13090 matches found
BIT-GITLAB-2024-11274 URL Redirection to Untrusted Site ('Open Redirect') in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration...
BIT-MATTERMOST-2024-1949
A race condition in Mattermost versions 8.1.x before 8.1.9, and 9.4.x before 9.4.2 allows an authenticated attacker to gain unauthorized access to individual posts' contents via carefully timed post creation while another user deletes posts...
BIT-MATTERMOST-2024-2447
Mattermost versions 8.1.x before 8.1.11, 9.3.x before 9.3.3, 9.4.x before 9.4.4, and 9.5.x before 9.5.2 fail to authenticate the source of certain types of post actions, allowing an authenticated attacker to create posts as other users via a crafted post action...
BIT-GITLAB-2024-8233 Inefficient Algorithmic Complexity in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 9.4 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could cause a denial of service with requests for diff files on a commit or merge request...
BIT-GITLAB-2024-9387 URL Redirection to Untrusted Site ('Open Redirect') in GitLab
An issue was discovered in GitLab CE/EE affecting all versions from 11.8 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could potentially perform an open redirect against a given releases API endpoint...
CGA-65RW-4H88-GRMH
Bulletin has no description...
CGA-Q598-X4C2-QCG9
Bulletin has no description...
MAL-2024-11869 Malicious code in questdb-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 292ba477ee3d52c63d6ed6f224aac50507b0f816c20c525c36dc99f37f411eba The OpenSSF Package Analysis project identified 'questdb-console' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...
MAL-2024-11847 Malicious code in support-conversations (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edda50ab2f0ce5968a008967fbb252094f125171a8759dc97957ee5f7d8d8826 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11845 Malicious code in ml-interactive-data-augmentation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e20810134f19a11553a575cd601700601cf374b00626760c86d6c3905cb0113b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CGA-3R45-FQ28-3C25
Bulletin has no description...
CGA-WXVP-3CMV-6VJ2
Bulletin has no description...
CGA-P6WC-P263-FCGG
Bulletin has no description...
CGA-XW88-P9WQ-P9WP
Bulletin has no description...
MAL-2024-11838 Malicious code in openai-realtime-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63903b0e2f2b97ef7bde23b987c10da50353b221fdaa4036434af2c3c6e1ab47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CGA-WG8M-QMP4-XV2J
Bulletin has no description...
CGA-GCXQ-PJ9W-4H7J
Bulletin has no description...
CGA-8FFJ-5FMX-J87H
Bulletin has no description...