The vulnerability of the online event booking and reservation system, which exists due to the failure to take measures to eliminate special elements that allow a violator to disclose protected information.

The vulnerability of the online event booking and reservation system exists due to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

Siemens Questa and ModelSim

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Questa Simulation and ModelSim Simulation Vulnerability: Insufficiently Protected Credentials 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the original advisory titled...

The vulnerability of Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of Microsoft Edge and Google Chrome browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that should be protected...

The vulnerability of the UNIX command shell Zsh operating systems and Mac OS allows attackers to compromise the integrity of protected information.

The vulnerability of the UNIX command shell Zsh operating systems and Mac OS lies in the improper assignment of permissions to files. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

The vulnerability in the browser text input implementation of Google Chrome allows attackers to disclose protected information.

The vulnerability in the browser text input implementation of Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Jenkins automation server relates to a breach of data protection mechanisms, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Jenkins automation server relates to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Audio component in the Google Chrome browser, related to reading beyond the buffer in memory, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Audio component in the Google Chrome browser relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2021-6415 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to disclose protected information. This can be exploited to obtain sensitive information and affect the...

The vulnerability of Google Chrome’s dialog window implementation allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s dialog window implementation exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

The vulnerability of the Navigation component in Google Chrome allows a hacker to disclose protected information.

The vulnerability of the Navigation component in Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created web page...

jetty: requests to the ConcatServlet and WelcomeFilter are able to access protected resources within the WEB-INF directory

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to /concat?/%2557EB-INF/web.xml can retrieve the web.xml file. This can reveal...

The vulnerability of OPPO’s 5G router, related to the insecure storage of confidential information, allows a intruder to gain unauthorized access to protected data.

The vulnerability of OPPO’s 5G router is related to the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2021-39931

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under specific condition an unauthorised project member was allowed to delete a protected branches du...

CVE-2021-39931

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under specific condition an unauthorised project member was allowed to delete a protected branches du...

CVE-2021-39931

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under specific condition an unauthorised project member was allowed to delete a protected branches du...

Race condition

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under specific condition an unauthorised project member was allowed to delete a protected branches du...

UBUNTU-CVE-2021-39931

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under specific condition an unauthorised project member was allowed to delete a protected branches du...

CVE-2021-39931

Removed by vendor...

CVE-2021-39931

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under specific condition an unauthorised project member was allowed to delete a protected branches du...

CVE-2021-39931

GitLab CE/EE CVE-2021-39931 affects all versions from 8.11 up to 14.3.6, and 14.4 up to 14.4.4, and 14.5 up to 14.5.2. The flaw is a business-logic error that allowed an unauthorized project member to delete a protected branch. Impact described in the sources involves unauthorized deletion by low...