community events project community events vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

SQL injection vulnerability in WordPress Community Events plugin prior to 1.4.

Community Events Project Community Events

1 EDB exploit

NA

Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin <= 1.4.8 versions.

Community Events Project Community Events

4.3

CVSSv2

The Community Events WordPress plugin prior to 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the conte...

Community Events Project Community Events

NA

An issue exists in GitLab Community and Enterprise Edition prior to 11.1.7, 11.2.x prior to 11.2.4, and 11.3.x prior to 11.3.1. Remote attackers could obtain sensitive information about issues, comments, and project titles via events API insecure direct object reference.

Gitlab Gitlab Gitlab Gitlab 11.3.0

4

CVSSv2

An issue exists in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x prior to 11.8.9, 11.9.x prior to 11.9.10, and 11.10.x prior to 11.10.2. It allows Information Disclosure. Non-member users who subscribe to notifications of an internal project with issue and repo...

Gitlab Gitlab

6.8

CVSSv2

crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions before 0.7.4 and 0.8.0, the result of the race condition is that one or more tasks in the worker queue can be popped twice instead of other tasks that are forgo...

Crossbeam Project Crossbeam Fedoraproject Fedora 34

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook