Latest CVE Feed
-
8.5
HIGHCVE-2017-0933
Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability. An attacker with access to an operator (read-only) account could lure an admin (root) user to access the attacker-controlled page, allowing the... Read more
- EPSS Score: %0.19
- Published: Mar. 22, 2018
- Modified: Nov. 21, 2024
-
9.0
HIGHCVE-2017-0932
Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of validation on the input of the Feature functionality. An attacker with access to an operator (read-only) account and ssh conne... Read more
- EPSS Score: %0.36
- Published: Mar. 22, 2018
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2017-0931
html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled values.... Read more
Affected Products : html-janitor- EPSS Score: %0.22
- Published: Jun. 04, 2018
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2017-0930
augustine node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file with known path.... Read more
Affected Products : augustine- EPSS Score: %0.52
- Published: Jun. 04, 2018
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2017-0929
DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class. Attackers may be able to access information about internal network resources.... Read more
Affected Products : dotnetnuke- EPSS Score: %92.59
- Published: Jul. 03, 2018
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2017-0928
html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable causing sanitization to be bypassed.... Read more
- EPSS Score: %0.18
- Published: Jun. 04, 2018
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2017-0927
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component resulting in unauthorized use of deployment keys by guest users.... Read more
Affected Products : gitlab- EPSS Score: %0.10
- Published: Mar. 21, 2018
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2017-0926
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component resulting in unauthorized user login.... Read more
- EPSS Score: %0.31
- Published: Mar. 21, 2018
- Modified: Nov. 21, 2024
-
7.2
HIGHCVE-2017-0925
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project service integration API endpoint resulting in an information disclosure of plaintext password.... Read more
- EPSS Score: %0.10
- Published: Mar. 21, 2018
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2017-0924
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in persistent cross site scripting.... Read more
Affected Products : gitlab- EPSS Score: %0.08
- Published: Mar. 21, 2018
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2017-0923
Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resulting in persistent cross site scripting.... Read more
Affected Products : gitlab- EPSS Score: %0.08
- Published: Mar. 21, 2018
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2017-0922
Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an information disclosure on any board object.... Read more
Affected Products : gitlab- EPSS Score: %0.08
- Published: Mar. 21, 2018
- Modified: Nov. 21, 2024
-
8.1
HIGHCVE-2017-0921
GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an unverified password change issue in the PasswordsController component resulting in potential account takeover if a victim's session is compromised.... Read more
Affected Products : gitlab- EPSS Score: %0.09
- Published: Jul. 03, 2018
- Modified: Nov. 21, 2024
-
4.3
MEDIUMCVE-2017-0920
GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the Projects::MergeRequests::CreationsController component resulting in an attacker to see every project name and their respectiv... Read more
Affected Products : gitlab- EPSS Score: %0.09
- Published: Mar. 22, 2018
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2017-0919
GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously... Read more
Affected Products : gitlab- EPSS Score: %0.06
- Published: Jul. 03, 2018
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2017-0918
Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution.... Read more
- EPSS Score: %6.05
- Published: Mar. 21, 2018
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2017-0917
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in persistent cross site scripting.... Read more
- EPSS Score: %0.08
- Published: Mar. 21, 2018
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2017-0916
Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through web hook component resulting in remote code execution.... Read more
- EPSS Score: %1.29
- Published: Mar. 21, 2018
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2017-0915
Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution.... Read more
- EPSS Score: %1.40
- Published: Mar. 21, 2018
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2017-0914
Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a GitLab instance's database.... Read more
Affected Products : gitlab- EPSS Score: %0.12
- Published: Mar. 21, 2018
- Modified: Nov. 21, 2024