WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product enterprise server✕
Overview 1,213 matches · 13 in Waratek scope · 3 protected · 44 exploited · 28 CISA KEV · 114 public PoC · 60 EPSS ≥ 0.5
1,213matches 13in Waratek scope1.1% 3protected0.2% 44exploited3.6% 28CISA KEV2.3% 114public PoC9.4% 60EPSS ≥ 0.54.9%
Protected by Waratek 3 0.2% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 10 0.8% Outside Waratek scope 42 3.5% Not applicable 1,158 95.5% Withdrawn CVE 0 0.0%
Critical 81 6.7% High 525 43.3% Medium 538 44.4% Low 69 5.7% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 3 0.2% partly blocked 0 0.0% not blocked 1,210 99.8% not established 0 0.0% unrecorded 0 0.0%
Exploited 44 3.6% Working exploit published 70 5.8% Proof of concept only 12 1.0% Forecast only 13 1.1% No public exploit 1,074 88.5%
split by peak 135 / year
Not applicable: 1,158Outside Waratek scope: 42No exploit published: 10Protected by Waratek: 3 Low: 69Medium: 538High: 525Critical: 81 not blocked: 1,210blocked by ARMR today: 3 No public exploit: 1,074Forecast only: 13Proof of concept only: 12Working exploit published: 70Exploited: 44
19961 Not applicable1 High1 not blocked1 Working exploit published1 19970 19983 Not applicable3 High1 Medium2 not blocked3 Working exploit published1 No public exploit2 19997 Not applicable7 High1 Medium6 not blocked7 Working exploit published4 No public exploit3 20006 Not applicable6 High3 Medium3 not blocked6 Working exploit published3 No public exploit3 20016 Not applicable6 High1 Medium5 not blocked6 Working exploit published1 No public exploit5 20024 Not applicable4 High2 Medium2 not blocked4 Working exploit published1 No public exploit3 20030 20042 Outside Waratek scope1 Not applicable1 High2 not blocked2 No public exploit2 200510 Not applicable10 High5 Medium3 Low2 not blocked10 Working exploit published1 No public exploit9 200616 Not applicable16 High6 Medium10 not blocked16 No public exploit16 20077 Not applicable7 High3 Medium3 Low1 not blocked7 Working exploit published1 No public exploit6 200817 Not applicable17 High10 Medium6 Low1 not blocked17 No public exploit17 200936 No exploit published1 Not applicable35 High16 Medium16 Low4 not blocked36 Exploited2 Working exploit published6 No public exploit28 201066 Outside Waratek scope1 Not applicable65 Critical2 High22 Medium25 Low17 not blocked66 Exploited5 Working exploit published10 No public exploit51 201124 Outside Waratek scope1 Not applicable23 Critical1 High8 Medium13 Low2 not blocked24 Exploited3 Working exploit published4 No public exploit17 201294 No exploit published3 Outside Waratek scope3 Not applicable88 Critical2 High58 Medium30 Low4 not blocked94 Exploited2 Working exploit published4 Proof of concept only1 No public exploit87 201366 Protected by Waratek1 Outside Waratek scope1 Not applicable64 Critical7 High31 Medium25 Low3 blocked by ARMR today1 not blocked65 Exploited3 Working exploit published5 No public exploit58 2014129 Outside Waratek scope8 Not applicable121 Critical11 High35 Medium67 Low16 not blocked129 Exploited6 Working exploit published5 Proof of concept only1 Forecast only2 No public exploit115 201586 No exploit published4 Outside Waratek scope21 Not applicable61 Critical3 High31 Medium40 Low12 not blocked86 Exploited5 Working exploit published1 Proof of concept only1 Forecast only1 No public exploit78 201685 Protected by Waratek2 No exploit published2 Outside Waratek scope1 Not applicable80 Critical12 High25 Medium47 Low1 blocked by ARMR today2 not blocked83 Exploited5 Working exploit published12 Forecast only2 No public exploit66 201764 Not applicable64 Critical8 High32 Medium23 Low1 not blocked64 Exploited1 Working exploit published2 No public exploit61 201868 Outside Waratek scope2 Not applicable66 Critical3 High35 Medium28 Low2 not blocked68 Exploited1 Working exploit published1 Forecast only2 No public exploit64 201952 Outside Waratek scope1 Not applicable51 Critical1 High23 Medium28 not blocked52 Exploited1 No public exploit51 2020135 Outside Waratek scope1 Not applicable134 Critical6 High50 Medium77 Low2 not blocked135 Exploited2 Working exploit published3 Proof of concept only3 Forecast only1 No public exploit126 202141 Not applicable41 Critical1 High31 Medium9 not blocked41 Working exploit published1 Proof of concept only1 No public exploit39 202239 Outside Waratek scope1 Not applicable38 Critical1 High24 Medium14 not blocked39 Exploited2 Proof of concept only1 Forecast only3 No public exploit33 202336 Not applicable36 Critical3 High15 Medium17 Low1 not blocked36 Exploited3 Forecast only1 No public exploit32 202443 Not applicable43 Critical11 High14 Medium18 not blocked43 Working exploit published2 Proof of concept only1 Forecast only1 No public exploit39 202528 Not applicable28 Critical2 High21 Medium5 not blocked28 Exploited2 Working exploit published1 Proof of concept only2 No public exploit23 202642 Not applicable42 Critical7 High19 Medium16 not blocked42 Exploited1 Proof of concept only1 No public exploit40
19961999200220052008201120142017202020232026
1,213 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 13 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2024-2443 Critical 2024-03-20 Not applicable No public exploit A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring GeoJSON settings. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.13 and was fixed in versions 3.8.17, 3.9.12, 3.10.9, 3.11.7, and 3.12.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2024-1482 High 2024-02-14 Not applicable No public exploit An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to create new branches in public repositories and run arbitrary GitHub Actions workflows with permissions from the GITHUB_TOKEN. To exploit this vulnerability, an attacker would need access to the Enterprise Server. This vulnerability affected all versions of GitHub Enterprise Server after 3.8 and prior to 3.12, and was fixed in versions 3.9.10, 3.10.7, 3.11.5. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2024-1378 Critical 2024-02-13 Not applicable No public exploit A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when configuring SMTP options. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program https://bounty.github.com .
CVE-2024-1374 Critical 2024-02-13 Not applicable No public exploit A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when configuring audit log forwarding. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program https://bounty.github.com .
CVE-2024-1372 Critical 2024-02-13 Not applicable No public exploit A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring SAML settings. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program https://bounty.github.com .
CVE-2024-1369 Critical 2024-02-13 Not applicable No public exploit A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting the username and password for collectd configurations. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program https://bounty.github.com .
CVE-2024-1359 Critical 2024-02-13 Not applicable No public exploit A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting up an HTTP proxy. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program https://bounty.github.com .
