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2018-12466
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links. CVE-2018-12466 Note that Nessus...
CVE-2019-17579
SonarSource SonarQube before 7.8 has XSS in project links on account/projects...
SonarSource SonarQube Cross-Site Scripting Vulnerability
SonarSource SonarQube is an open source code quality management system from SonarSource Switzerland. A cross-site scripting vulnerability exists in project links in SonarSource SonarQube versions prior to 7.8. The vulnerability stems from a lack of proper validation of client-side data by the WEB...
CVE-2019-17579
SonarSource SonarQube before 7.8 has XSS in project links on account/projects...
CVE-2019-17579
SonarSource SonarQube before 7.8 has XSS in project links on account/projects...
Design/Logic Flaw
SonarSource SonarQube before 7.8 has XSS in project links on account/projects...
CVE-2019-17579
SonarSource SonarQube before 7.8 has XSS in project links on account/projects...
CVE-2019-17579
CVE-2019-17579 affects SonarSource SonarQube versions prior to 7.8. The vulnerability is a cross-site scripting (XSS) flaw in the project links on account/projects, arising from insufficient validation of client-side data in the WEB application. Impact described in sources: attacker could potenti...
CVE-2018-12466
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links...
DEBIAN-CVE-2018-12466
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links...
Design/Logic Flaw
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links...
UBUNTU-CVE-2018-12466
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links...
CVE-2018-12466 openbuildservice allowed deleting packages via project links
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links...
