CVE-2021-22175

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is disabled...

Server side request forgery (ssrf)

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is disabled...

CVE-2021-22175

Removed by vendor...

QIWI: Account Takeover through registration to the same email address

На ресурсе shop.tochka.com была обнаружена уязвимость, приводящая к перехвату аккаунта с помощью регистрации нескольких аккаунтов на один почтовый ящик...

GitLab 代码问题漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. GitLab A cross-site request forgery vulnerability exists ...

The vulnerability of the online business analytics service IBM Cognos Analytics, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the online business analytics service IBM Cognos Analytics is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2024-11285 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition in the snd seq timer open function, where the timer instance per queue is exclusive, but concurrent accesses are not properly managed. This can...

The vulnerability of the online business analytics service IBM Cognos Analytics, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the online business analytics service IBM Cognos Analytics is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2020-11160

Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Design/Logic Flaw

Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2020-11160

Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2020-11160

CVE-2020-11160 describes a resource leakage due to a reference count not being decremented when dci client registration fails. This affects Qualcomm Snapdragon platforms (Auto, Compute, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The vulnerability centers on the dci client re...

Server side request forgery (ssrf)

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited...

CVE-2021-22214

Removed by vendor...

in alovoa/alovoa

✍️ Description It is possible to set a weak password with no compliance with the register form checks that state "Your password needs to be at least 7 characters long and must contain characters and numbers." If a user bypasses the frontend checks, he will be able to register a completely weak...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

CVE-2021-33838

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration...

The vulnerability of the IBM Security Guardium security tool, related to insufficient protection of registration data, allows attackers to gain unauthorized access to the protected information.

The vulnerability of the IBM Security Guardium security tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the protected information...

The vulnerability of the IBM Security Guardium security tool, related to the rigid encoding of registration data, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the IBM Security Guardium security tool is related to the rigid encoding of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...