CVE-2024-1355 Critical 2024-02-13 Not applicable No public exploit A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the actions-console docker container while setting a service URL. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2024-1354 High 2024-02-13 Not applicable No public exploit A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the `syslog-ng` configuration file. Exploitation of this vulnerability required access to the GitHub Enterprise Server instance and access to the Management Console with the editor role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2024-1084 Medium 2024-02-13 Not applicable No public exploit Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a malicious website that requires user interaction and social engineering to make changes to a user account via CSP bypass with created CSRF tokens. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12  and was fixed in all versions of 3.11.5, 3.10.7, 3.9.10, and 3.8.15. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2024-1082 Medium 2024-02-13 Not applicable No public exploit A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker to gain unauthorized read permission to files by deploying arbitrary symbolic links to a GitHub Pages site with a specially crafted artifact tarball. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.8.15, 3.9.10, 3.10.7, 3.11.5. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2024-0507 High 2024-01-16 Not applicable Forecast only An attacker with access to a Management Console user account with the editor role could escalate privileges through a command injection vulnerability in the Management Console. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.11.3, 3.10.5, 3.9.8, and 3.8.13 This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2024-0200 Critical 2024-01-16 Not applicable Working exploit published An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead to the execution of user-controlled methods and remote code execution. To exploit this bug, an actor would need to be logged into an account on the GHES instance with the organization owner role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.8.13, 3.9.8, 3.10.5, and 3.11.3. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-6847 High 2023-12-21 Not applicable No public exploit An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed a bypass of Private Mode by using a specially crafted API request. To exploit this vulnerability, an attacker would need network access to the Enterprise Server appliance configured in Private Mode. This vulnerability affected all versions of GitHub Enterprise Server since 3.9 and was fixed in version 3.9.7, 3.10.4, and 3.11.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-6804 Medium 2023-12-21 Not applicable No public exploit Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
CVE-2023-6803 Medium 2023-12-21 Not applicable No public exploit A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
CVE-2023-6802 High 2023-12-21 Not applicable No public exploit An insertion of sensitive information into the log file in the audit log in GitHub Enterprise Server was identified that could allow an attacker to gain access to the management console. To exploit this, an attacker would need access to the log files for the GitHub Enterprise Server appliance, a backup archive created with GitHub Enterprise Server Backup Utilities, or a service which received streamed logs. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1. 
CVE-2023-6746 High 2023-12-21 Not applicable No public exploit An insertion of sensitive information into log file vulnerability was identified in the log files for a GitHub Enterprise Server back-end service that could permit an `adversary in the middle attack` when combined with other phishing techniques. To exploit this, an attacker would need access to the log files for the GitHub Enterprise Server appliance, a backup archive created with GitHub Enterprise Server Backup Utilities, or a service which received streamed logs. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1. 
CVE-2023-6690 Low 2023-12-21 Not applicable No public exploit A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository permissions during the transfer. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
CVE-2023-51380 Medium 2023-12-21 Not applicable No public exploit An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be read with an improperly scoped token. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1.
CVE-2023-51379 Medium 2023-12-21 Not applicable No public exploit An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an improperly scoped token. This vulnerability did not allow unauthorized access to any repository content as it also required contents:write and issues:read permissions. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.17.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1. 
CVE-2023-46649 High 2023-12-21 Not applicable No public exploit A race condition in GitHub Enterprise Server was identified that could allow an attacker administrator access. To exploit this, an organization needs to be converted from a user. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1. 
CVE-2023-46648 High 2023-12-21 Not applicable No public exploit An insufficient entropy vulnerability was identified in GitHub Enterprise Server (GHES) that allowed an attacker to brute force a user invitation to the GHES Management Console. To exploit this vulnerability, an attacker would need knowledge that a user invitation was pending. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-46647 High 2023-12-21 Not applicable No public exploit Improper privilege management in all versions of GitHub Enterprise Server allows users with authorized access to the management console with an editor role to escalate their privileges by making requests to the endpoint used for bootstrapping the instance. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed in version 3.8.12, 3.9.6, 3.10.3, and 3.11.0.
CVE-2023-46646 Medium 2023-12-21 Not applicable No public exploit Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get a check run" API endpoint. This vulnerability did not allow unauthorized access to any repository content besides the name. This vulnerability affected GitHub Enterprise Server version 3.7.0 and above and was fixed in version 3.17.19, 3.8.12, 3.9.7 3.10.4, and 3.11.0.
CVE-2023-46645 Medium 2023-12-21 Not applicable No public exploit A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.19, 3.8.12, 3.9.7, 3.10.4, and 3.11.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-38177 Medium 2023-11-14 Not applicable No public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-23766 Medium 2023-09-22 Not applicable No public exploit An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To do so, an attacker would need write access to the repository. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.6.17, 3.7.15, 3.8.8, 3.9.3, and 3.10.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-4501 Critical 2023-09-12 Not applicable No public exploit User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise Test Server), versions 7.0 patch updates 19 and 20, 8.0 patch updates 8 and 9, and 9.0 patch update 1, when LDAP-based authentication is used with certain configurations. When the vulnerability is active, authentication succeeds with any valid username, regardless of whether the password is correct; it may also succeed with an invalid username (and any password). This allows an attacker with access to the product to impersonate any user. Mitigations: The issue is corrected in the upcoming patch update for each affected product. Product overlays and workaround instructions are available through OpenText Support. The vulnerable configurations are believed to be uncommon. Administrators can test for the vulnerability in their installations by attempting to sign on to a Visual COBOL or Enterprise Server component such as ESCWA using a valid username and incorrect password.
CVE-2023-23763 Medium 2023-09-01 Not applicable No public exploit An authorization/sensitive information disclosure vulnerability was identified in GitHub Enterprise Server that allowed a fork to retain read access to an upstream repository after its visibility was changed to private. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.10.0 and was fixed in versions 3.9.4, 3.8.9, 3.7.16 and 3.6.18. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-23765 Medium 2023-08-30 Not applicable No public exploit An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To exploit this vulnerability, an attacker would need write access to the repository. This vulnerability was reported via the GitHub Bug Bounty Program https://bounty.github.com/ .
CVE-2023-23764 High 2023-07-27 Not applicable No public exploit An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff within the GitHub pull request UI. To do so, an attacker would need write access to the repository. This vulnerability affected GitHub Enterprise Server versions 3.7.0 and above and was fixed in versions 3.7.9, 3.8.2, and 3.9.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-32265 High 2023-07-20 Not applicable No public exploit A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) component used in Enterprise Server, Enterprise Test Server, Enterprise Developer, Visual COBOL, and COBOL Server. An attacker would need to be authenticated into ESCWA to attempt to exploit this vulnerability. As described in the hardening guide in the product documentation, other mitigations including restricting network access to ESCWA and restricting users’ permissions in the Micro Focus Directory Server also reduce the exposure to this issue. Given the right conditions this vulnerability could be exploited to expose a service account password. The account corresponding to the exposed credentials usually has limited privileges and, in many cases would only be useful for extracting details of other user accounts and similar information.
CVE-2023-24955 High 2023-05-09 Not applicable Exploited Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-24954 Medium 2023-05-09 Not applicable No public exploit Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2023-24950 Medium 2023-05-09 Not applicable Forecast only Microsoft SharePoint Server Spoofing Vulnerability
CVE-2023-29552 High 2023-04-25 Not applicable Exploited The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
CVE-2023-23762 Medium 2023-04-07 Not applicable No public exploit An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. To do so, an attacker would need write access to the repository and be able to correctly guess the target branch before it’s created by the code maintainer. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-23761 High 2023-04-07 Not applicable No public exploit An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret gists by authenticating through an SSH certificate authority. To do so, a user had to know the secret gist's URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.9 and was fixed in versions 3.4.18, 3.5.15, 3.6.11, 3.7.8, and 3.8.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-23760 High 2023-03-08 Not applicable No public exploit A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to versions 3.8 and was fixed in versions 3.7.7, 3.6.10, 3.5.14, and 3.4.17. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-46257 Medium 2023-03-07 Not applicable No public exploit An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to be added to a GitHub Actions runner group via the API by a user who did not have access to those repositories, resulting in the repository names being shown in the UI. To exploit this vulnerability, an attacker would need access to the GHES instance, permissions to modify GitHub Actions runner groups, and successfully guess the obfuscated ID of private repositories. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.7 and was fixed in versions 3.3.17, 3.4.12, 3.5.9, 3.6.5. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-22381 High 2023-03-02 Not applicable No public exploit A code injection vulnerability was identified in GitHub Enterprise Server that allowed setting arbitrary environment variables from a single environment variable value in GitHub Actions when using a Windows based runner. To exploit this vulnerability, an attacker would need existing permission to control the value of environment variables for use with GitHub Actions. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.8.0 and was fixed in versions 3.4.15, 3.5.12, 3.6.8, 3.7.5. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2023-23005 Medium 2023-03-01 Not applicable No public exploit In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is disputed by third parties because there are no realistic cases in which a user can cause the alloc_memory_type error case to be reached.
CVE-2023-22380 Medium 2023-02-16 Not applicable No public exploit A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.6. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-45153 High 2023-02-15 Not applicable No public exploit An Incorrect Default Permissions vulnerability in saphanabootstrap-formula of SUSE Linux Enterprise Module for SAP Applications 15-SP1, SUSE Linux Enterprise Server for SAP 12-SP5; openSUSE Leap 15.4 allows local attackers to escalate to root by manipulating the sudo configuration that is created. This issue affects: SUSE Linux Enterprise Module for SAP Applications 15-SP1 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. SUSE Linux Enterprise Server for SAP 12-SP5 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e. openSUSE Leap 15.4 saphanabootstrap-formula versions prior to 0.13.1+git.1667812208.4db963e.
CVE-2023-21717 High 2023-02-14 Not applicable No public exploit Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2023-21716 Critical 2023-02-14 Not applicable Exploited Microsoft Word Remote Code Execution Vulnerability
CVE-2022-23739 Critical 2023-01-17 Not applicable No public exploit An incorrect authorization vulnerability was identified in GitHub Enterprise Server, allowing for escalation of privileges in GraphQL API requests from GitHub Apps. This vulnerability allowed an app installed on an organization to gain access to and modify most organization-level resources that are not tied to a repository regardless of granted permissions, such as users and organization-wide projects. Resources associated with repositories were not impacted, such as repository file content, repository-specific projects, issues, or pull requests. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.7.1 and was fixed in versions 3.3.16, 3.4.11, 3.5.8, 3.6.4, 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-46258 Medium 2023-01-09 Not applicable No public exploit An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository-scoped token with read/write access to modify Action Workflow files without a Workflow scope. The Create or Update file contents API should enforce workflow scope. This vulnerability affected all versions of GitHub Enterprise Server prior to version 3.7 and was fixed in versions 3.3.16, 3.4.11, 3.5.8, and 3.6.4. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-46256 High 2022-12-14 Not applicable No public exploit A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the instance. This vulnerability was fixed in versions 3.3.17, 3.4.12, 3.5.9, 3.6.5 and 3.7.2. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-46255 Critical 2022-12-14 Not applicable No public exploit An improper limitation of a pathname to a restricted directory vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. A check was added within Pages to ensure the working directory is clean before unpacking new content to prevent an arbitrary file overwrite bug. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-23741 High 2022-12-14 Not applicable No public exploit An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server token to escalate to full admin/owner privileges. An attacker would require an account with admin access to install a malicious GitHub App. This vulnerability was fixed in versions 3.3.17, 3.4.12, 3.5.9, and 3.6.5. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-44693 High 2022-12-13 Not applicable No public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-23737 Medium 2022-12-01 Not applicable No public exploit An improper privilege management vulnerability was identified in GitHub Enterprise Server that allowed users with improper privileges to create or delete pages via the API. To exploit this vulnerability, an attacker would need to be added to an organization's repo with write permissions. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.7 and was fixed in versions 3.2.20, 3.3.15, 3.4.10, 3.5.7, and 3.6.3. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-39346 Medium 2022-11-25 Not applicable No public exploit Nextcloud server is an open source personal cloud server. Affected versions of nextcloud server did not properly limit user display names which could allow a malicious users to overload the backing database and cause a denial of service. It is recommended that the Nextcloud Server is upgraded to 22.2.10, 23.0.7 or 24.0.3. There are no known workarounds for this issue.
