Archive
6 July 2021
Vulnerabilities first published on this day (UTC), newest first.
8 results · Clear filters · Feed
-
Medium 6.1
Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feat…
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 1…
-
Medium 6.5
Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in Git…
-
Medium 5.9
An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it wa…
-
Medium 6.1
Smashing Cross-site Scripting vulnerability
Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS). A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment (…
-
Medium 5.4
Multiple stored XSS vulnerabilities in IrisNext Edition 9.5.16, which allows an authenticated (or compromised) user to …
-
Medium 6.5
Integer overflow in pywin32
An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could cra…
-
Medium 4.0
Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions bef…