rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-19505 
Remedy AR System Server in BMC Remedy 7.1 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user, because userdata.js in the WOI:WorkOrderConsole component allows a username substitution involving a UserData_Init call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T19:00:00.000Z
CVE-2018-19506 
Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T19:00:00.000Z
CVE-2018-19507 
CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T19:00:00.000Z
CVE-2018-19508 
CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-19T19:00:00.000Z
CVE-2018-19509 
wg7.php in Webgalamb 7.0 makes opportunistic calls to htmlspecialchars() instead of using a templating engine with proper contextual encoding. Because it is possible to insert arbitrary strings into the database, any JavaScript could be executed by the administrator, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:49:26.000Z
CVE-2018-19510 
subscriber.php in Webgalamb through 7.0 is vulnerable to SQL injection via the Client-IP HTTP request header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:53:19.000Z
CVE-2018-19511 
wg7.php in Webgalamb 7.0 lacks security measures to prevent CSRF attacks, as demonstrated by wg7.php?options=1 to change the administrator password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:54:27.000Z
CVE-2018-19512 
In Webgalamb through 7.0, a system/ajax.php "wgmfile restore" directory traversal vulnerability could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T21:58:48.000Z
CVE-2018-19513 
In Webgalamb through 7.0, log files are exposed to the internet with predictable files/logs/sql_error_log/YYYY-MM-DD-sql_error_log.log filenames. The log file could contain sensitive client data (email addresses) and also facilitates exploitation of SQL injection errors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T22:02:20.000Z
CVE-2018-19514 
In Webgalamb through 7.0, an arbitrary code execution vulnerability could be exploited remotely without authentication. Exploitation requires authentication bypass to access administrative functions of the site to upload a crafted CSV file with a malicious payload that becomes part of a PHP eval() expression in the subscriber.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T22:06:16.000Z
CVE-2018-19515 
In Webgalamb through 7.0, system/ajax.php functionality is supposed to be available only to the administrator. However, by using one of the bgsend, atment_sddd1xGz, or xls_bgimport query parameters, most of these methods become available to unauthenticated users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T18:32:11.000Z
CVE-2018-19516 
messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-12T20:27:43.000Z
CVE-2018-19517 
An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-24T18:00:00.000Z
CVE-2018-19518 
University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a "-oProxyCommand" argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-25T10:00:00.000Z
CVE-2018-19519 
In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via crafted packet data because of missing initialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-25T20:00:00.000Z
CVE-2018-19520 
An issue was discovered in SDCMS 1.6 with PHP 5.x. app/admin/controller/themecontroller.php uses a check_bad function in an attempt to block certain PHP functions such as eval, but does not prevent use of preg_replace 'e' calls, allowing users to execute arbitrary code by leveraging access to admin template management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-25T20:00:00.000Z
CVE-2018-19522 
DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x800020F4) with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for partial input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-12-18T16:00:00.000Z
CVE-2018-19523 
DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL (0x80002068) with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-01-03T19:00:00.000Z
CVE-2018-19524 
An issue was discovered on Shenzhen Skyworth DT741 Converged Intelligent Terminal (G/EPON+IPTV) SDOTBGN1, DT721-cb SDOTBGN1, and DT741-cb SDOTBGN1 devices. A long password to the Web_passwd function allows remote attackers to cause a denial of service (segmentation fault) or achieve unauthenticated remote code execution because of control of registers S0 through S4 and T4 through T7.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T18:38:49.000Z
CVE-2018-19525 
An issue was discovered on Systrome ISG-600C, ISG-600H, and ISG-800W 1.1-R2.1_TRUNK-20180914.bin devices. There is CSRF via /ui/?g=obj_keywords_add and /ui/?g=obj_keywords_addsave with resultant XSS because of a lack of csrf token validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-03-17T18:43:37.000Z
CVE-2018-19527 
i4 assistant 7.85 allows XSS via a crafted machine name field within iOS settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-29T23:00:00.000Z
CVE-2018-19528 
TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers to cause a denial of service (Tlb Load Exception) via crafted DNS packets to port 53/udp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T02:00:00.000Z
CVE-2018-19530 
HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses XStream unsafely when configured with an xml.codec=httl.spi.codecs.XstreamCodec setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T02:00:00.000Z
CVE-2018-19531 
HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function uses java.beans.XMLEncoder unsafely when configured without an xml.codec= setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T02:00:00.000Z
CVE-2018-19532 
A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T02:00:00.000Z
CVE-2018-19535 
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (application crash due to a heap-based buffer over-read) via a crafted PNG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T00:00:00.000Z
CVE-2018-19537 
TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account. The default password of admin may be used in some cases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T03:00:00.000Z
CVE-2018-19539 
An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T03:00:00.000Z
CVE-2018-19540 
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer overflow of size 1 in the function jas_icctxtdesc_input in libjasper/base/jas_icc.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T03:00:00.000Z
CVE-2018-19541 
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28, 1.900.29, 1.900.30, 1.900.31, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16. There is a heap-based buffer over-read of size 8 in the function jas_image_depalettize in libjasper/base/jas_image.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T03:00:00.000Z
CVE-2018-19542 
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T03:00:00.000Z
CVE-2018-19543 
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T03:00:00.000Z
CVE-2018-19544 
JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19545 
JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19546 
JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payload in the content parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19547 
JTBC(PHP) 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19548 
index.php?r=site%2Flogin in EduSec through 4.2.6 does not restrict sending a series of LoginForm[username] and LoginForm[password] parameters, which might make it easier for remote attackers to obtain access via a brute-force approach.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19549 
Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19550 
Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit survey" operation, which can cause a .php file to be accessible under a admin/temp/surveys/ URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19551 
Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19552 
Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19553 
Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19554 
An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldName parameter in html/js/dotcms/dijit/image/image_tool.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19555 
tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19556 
zb_system/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: the software maintainer disputes that this is a vulnerability
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19557 
An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img/images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19558 
An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19559 
CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the reference_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19560 
BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19561 
sikcms 1.1 has CSRF via admin.php?m=Admin&c=Users&a=userAdd to add an administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19562 
An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code via a "Login Background > Program Upgrade > Compressed Packet Upgrade" action in which a .php file is inside a ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T07:00:00.000Z
CVE-2018-19564 
Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters (_ikcf_client and _ikcf_position and _ikcf_other) have Cross-Site Scripting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T18:00:00.000Z
CVE-2018-19565 
A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T20:00:00.000Z
CVE-2018-19566 
A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code or leak private information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T20:00:00.000Z
CVE-2018-19567 
A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T20:00:00.000Z
CVE-2018-19568 
A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malicious files to crash an application that bundles the dcraw code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-11-26T20:00:00.000Z
CVE-2018-19569 
GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability that allows access to the web-UI as a user using a Personal Access Token of any scope.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:56:27.000Z
CVE-2018-19570 
GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via unrecognized HTML tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:28:42.000Z
CVE-2018-19571 
GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:01:50.000Z
CVE-2018-19572 
GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:32:11.000Z
CVE-2018-19573 
GitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via Mermaid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:01:19.000Z
CVE-2018-19574 
GitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in the OAuth authorization page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:59:40.000Z
CVE-2018-19575 
GitLab CE/EE, versions 10.1 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an insecure direct object reference issue that allows a user to make comments on a locked issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:52:43.000Z
CVE-2018-19576 
GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their own comments on an issue, after the issue was made Confidential.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T15:35:53.000Z
CVE-2018-19577 
Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulnerability that displays to an unauthorized user the title and namespace of a confidential issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T14:59:19.000Z
CVE-2018-19578 
GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:54:19.000Z
CVE-2018-19579 
GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page. This is fixed in 11.5.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:52:38.000Z
CVE-2018-19580 
All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:04:39.000Z
CVE-2018-19581 
GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that allows a Guest user to set the weight of an issue they create.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:48:03.000Z
CVE-2018-19582 
GitLab EE, versions 11.4 before 11.4.8 and 11.5 before 11.5.1, is affected by an insecure direct object reference vulnerability that permits an unauthorized user to publish the draft merge request comments of another user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:45:43.000Z
CVE-2018-19583 
GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:43:45.000Z
CVE-2018-19584 
GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerability that allows authenticated, but unauthorized, users to view members and milestone details of private groups.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T16:50:06.000Z
CVE-2018-19585 
GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-05-17T15:09:53.000Z