Archive
13 December 2021
Vulnerabilities first published on this day (UTC), newest first.
31 results · Clear filters · Feed
-
Medium 6.5
Side-channel attack in Sourcegraph
Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.33.2 is vulnerable to a side-channel attack where strings in private source code could be guessed by an authenticated but unauthorized actor. This issue affects the Saved Searc…
-
Medium 6.5
IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS) which could allow an atta…
-
Medium 4.2
IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery (SSRF). This may allow…
-
Medium 5.3
IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bo…
-
Medium 5.3
IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bo…
-
Medium 6.2
IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds check…
-
Medium 5.1
IBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly sen…
-
Medium 6.8
The IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum Protect Plus workload agen…
-
Medium 5.9
IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles…
-
Medium 5.9
IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allo…
-
Medium 5.4
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the…
-
Medium 5.9
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, cau…
-
Medium 5.6
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console wi…
-
Medium 5.9
IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allo…
-
Medium 4.3
Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and …
-
Medium 6.5
An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14…
-
Medium 6.8
An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions star…
KEV Feb 3, 2026 -
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions star…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions star…
-
Medium 4.3
Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions s…
-
Medium 4.3
Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the con…
-
Medium 4.4
In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…
-
Medium 5.3
Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all…
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions sta…
-
Medium 5.9
A collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6, all versions starting from 14.4 …
-
Medium 4.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions star…
-
Medium 4.2
A Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows attacker to Execute unau…
-
Medium 4.7
reflected XSS in search functionality of WP Cloud Plugins - Lets-Box
Insufficient Input Validation in the search functionality of Wordpress plugin Lets-Box prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.
-
Medium 4.7
reflected XSS in search functionality of WP Cloud Plugins - Share-one-Drive
Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.
-
Medium 4.7
reflected XSS in search functionality of WP Cloud Plugins - Out-of-the-Box
Insufficient Input Validation in the search functionality of Wordpress plugin Out-of-the-Box prior to 1.20.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.
-
Medium 4.7
Reflected XSS in search functionality of WP Cloud Plugins - Use-Your-Drive
Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.