Day: October 7, 2021

GitLab Community Edition/Enterprise Edition 13.6 Access Control access control

A vulnerability was found in GitLab Community Edition and Enterprise Edition 13.6 (Bug Tracking Software). It has been rated as

Common Vulnerabilities and Exposures

GitLab Community Edition/Enterprise Edition Access Control access control

A vulnerability classified as critical has been found in GitLab Community Edition and Enterprise Edition (Bug Tracking Software) (the affected

Common Vulnerabilities and Exposures

GitLab Enterprise Edition 13.10 API Endpoint access control

A vulnerability classified as critical was found in GitLab Enterprise Edition 13.10 (Bug Tracking Software). This vulnerability affects an unknown

Common Vulnerabilities and Exposures

GitLab 8.9 Project Import access control

A vulnerability, which was classified as critical, has been found in GitLab 8.9 (Bug Tracking Software). This issue affects an

Common Vulnerabilities and Exposures

GitLab 13.10 Jira Cloud Integration access control

A vulnerability, which was classified as critical, was found in GitLab 13.10 (Bug Tracking Software). Affected is some unknown processing

Common Vulnerabilities and Exposures

GitLab Community Edition/Enterprise Edition 11.11 API Endpoint authentication bypass

A vulnerability has been found in GitLab Community Edition and Enterprise Edition 11.11 (Bug Tracking Software) and classified as critical.

Common Vulnerabilities and Exposures

Wowza Streaming Engine up to 4.8.11+5 User Account delete.htm userName cross-site request forgery

A vulnerability was found in Wowza Streaming Engine up to 4.8.11+5. It has been rated as problematic. This issue affects

Common Vulnerabilities and Exposures

TIBCO ActiveSpaces/FTL tibftlserver channel accessible [CVE-2021-35497]

A vulnerability classified as critical has been found in TIBCO ActiveSpaces and FTL (version unknown). Affected is an unknown code

Common Vulnerabilities and Exposures

zephyrproject-rtos 1.14.0/2.5.0 JSON Decoder denial of service

A vulnerability classified as problematic was found in zephyrproject-rtos 1.14.0/2.5.0 (Project Management Software). Affected by this vulnerability is some unknown

Common Vulnerabilities and Exposures

zephyrproject-rtos 2.5.0 buffer overflow [CVE-2021-3581]

A vulnerability, which was classified as critical, has been found in zephyrproject-rtos 2.5.0 (Project Management Software). Affected by this issue

Common Vulnerabilities and Exposures

zephyrproject-rtos 2.5.0 USB DFU DNLOAD heap-based overflow

A vulnerability, which was classified as critical, was found in zephyrproject-rtos 2.5.0 (Project Management Software). This affects an unknown functionality

Common Vulnerabilities and Exposures

Scrapy-splash up to 0.7.x Request Parameter HttpAuthMiddleware http_user/http_pass information disclosure

A vulnerability has been found in Scrapy-splash up to 0.7.x and classified as problematic. This vulnerability affects the function HttpAuthMiddleware

Common Vulnerabilities and Exposures

Axis OS up to 6.40 SMTP Notification buffer overflow

A vulnerability was found in Axis OS up to 6.40 and classified as critical. This issue affects an unknown part

Common Vulnerabilities and Exposures

Axis OS SMTP Test access control [CVE-2021-31987]

A vulnerability was found in Axis OS (version unknown). It has been classified as critical. Affected is an unknown code

Common Vulnerabilities and Exposures

Axis OS SMTP Test crlf injection [CVE-2021-31988]

A vulnerability was found in Axis OS (affected version unknown). It has been declared as critical. Affected by this vulnerability

Common Vulnerabilities and Exposures

Afian FileRun 2021.03.26 X-Forwarded-For Header cross site scripting

A vulnerability was found in Afian FileRun 2021.03.26. It has been rated as problematic. Affected by this issue is some

Common Vulnerabilities and Exposures

Afian FileRun 2021.03.26 HTML Editor cross site scripting

A vulnerability classified as problematic has been found in Afian FileRun 2021.03.26. This affects an unknown function of the component

Common Vulnerabilities and Exposures

GitLab up to 14.3.1 Jira Integration cross site scripting

A vulnerability classified as problematic was found in GitLab up to 14.3.1 (Bug Tracking Software). This vulnerability affects an unknown

Common Vulnerabilities and Exposures

GitLab Community Edition/Enterprise Edition 8.4 Markdown cross site scripting

A vulnerability, which was classified as problematic, has been found in GitLab Community Edition and Enterprise Edition 8.4 (Bug Tracking

Common Vulnerabilities and Exposures

GitLab Community Edition/Enterprise Edition 8.0 Fogbugz Importer server-side request forgery

A vulnerability, which was classified as critical, was found in GitLab Community Edition and Enterprise Edition 8.0 (Bug Tracking Software).

Common Vulnerabilities and Exposures

GitLab 13.7 Jira Integration cross site scripting

A vulnerability has been found in GitLab 13.7 (Bug Tracking Software) and classified as problematic. Affected by this vulnerability is

Common Vulnerabilities and Exposures

Omikron MultiCash Desktop 4.00.008.SP5 improper authentication

A vulnerability was found in Omikron MultiCash Desktop 4.00.008.SP5 and classified as critical. Affected by this issue is an unknown

Common Vulnerabilities and Exposures

ARCHIBUS Web Central up to 21.3.3.815 /archibus/login.axvw user session

A vulnerability was found in ARCHIBUS Web Central up to 21.3.3.815. It has been classified as problematic. This affects some

Common Vulnerabilities and Exposures

ARCHIBUS Web Central up to 21.3.3.815 HTTP Response workflow.runWorkflowRule.dwr cross site scripting

A vulnerability was found in ARCHIBUS Web Central up to 21.3.3.815. It has been declared as problematic. This vulnerability affects