| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-39879 | 4.0 | Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable two-factor authentication | 2021-10-12 15:57:00 | 2021-10-04 17:15:00 |
| CVE-2021-39877 | 4.3 | A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with a specially crafted file. | 2021-10-12 15:55:00 | 2021-10-04 17:15:00 |
| CVE-2021-36845 | 3.5 | Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.8, there are 46 vulnerable parameters that were missed by the vendor while patching the 1.3.7 version to 1.3.8. Vulne | 2021-10-12 15:48:00 | 2021-09-27 16:15:00 |
| CVE-2021-41821 | 4.0 | Wazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that might lead to denial of service. A crafted message must be sent from an authenticated agent to the manager. | 2021-10-12 15:37:00 | 2021-09-29 23:15:00 |
| CVE-2021-39874 | 4.0 | In all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored when using git commands. | 2021-10-12 15:14:00 | 2021-10-04 17:15:00 |
| CVE-2014-3554 | 6.8 | Buffer overflow in the ndp_msg_opt_dnssl_domain function in libndp allows remote routers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS Search List (DNSSL) in an IPv6 router advertisement. | 2021-10-12 14:28:00 | 2014-07-31 14:55:00 |
| CVE-2021-39899 | 1.9 | In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function. There is a rate limit in place, but the attack may still be conducted by stealing the session | 2021-10-12 14:25:00 | 2021-10-04 17:15:00 |
| CVE-2021-39896 | 5.5 | In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may lead to repudiation issues. | 2021-10-12 14:14:00 | 2021-10-04 17:15:00 |
| CVE-2021-33583 | 10.0 | REINER timeCard 6.05.07 installs a Microsoft SQL Server with an sa password that is hardcoded in the TCServer.jar file. | 2021-10-12 13:55:00 | 2021-09-30 20:15:00 |
| CVE-2016-1000132 | 4.3 | Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8 | 2021-10-12 12:11:00 | 2016-10-10 20:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: