Aggregator

CVE-2025-5996 | GitLab Community Edition/Enterprise Edition up to 17.10.6/17.11.2/18.0.0 allocation of resources (Issue 476671 / EUVD-2025-18170)

Vuldb Updates
2 months 1 week ago
A vulnerability, which was classified as problematic, was found in GitLab Community Edition and Enterprise Edition up to 17.10.6/17.11.2/18.0.0. Affected is an unknown function. The manipulation leads to allocation of resources. This vulnerability is traded as CVE-2025-5996. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-5195 | GitLab Community Edition/Enterprise Edition up to 17.10.7/17.11.3/18.0.1 authorization (Issue 534960 / EUVD-2025-18172)

Vuldb Updates
2 months 1 week ago
A vulnerability has been found in GitLab Community Edition and Enterprise Edition up to 17.10.7/17.11.3/18.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to authorization bypass. This vulnerability is known as CVE-2025-5195. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-0673 | GitLab Community Edition/Enterprise Edition up to 17.10.7/17.11.3/18.0.1 infinite loop (Issue 514732 / EUVD-2025-18171)

Vuldb Updates
2 months 1 week ago
A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 17.10.7/17.11.3/18.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to infinite loop. This vulnerability is handled as CVE-2025-0673. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-2254 | GitLab Community Edition/Enterprise Edition up to 17.10.7/17.11.3/18.0.1 cross site scripting (Issue 524636 / EUVD-2025-18168)

Vuldb Updates
2 months 1 week ago
A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 17.10.7/17.11.3/18.0.1. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-2254. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Assured Compliance Through Effective NHI Management

Security Boulevard
2 months 1 week ago

Is Assured Compliance Your Ultimate Goal? Consider Effective NHI Management Ever wondered how Non-Human Identities (NHIs) and Secrets Security Management could significantly enhance your cybersecurity strategy and lead to assured compliance? With the ever-increasing threats, it is essential for every organization, regardless of its sector, to prioritize robust strategies that can provide end-to-end protection. By […]

The post Assured Compliance Through Effective NHI Management appeared first on Entro.

The post Assured Compliance Through Effective NHI Management appeared first on Security Boulevard.

Alison Mack

Freedom to Choose Your NHI Security Approach

Security Boulevard
2 months 1 week ago

Does Non-Human Identity Management Hold the Key to Effective Cybersecurity? The management of Non-Human Identities (NHIs) and secrets has emerged as a pivotal component. For organizations aiming to bolster their cybersecurity strategy, the integration of NHI management can yield substantial benefits. But what is NHI management, and how can it mitigate risks associated with security […]

The post Freedom to Choose Your NHI Security Approach appeared first on Entro.

The post Freedom to Choose Your NHI Security Approach appeared first on Security Boulevard.

Alison Mack

CVE-2025-6012 | Auto Attachments Plugin up to 1.8.5 on WordPress Setting cross site scripting (EUVD-2025-18246)

VulDB Recent Entries
2 months 1 week ago
A vulnerability, which was classified as problematic, was found in Auto Attachments Plugin up to 1.8.5 on WordPress. Affected is an unknown function of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-6012. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-5923 | Game Review Block Plugin up to 4.8.1 on WordPress className cross site scripting (EUVD-2025-18255)

VulDB Recent Entries
2 months 1 week ago
A vulnerability, which was classified as problematic, has been found in Game Review Block Plugin up to 4.8.1 on WordPress. This issue affects some unknown processing. The manipulation of the argument className leads to cross site scripting. The identification of this vulnerability is CVE-2025-5923. The attack may be initiated remotely. There is no exploit available.
vuldb.com

CVE-2025-49579 | StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 cross site scripting (GHSA-g3cp-pq72-hjpv / EUVD-2025-18204)

VulDB Recent Entries
2 months 1 week ago
A vulnerability classified as problematic was found in StarCitizenTools mediawiki-skins-Citizen up to 3.3.0. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-49579. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-49578 | StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 Language::userDate cross site scripting (GHSA-2v3v-3whp-953h / EUVD-2025-18205)

VulDB Recent Entries
2 months 1 week ago
A vulnerability was found in StarCitizenTools mediawiki-skins-Citizen up to 3.3.0. It has been classified as problematic. Affected is the function Language::userDate. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-49578. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-4418 | AVEVA PI Connector for CygNet up to 1.6.14 integrity check (icsa-25-162-09 / EUVD-2025-18217)

VulDB Recent Entries
2 months 1 week ago
A vulnerability was found in AVEVA PI Connector for CygNet up to 1.6.14. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper validation of integrity check value. This vulnerability is known as CVE-2025-4418. An attack has to be approached locally. There is no exploit available.
vuldb.com

CVE-2025-49576 | StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 cross site scripting (GHSA-86xf-2mgp-gv3g / EUVD-2025-18206)

VulDB Recent Entries
2 months 1 week ago
A vulnerability was found in StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-49576. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-49577 | StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 cross site scripting (GHSA-jwr7-992g-68mh / EUVD-2025-18207)

VulDB Recent Entries
2 months 1 week ago
A vulnerability has been found in StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-49577. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-49575 | StarCitizenTools mediawiki-skins-Citizen up to 3.3.0 cross site scripting (GHSA-4c2h-67qq-vm87 / EUVD-2025-18208)

VulDB Recent Entries
2 months 1 week ago
A vulnerability, which was classified as problematic, was found in StarCitizenTools mediawiki-skins-Citizen up to 3.3.0. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-49575. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad