|
196251
|
8.8 |
HIGH
Network
|
webkitgtk
|
webkitgtk
|
An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in remote code execution.…
|
CWE-416
Use After Free
|
CVE-2021-21806
|
2024-11-21 14:49 |
2021-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196252
|
9.8 |
CRITICAL
Network
|
accusoft
|
imagegear
|
A stack-based buffer overflow vulnerability exists in the PDF process_fontname functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to code execution. An attacker can…
|
CWE-787
Out-of-bounds Write
|
CVE-2021-21821
|
2024-11-21 14:49 |
2021-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196253
|
9.8 |
CRITICAL
Network
|
accusoft
|
imagegear
|
An integer overflow vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to a stack-based buffer overflow. An …
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2021-21807
|
2024-11-21 14:49 |
2021-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196254
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details
|
CWE-862
Missing Authorization
|
CVE-2021-22233
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196255
|
5.4 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted markdown
|
CWE-79
Cross-site Scripting
|
CVE-2021-22225
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196256
|
6.5 |
MEDIUM
Network
|
gitlab
|
gitlab
|
A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call mutations as the victim
|
CWE-352
Origin Validation Error
|
CVE-2021-22224
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196257
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a specially crafted username.
|
NVD-CWE-noinfo
|
CVE-2021-22231
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196258
|
7.2 |
HIGH
Network
|
gitlab
|
gitlab
|
Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability affects GitLab CE/EE 9.3 and later through 13.11.6, 13.12.6, and 14.0.2.
|
NVD-CWE-noinfo
|
CVE-2021-22230
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196259
|
6.1 |
MEDIUM
Network
|
gitlab
|
gitlab
|
A reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2 allowed an attacker to send a malicious link to a victim and trigger actions on their behalf if they …
|
CWE-79
Cross-site Scripting
|
CVE-2021-22227
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196260
|
6.5 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. Improper access contr…
|
NVD-CWE-Other
|
CVE-2021-22228
|
2024-11-21 14:49 |
2021-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|