| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-22257 | 5.0 | An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. The route for /user.keys is not restricted on instances with | 2021-10-09 03:34:00 | 2021-10-05 14:15:00 |
| CVE-2021-39893 | 5.0 | A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation. | 2021-10-09 03:34:00 | 2021-10-05 13:15:00 |
| CVE-2021-22258 | 4.0 | The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses | 2021-10-09 03:33:00 | 2021-10-05 14:15:00 |
| CVE-2021-22264 | 4.3 | An issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. Under specialized conditions, an invited group member may co | 2021-10-09 03:32:00 | 2021-10-05 14:15:00 |
| CVE-2021-39881 | 3.5 | In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client application with arbitrary scope names which may allow the malicious user to trick unsuspecting users to authorize the malicious client | 2021-10-09 03:31:00 | 2021-10-05 14:15:00 |
| CVE-2021-39870 | 4.0 | In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by an attacker making a crafted API call. | 2021-10-09 03:31:00 | 2021-10-05 14:15:00 |
| CVE-2021-39886 | 4.0 | Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing users to read confidential Epic references. | 2021-10-09 03:30:00 | 2021-10-05 14:15:00 |
| CVE-2021-41286 | 4.6 | Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the application, the validity of the password is checked locally. All communication to the database backend is made via the same technical | 2021-10-09 03:25:00 | 2021-10-05 16:15:00 |
| CVE-2021-41114 | 5.0 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that TYPO3 CMS is susceptible to host spoofing due to improper validation of the HTTP Host header. TYPO3 uses the HTTP Host header, for | 2021-10-09 02:51:00 | 2021-10-05 18:15:00 |
| CVE-2021-41113 | 6.8 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the new TYPO3 v11 feature that allows users to create and share deep links in the backend user interface is vulnerable to cross-si | 2021-10-09 02:51:00 | 2021-10-05 18:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: