rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-15658 
connect-pg-simple before 6.0.1 allows SQL injection if tableName or schemaName is untrusted data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-26T22:55:00.000Z
CVE-2019-15659 
The pie-register plugin before 3.1.2 for WordPress has SQL injection, a different issue than CVE-2018-10969.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:55:07.000Z
CVE-2019-15660 
The wp-members plugin before 3.2.8 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T12:05:06.000Z
CVE-2019-15661 
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to validate parameters, leading to a stack-based buffer overflow, which can lead to code execution or escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T16:53:35.000Z
CVE-2019-15662 
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T17:02:51.000Z
CVE-2019-15663 
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges (issue 1 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T17:10:05.000Z
CVE-2019-15664 
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges (issue 2 of 2).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T17:13:40.000Z
CVE-2019-15665 
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary write primitive that can lead to code execution or escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-03-20T17:18:54.000Z
CVE-2019-15666 
An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unlink, which will cause denial of service, because verify_newpolicy_info in net/xfrm/xfrm_user.c mishandles directory validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T04:49:20.000Z
CVE-2019-15678 
TightVNC code version 1.3.10 contains heap buffer overflow in rfbServerCutText handler, which can potentially result code execution.. This attack appear to be exploitable via network connectivity.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Kaspersky
product: TightVNC
Published: 2019-10-29T16:44:08.000Z
CVE-2019-15679 
TightVNC code version 1.3.10 contains heap buffer overflow in InitialiseRFBConnection function, which can potentially result code execution. This attack appear to be exploitable via network connectivity.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Kaspersky
product: TightVNC
Published: 2019-10-29T16:45:04.000Z
CVE-2019-15680 
TightVNC code version 1.3.10 contains null pointer dereference in HandleZlibBPP function, which results Denial of System (DoS). This attack appear to be exploitable via network connectivity.
Problem types: cwe_id: CWE-476
description: CWE-476: NULL Pointer Dereference
Affected products: vendor: Kaspersky
product: TightVNC
Published: 2019-10-29T16:45:52.000Z
CVE-2019-15681 
LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.
Problem types: cwe_id: CWE-665
description: CWE-665: Improper Initialization
Affected products: vendor: Kaspersky
product: LibVNC
Published: 2019-10-29T16:04:51.000Z
CVE-2019-15682 
RDesktop version 1.8.4 contains multiple out-of-bound access read vulnerabilities in its code, which results in a denial of service (DoS) condition. This attack appear to be exploitable via network connectivity. These issues have been fixed in version 1.8.5
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: RDesktop
product: RDesktop
Published: 2019-10-30T15:42:18.000Z
CVE-2019-15683 
TurboVNC server code contains stack buffer overflow vulnerability in commit prior to cea98166008301e614e0d36776bf9435a536136e. This could possibly result into remote code execution, since stack frame is not protected with stack canary. This attack appear to be exploitable via network connectivity. To exploit this vulnerability authorization on server is required. These issues have been fixed in commit cea98166008301e614e0d36776bf9435a536136e.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Kaspersky
product: TurboVNC
Published: 2019-10-29T17:00:58.000Z
CVE-2019-15684 
Kaspersky Protection extension for web browser Google Chrome prior to 30.112.62.0 was vulnerable to unauthorized access to its features remotely that could lead to removing other installed extensions.
Problem types: description: Bypass
Affected products: vendor: Kaspersky
product: Kaspersky Protection extension for Google Chrome
Published: 2019-11-25T16:01:12.000Z
CVE-2019-15685 
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component allowed an attacker remotely disable such product's security features as private browsing and anti-banner. Bypass.
Problem types: description: Bypass
Affected products: vendor: Kaspersky
product: Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud
Published: 2019-11-26T15:44:19.000Z
CVE-2019-15686 
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component allowed an attacker remotely disable various anti-virus protection features. DoS, Bypass.
Problem types: description: DoS, Bypass
Affected products: vendor: Kaspersky
product: Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud
Published: 2019-11-26T15:44:49.000Z
CVE-2019-15687 
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component was vulnerable to remote disclosure of various information about the user's system (like Windows version and version of the product, host unique ID). Information Disclosure.
Problem types: description: Information Disclosure.
Affected products: vendor: Kaspersky
product: Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud
Published: 2019-11-26T15:45:17.000Z
CVE-2019-15688 
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component did not adequately inform the user about the threat of redirecting to an untrusted site. Bypass.
Problem types: description: Bypass
Affected products: vendor: Kaspersky
product: Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud
Published: 2019-11-26T15:32:17.000Z
CVE-2019-15689 
Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud prior to version 2020 patch E have bug that allows a local user to execute arbitrary code via execution compromised file placed by an attacker with administrator rights. No privilege escalation. Possible whitelisting bypass some of the security products
Problem types: description: Bypass
Affected products: vendor: Kaspersky
product: Kaspersky Secure Connection, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud
Published: 2019-12-02T20:43:52.000Z
CVE-2019-15690 
LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c. An attacker sends cursor shapes with specially crafted dimensions, which can result in remote code execution.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: LibVNC
product: LibVNCServer
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Credits: lang: en
value: Pavel Cheremushkin from Kaspersky
Published: 2025-01-24T17:53:58.866Z
CVE-2019-15691 
TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack unwinding. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
Problem types: cwe_id: CWE-825
description: CWE-825: Expired Pointer Dereference
Affected products: vendor: Kaspersky
product: TigerVNC
Published: 2019-12-26T14:52:46.000Z
CVE-2019-15692 
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be triggered from CopyRectDecoder due to incorrect value checks. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Kaspersky
product: TigerVNC
Published: 2019-12-26T14:55:47.000Z
CVE-2019-15693 
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which occurs in TightDecoder::FilterGradient. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Kaspersky
product: TigerVNC
Published: 2019-12-26T14:57:33.000Z
CVE-2019-15694 
TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs due to the signdness error in processing MemOutStream. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
Problem types: cwe_id: CWE-122
description: CWE-122: Heap-based Buffer Overflow
Affected products: vendor: Kaspersky
product: TigerVNC
Published: 2019-12-26T14:59:01.000Z
CVE-2019-15695 
TigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered from CMsgReader::readSetCursor. This vulnerability occurs due to insufficient sanitization of PixelFormat. Since remote attacker can choose offset from start of the buffer to start writing his values, exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Kaspersky
product: TigerVNC
Published: 2019-12-26T15:24:00.000Z
CVE-2019-15698 
In Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with VariableView permissions could view sensitive values. This is fixed in 2019.7.10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T16:53:48.000Z
CVE-2019-15699 
An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDecodeHSHelloExtensions tries to access a memory region that is not allocated, because the expected length of HSHelloExtensions does not match the real length of the HSHelloExtensions part of the packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-24T19:20:11.000Z
CVE-2019-15700 
public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by crafted "changed value of" text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T17:17:30.000Z
CVE-2019-15701 
components/Modals/HelpModal.jsx in BloodHound 2.2.0 allows remote attackers to execute arbitrary OS commands (by spawning a child process as the current user on the victim's machine) when the search function's autocomplete feature is used. The victim must import data from an Active Directory with a GPO containing JavaScript in its name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T17:25:56.000Z
CVE-2019-15702 
In the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not terminate on all inputs, allowing a denial-of-service, because sys/net/gnrc/transport_layer/tcp/gnrc_tcp_option.c has an infinite loop for an unknown zero-length option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T17:35:20.000Z
CVE-2019-15703 
An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable hardware TRNG token and models not support builtin TRNG seed allows attacker to theoretically recover the long term ECDSA secret in a TLS client with a RSA handshake and mutual ECDSA authentication via the help of flush+reload side channel attacks in FortiGate VM models only.
Problem types: description: Information disclosure
Affected products: vendor: Fortinet
product: Fortinet FortiOS
Published: 2019-10-24T13:53:17.000Z
CVE-2019-15704 
A clear text storage of sensitive information vulnerability in FortiClient for Mac may allow a local attacker to read sensitive information logged in the console window when the user connects to an SSL VPN Gateway.
Problem types: description: Information Disclosure
Affected products: vendor: Fortinet
product: FortiClient for Mac OS
Published: 2019-11-21T14:53:57.000Z
CVE-2019-15705 
An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and below may allow an unauthenticated remote attacker to crash the SSL VPN service by sending a crafted POST request.
