Lucene search
+L

12961 matches found

BDU FSTEC
BDU FSTEC
added 2024/10/02 12:00 a.m.18 views

The vulnerability of the Group Member Handler component in the Git-based software platform, which is used for collaborative code development on GitLab, allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Group Member Handler component in the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

4.3CVSS5.5AI score0.00372EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2024/10/01 10:15 a.m.20 views

CVE-2023-3441

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

9.1CVSS0.00554EPSS
SaveExploits1References4
OSV
OSV
added 2024/10/01 10:15 a.m.6 views

UBUNTU-CVE-2023-3441

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

9.1CVSS5.7AI score0.00554EPSS
SaveExploits1References6
CVE
CVE
added 2024/10/01 9:47 a.m.74 views

CVE-2023-3441

CVE-2023-3441 details (from provided documents): GitLab EE/CE versions 8.0 through 16.3/16.4 are affected by an issue where the product did not sufficiently warn about the security implications of granting merge rights to protected branches. Root cause described as inadequate warning/messaging; s...

9.1CVSS6.2AI score0.00554EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2024/10/01 9:47 a.m.16 views

CVE-2023-3441

Removed by vendor...

9.1CVSS5.8AI score0.00554EPSS
SaveExploits1
OSV
OSV
added 2024/10/01 9:47 a.m.18 views

CVE-2023-3441 Exposure of Sensitive Information Due to Incompatible Policies in GitLab

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

6.6CVSS6.5AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2024/10/01 9:47 a.m.15 views

CVE-2023-3441 Exposure of Sensitive Information Due to Incompatible Policies in GitLab

An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting merge rights to protected branches...

6.6CVSS6.6AI score0.00554EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/10/01 12:00 a.m.10 views

GitLab Enterprise Edition和Community Edition 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition and Community Edition...

9.1CVSS6.4AI score0.00554EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/10/01 12:00 a.m.12 views

PT-2024-6711

Name of the Vulnerable Software and Affected Versions: Google Chrome affected versions not specified Microsoft Edge affected versions not specified Description: The issue is related to incorrect security checks for standard elements in the V8 JavaScript engine handler. This could allow a remote...

9.6CVSS9AI score0.00686EPSS
SaveExploits1References54
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:00 a.m.19 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers relates to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created HTML page...

3.1CVSS7.1AI score0.00477EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/09/27 12:00 a.m.24 views

The vulnerability of the CORS mechanism implementation in Python PyPi storage solutions allows attackers to disclose protected information.

The vulnerability of the CORS mechanism implemented in Python PyPi software repositories is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

7.8CVSS6.7AI score0.00718EPSS
SaveExploits1References3Affected Software2
OSV
OSV
added 2024/09/26 4:15 p.m.8 views

CVE-2024-8771

The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'previewemailtemplatedesign' function in all versions up to, and including,...

4.3CVSS5.8AI score0.00361EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.11 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

3.3CVSS6.2AI score0.00347EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.11 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created JB2 file...

3.3CVSS6.2AI score0.00347EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.7 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created JB2 file...

3.3CVSS5.7AI score0.00261EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.10 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created JB2 file...

3.3CVSS6.2AI score0.00273EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.15 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created EMF file...

3.3CVSS6.2AI score0.00261EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.12 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created U3D file...

3.3CVSS6.1AI score0.00347EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.15 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

3.3CVSS6.2AI score0.00361EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:00 a.m.10 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created JB2 file...

3.3CVSS6.1AI score0.00347EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder