ROS-20241008-08

Intel processor firmware vulnerability is related to information leakage from vector registers. registers. Exploitation of the vulnerability may allow an intruder to gain access to protected information...

The vulnerability of the Microsoft Outlook email client for iOS, related to improper authentication, allows a hacker to disclose protected information.

The vulnerability of the Microsoft Outlook email client for iOS is related to improper authentication. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of Zoom’s video conferencing software lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Zoom video conferencing software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the mv88e6xxx.default_mdio_bus() function in Marvell 88E6xxx device driver for Linux operating systems allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the mv88e6xxx.defaultmdiobus function in the drivers/net/dsa/mv88e6xxx/chip.c file of the Marvell 88E6xxx device driver in the Linux operating system is related to improper checking of the list. Exploiting this vulnerability could allow an attacker to compromise the integrity...

The vulnerability of the JetBrains YouTrack project management and task management software, related to insufficient protection of registration data, allows a hacker to gain unauthorized access to the protected information.

The vulnerability of the JetBrains YouTrack project and task management software is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

BIT-GITLAB-2023-3441 Exposure of Sensitive Information Due to Incompatible Policies in GitLab

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

The vulnerability of the /core/authorize.php file in the Drupal CMS system allows a hacker to disclose protected information.

The vulnerability of the /core/authorize.php file in the Drupal CMS system relates to the exposure of system data by unauthorized individuals in the controlled area. Exploiting this vulnerability could allow attackers to disclose protected information through the hashsalt parameter in the...

The vulnerability of IBM Cognos Dashboards on Cloud Pak for Data software in managing business processes lies in the transfer of critical information in open text format, allowing attackers to disclose protected information.

The vulnerability of IBM Cognos Dashboards on Cloud Pak for Data, related to the transmission of critical information in open text format. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

ROS-20241002-03

Vulnerability of btrfsgetrootref function in fs/btrfs/disk-io.c module of btrfs file system of Linux kernel is related to reuse of previously freed memory. of the Linux operating system is related to the reuse of previously freed memory. Exploitation of the vulnerability could allow an attacker t...

The vulnerability of the Group Member Handler component in the Git-based software platform, which is used for collaborative code development on GitLab, allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Group Member Handler component in the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

CVE-2023-3441

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

UBUNTU-CVE-2023-3441

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

CVE-2023-3441

CVE-2023-3441 details (from provided documents): GitLab EE/CE versions 8.0 through 16.3/16.4 are affected by an issue where the product did not sufficiently warn about the security implications of granting merge rights to protected branches. Root cause described as inadequate warning/messaging; s...

CVE-2023-3441 Exposure of Sensitive Information Due to Incompatible Policies in GitLab

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

CVE-2023-3441

Removed by vendor...

CVE-2023-3441 Exposure of Sensitive Information Due to Incompatible Policies in GitLab

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

GitLab Enterprise Edition和Community Edition 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition and Community Edition...

PT-2024-6711

Name of the Vulnerable Software and Affected Versions: Google Chrome affected versions not specified Microsoft Edge affected versions not specified Description: The issue is related to incorrect security checks for standard elements in the V8 JavaScript engine handler. This could allow a remote...

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers relates to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created HTML page...

The vulnerability of the CORS mechanism implementation in Python PyPi storage solutions allows attackers to disclose protected information.

The vulnerability of the CORS mechanism implemented in Python PyPi software repositories is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...