Archive
July 2022
Vulnerabilities first published in this month (UTC), newest first.
530 results · Clear filters · Feed
-
Medium 5.3
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 14.10.5, all versions sta…
-
Medium 6.3
Cross-Site Scripting in Canarytoken history
Canarytokens is an open source tool which helps track activity and actions on your network. A Cross-Site Scripting vulnerability was identified in the history page of triggered Canarytokens. This permits an attacker who recognised an HTTP-based Canarytoken (a…
-
Medium 5.3
Information exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 pri…
-
Medium 6.5
Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 …
-
Medium 5.0
An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4…
-
Medium 4.3
An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior t…
-
Medium 4.7
An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4,…
-
Medium 6.2
Distributed Data Systems WebHMI Cross-site Scripting
A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 can store a script that could impact other logged in users.
-
Medium 6.6
NULL Pointer Dereference in bfabiszewski/libmobi
NULL Pointer Dereference in GitHub repository bfabiszewski/libmobi prior to 0.11.
-
Medium 6.5
Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.19.