Problem types: description: Denial of Service
Affected products: vendor: Fortinet
product: FortiGate
Published: 2019-11-27T20:38:54.000Z
CVE-2019-15706 
An improper neutralization of input during web page generation in the SSL VPN portal of FortiProxy version 2.0.0, version 1.2.9 and below and FortiOS version 6.2.1 and below, version 6.0.8 and below, version 5.6.12 may allow a remote authenticated attacker to perform a stored cross site scripting attack (XSS).
Problem types: cwe_id: CWE-79
description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiProxy
default_status: unaffected
vendor: Fortinet
product: FortiOS
cpes: cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: version: 3.1
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N/E:F/RL:X/RC:X
Published: 2025-03-17T13:05:08.965Z
CVE-2019-15707 
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for.
Problem types: description: Improper Access Control
Affected products: vendor: n/a
product: Fortinet FortiMail
Published: 2020-01-23T17:47:00.000Z
CVE-2019-15708 
A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.0 under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted ifconfig commands.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: Fortinet FortiAP-S/W2
vendor: Fortinet
product: Fortinet FortiAP-U
vendor: Fortinet
product: Fortinet FortiAP
Published: 2020-03-15T22:27:49.000Z
CVE-2019-15709 
An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin console may allow unauthorized administrators to overwrite system files via specially crafted tcpdump commands in the CLI.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: n/a
product: Fortinet FortiAP-S/W2, FortiAP-U
Published: 2020-06-01T18:37:21.000Z
CVE-2019-15710 
An OS command injection vulnerability in FortiExtender 4.1.0 to 4.1.1, 4.0.0 and below under CLI admin console may allow unauthorized administrators to run arbitrary system level commands via specially crafted "execute date" commands.
Problem types: description: Execute unauthorized code or commands
Affected products: vendor: Fortinet
product: FortiExtender
Published: 2019-10-31T19:26:14.000Z
CVE-2019-15711 
A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process.
Problem types: description: Escalation of privilege
Affected products: vendor: Fortinet
product: Fortinet FortiClientLinux
Published: 2020-02-06T15:10:07.000Z
CVE-2019-15712 
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for.
Problem types: description: Improper Access Control
Affected products: vendor: n/a
product: Fortinet FortiMail
Published: 2020-01-23T17:40:40.000Z
CVE-2019-15713 
The my-calendar plugin before 3.1.10 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:46:49.000Z
CVE-2019-15714 
cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:45:43.000Z
CVE-2019-15715 
MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T19:20:28.000Z
CVE-2019-15716 
WTF before 0.19.0 does not set the permissions of config.yml, which might make it easier for local attackers to read passwords or API keys if the permissions were misconfigured or were based on unsafe OS defaults.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T14:13:40.000Z
CVE-2019-15717 
Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-29T16:07:24.000Z
CVE-2019-15718 
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance), calls sd_bus_set_trusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that should be restricted to privileged users, in order to change the system's DNS resolver settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-04T11:04:31.000Z
CVE-2019-15719 
Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails to properly authenticate the message. This results in code execution as an arbitrary user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-09T11:52:17.000Z
CVE-2019-15720 
CloudBerry Backup v6.1.2.34 allows local privilege escalation via a Pre or Post backup action. With only user-level access, a user can modify the backup plan and add a Pre backup action script that executes on behalf of NT AUTHORITY\SYSTEM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T16:29:15.000Z
CVE-2019-15721 
An issue was discovered in GitLab Community and Enterprise Edition 10.8 through 12.2.1. An internal endpoint unintentionally allowed group maintainers to view and edit group runner settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T16:43:56.000Z
CVE-2019-15722 
An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.2.1. Particular mathematical expressions in GitLab Markdown can exhaust client resources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T16:45:27.000Z
CVE-2019-15723 
An issue was discovered in GitLab Community and Enterprise Edition 11.9.x and 11.10.x before 11.10.1. Merge requests created by email could be used to bypass push rules in certain situations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T16:46:46.000Z
CVE-2019-15724 
An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T16:48:53.000Z
CVE-2019-15725 
An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. An IDOR in the epic notes API that could result in disclosure of private milestones, labels, and other information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-16T16:50:18.000Z