GitLab security bypass | CVE-2023-5061
NAME__________GitLab security bypassPlatforms Affected:GitLab Enterprise Edition 16.6.1 GitLab Enterprise Edition 16.5.3 GitLab Enterprise Edition 16.4.3 GitLab Community Edition 16.5.3 GitLab...
NAME__________GitLab security bypassPlatforms Affected:GitLab Enterprise Edition 16.6.1 GitLab Enterprise Edition 16.5.3 GitLab Enterprise Edition 16.4.3 GitLab Community Edition 16.5.3 GitLab...
NAME__________Ubuntu Budgie Budgie Extras security bypassPlatforms Affected:Ubuntu Budgie Budgie Extras 1.7.0 Ubuntu Budgie Budgie Extras 1.4.0Risk Level:7Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Ubuntu Budgie...
NAME__________Palo Alto Networks PAN-OS denial of servicePlatforms Affected:Palo Alto Networks PAN-OS 9.0.0 Palo Alto Networks PAN-OS 9.1.0 Palo Alto Networks...
NAME__________Content Consent Extension extension for TYPO3 information disclosrePlatforms Affected:TYPO3 Content Consent extension for TYPO3 2.0.1Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Content Consent Extension...
NAME__________Ubuntu Budgie Budgie Extras security bypassPlatforms Affected:Ubuntu Budgie Budgie Extras 1.7.0 Ubuntu Budgie Budgie Extras 1.4.0Risk Level:5.7Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Ubuntu Budgie...
NAME__________Siemens SCALANCE M-800/S615 Family command executionPlatforms Affected:Siemens SCALANCE M800/S615 Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108- 4AM00-2BA2) Siemens RUGGEDCOM RM1224 LTE(4G)...
NAME__________Joomla! S5 Register extension SQL injectionPlatforms Affected:Joomla! S5 Register extension for Joomla!Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Joomla! S5 Register extension is vulnerable...
NAME__________Microsoft Word information disclosurePlatforms Affected:Microsoft WordRisk Level:3.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Microsoft Word could allow a remote attacker to obtain sensitive information, caused...
NAME__________Ubuntu Budgie Budgie Extras security bypassPlatforms Affected:Ubuntu Budgie Budgie Extras 1.7.0 Ubuntu Budgie Budgie Extras 1.4.0Risk Level:5.2Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Ubuntu Budgie...
NAME__________ Joomla! Starshop extension SQL injection Platforms Affected:Joomla Starshop extension for Joomla!Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Joomla! Starshop extension is vulnerable to...
NAME__________Siemens SCALANCE M-800/S615 Family command executionPlatforms Affected:Siemens SCALANCE M800/S615 Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108- 4AM00-2BA2) Siemens RUGGEDCOM RM1224 LTE(4G)...
NAME__________Microsoft office buffer overflowPlatforms Affected:Microsoft OfficeRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft office is vulnerable to a heap-based buffer overflow, caused by improper...
NAME__________Ubuntu Budgie Budgie Extras security bypassPlatforms Affected:Ubuntu Budgie Budgie Extras 1.7.0 Ubuntu Budgie Budgie Extras 1.4.0Risk Level:6.9Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Ubuntu Budgie...
NAME__________Ubuntu Budgie Budgie Extras security bypassPlatforms Affected:Ubuntu Budgie Budgie Extras 1.7.0 Ubuntu Budgie Budgie Extras 1.4.0Risk Level:6.8Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Ubuntu Budgie...
Microsoft's Digital Crimes Unit seized multiple domains used by a Vietnam-based cybercrime group (Storm-1152) that registered over 750 million fraudulent...
Ledger is warnings users not to use web3 dApps after a supply chain attack on the 'Ledger dApp Connect Kit'...
A new Go-based multi-platform malware identified as 'NKAbuse' is the first malware abusing NKN (New Kind of Network) technology for...
This year has seen the emergence of ten new Android banking malware families, which collectively target 985 bank and fintech/trading...
12/14/23 update with information from Ubiquiti added below. Since yesterday, users of Ubiquiti networking devices, ranging from routers to security...
Active Directory (AD) is a highly attractive target for threat actors due to its critical role as the identity (or...
Kraft Heinz has confirmed that their systems are operating normally and that there is no evidence they were breached after...
The Idaho National Laboratory (INL) confirmed that attackers stole the personal information of more than 45,000 individuals after breaching its...
Discord has made security key multi-factor authentication (MFA) available for all accounts on the platform, bringing significant security and anti-phishing...
Google on Thursday announced that it will start testing a new feature called "Tracking Protection" starting January 4, 2024, to...