CVE-2022-23740 High 2022-11-23 Not applicable No public exploit CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. To exploit this vulnerability, an attacker would need permission to create and build GitHub Pages using GitHub Actions. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-41122 Medium 2022-11-09 Not applicable No public exploit Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-41103 Medium 2022-11-09 Not applicable No public exploit Microsoft Word Information Disclosure Vulnerability
CVE-2022-41062 High 2022-11-09 Not applicable No public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-41061 High 2022-11-09 Not applicable No public exploit Microsoft Word Remote Code Execution Vulnerability
CVE-2022-41060 Medium 2022-11-09 Not applicable No public exploit Microsoft Word Information Disclosure Vulnerability
CVE-2022-23738 Medium 2022-11-01 Not applicable No public exploit An improper cache key vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to access private repository files through a public repository. To exploit this, an actor would need to already be authorized on the GitHub Enterprise Server instance, be able to create a public repository, and have a site administrator visit a specially crafted URL. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.6 and was fixed in versions 3.2.20, 3.3.15, 3.4.10, 3.5.7, 3.6.3. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-39364 Medium 2022-10-27 Not applicable Proof of concept only Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server prior to versions 23.0.9 and 24.0.5 and Nextcloud Enterprise Server prior to versions 22.2.10.5, 23.0.9, and 24.0.5 an attacker reading `nextcloud.log` may gain knowledge of credentials to connect to a SharePoint service. Nextcloud Server versions 23.0.9 and 24.0.5 and Nextcloud Enterprise Server versions 22.2.10.5, 23.0.9, and 24.0.5 contain a patch for this issue. As a workaround, set `zend.exception_ignore_args = On` as an option in `php.ini`.
CVE-2022-39330 Medium 2022-10-27 Not applicable No public exploit Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a logged-in attacker slowing down the system by generating a lot of database/cpu load. Nextcloud Server versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server versions 22.2.10, 23.0.10, and 24.0.6 contain patches for this issue. As a workaround, disable the Circles app.
CVE-2022-39329 Medium 2022-10-27 Not applicable No public exploit Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 23.0.9 and 24.0.5 are vulnerable to exposure of information that cannot be controlled by administrators without direct database access. Versions 23.0.9 and 24.0.5 contains patches for this issue. No known workarounds are available.
CVE-2022-23734 High 2022-10-19 Not applicable No public exploit A deserialization of untrusted data vulnerability was identified in GitHub Enterprise Server that could potentially lead to remote code execution on the SVNBridge. To exploit this vulnerability, an attacker would need to gain access via a server-side request forgery (SSRF) that would let an attacker control the data being deserialized. This vulnerability affected all versions of GitHub Enterprise Server prior to v3.6 and was fixed in versions 3.5.3, 3.4.6, 3.3.11, and 3.2.16. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-38053 High 2022-10-11 Not applicable Forecast only Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-31252 Medium 2022-10-06 Not applicable No public exploit A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225.
CVE-2015-1931 Medium 2022-09-29 Outside Waratek scope No public exploit IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.
CVE-2022-39211 Medium 2022-09-16 Not applicable No public exploit Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcloud Server is upgraded to 23.0.8 or 24.0.4. It is recommended that the Nextcloud Enterprise Server is upgraded to 22.2.10.4, 23.0.8 or 24.0.4. There are no known workarounds for this issue.
CVE-2022-36074 High 2022-09-15 Not applicable No public exploit Nextcloud server is an open source personal cloud product. Affected versions of this package are vulnerable to Information Exposure which fails to strip the Authorization header on HTTP downgrade. This can lead to account access exposure and compromise. It is recommended that the Nextcloud Server is upgraded to 23.0.7 or 24.0.3. It is recommended that the Nextcloud Enterprise Server is upgraded to 22.2.11, 23.0.7 or 24.0.3. There are no known workarounds for this issue.
CVE-2022-38009 High 2022-09-13 Not applicable No public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-38008 High 2022-09-13 Not applicable No public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-37961 High 2022-09-13 Not applicable Forecast only Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-35823 High 2022-09-13 Not applicable Forecast only Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2022-23733 Medium 2022-08-02 Not applicable No public exploit A stored XSS vulnerability was identified in GitHub Enterprise Server that allowed the injection of arbitrary attributes. This injection was blocked by Github's Content Security Policy (CSP). This vulnerability affected all versions of GitHub Enterprise Server prior to 3.6 and was fixed in versions 3.3.11, 3.4.6 and 3.5.3. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-29108 High 2022-05-10 Not applicable No public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-27239 High 2022-04-27 Not applicable No public exploit In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
CVE-2022-23732 High 2022-04-05 Not applicable No public exploit A path traversal vulnerability was identified in GitHub Enterprise Server management console that allowed the bypass of CSRF protections. This could potentially lead to privilege escalation. To exploit this vulnerability, an attacker would need to target a user that was actively logged into the management console. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.5 and was fixed in versions 3.1.19, 3.2.11, 3.3.6, 3.4.1. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2021-45082 High 2022-02-19 Not applicable No public exploit An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)
CVE-2021-41599 High 2022-02-18 Not applicable No public exploit A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.3 and was fixed in versions 3.0.21, 3.1.13, 3.2.5. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-22005 High 2022-02-09 Not applicable Exploited Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2022-21987 High 2022-02-09 Not applicable No public exploit Microsoft SharePoint Server Spoofing Vulnerability
CVE-2022-21968 Medium 2022-02-09 Not applicable No public exploit Microsoft SharePoint Server Security Feature Bypass Vulnerability
CVE-2021-4034 High 2022-01-28 Not applicable Exploited A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
CVE-2021-41598 High 2022-01-25 Not applicable No public exploit A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed more permissions to be granted during a GitHub App's user-authorization web flow than was displayed to the user during approval. To exploit this vulnerability, an attacker would need to create a GitHub App on the instance and have a user authorize the application through the web authentication flow. All permissions being granted would properly be shown during the first authorization, but if the user later updated the set of repositories the app was installed on after the GitHub App had configured additional user-level permissions, those additional permissions would not be displayed, leading to more permissions being granted than the user potentially intended. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.3 and was fixed in versions 3.2.5, 3.1.13, 3.0.21. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2022-21842 High 2022-01-11 Not applicable No public exploit Microsoft Word Remote Code Execution Vulnerability
CVE-2022-21840 High 2022-01-11 Not applicable No public exploit Microsoft Office Remote Code Execution Vulnerability
CVE-2021-43876 High 2021-12-29 Not applicable No public exploit Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2021-43242 High 2021-12-15 Not applicable No public exploit Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-42320 High 2021-12-15 Not applicable No public exploit Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-42309 High 2021-12-15 Not applicable No public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-42294 High 2021-12-15 Not applicable No public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2002-20001 High 2021-11-11 Not applicable Proof of concept only The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.
CVE-2021-40442 High 2021-11-10 Not applicable No public exploit Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-22870 Medium 2021-11-10 Not applicable No public exploit A path traversal vulnerability was identified in GitHub Pages builds on GitHub Enterprise Server that could allow an attacker to read system files. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.3 and was fixed in versions 3.0.19, 3.1.11, and 3.2.3. This vulnerability was reported via the GitHub Bug Bounty program.
CVE-2021-41344 High 2021-10-13 Not applicable No public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-40487 High 2021-10-13 Not applicable No public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-40486 High 2021-10-13 Not applicable No public exploit Microsoft Word Remote Code Execution Vulnerability
CVE-2021-40485 High 2021-10-13 Not applicable No public exploit Microsoft Excel Remote Code Execution Vulnerability
‹ prev page 2 of 13 next ›