Lucene search
K

8 matches found

Positive Technologies
Positive Technologies
added 2024/02/07 12:0 a.m.2 views

PT-2024-14946 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.11 through 16.6.6 GitLab CE/EE versions 16.7 through 16.7.4 GitLab CE/EE versions 16.8 through 16.8.1 Description: A denial of service issue was identified in GitLab CE/EE, which allows an attacker to increase the...

7.5CVSS6.6AI score0.02834EPSS
Exploits0References15
NVD
NVD
added 2024/01/26 2:15 a.m.19 views

CVE-2023-5612

An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. It was possible to read the user email address via tags feed although the visibility in the user profile has been disabled...

5.3CVSS4.9AI score0.25617EPSS
Exploits3References3
OSV
OSV
added 2024/01/26 1:2 a.m.23 views

CVE-2024-0456 Direct Request ('Forced Browsing') in GitLab

An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that they created within the project...

4.3CVSS4.7AI score0.00159EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/01/26 12:0 a.m.2 views

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab CE/EE version 12.7 up to and includin...

6.5CVSS6.9AI score0.0057EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/01/26 12:0 a.m.2 views

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab versions prior to 16.6.6, 16.7 throug...

5.3CVSS6.8AI score0.25617EPSS
Exploits3References5
Tenable Nessus
Tenable Nessus
added 2024/01/25 12:0 a.m.26 views

GitLab 13.7 < 16.6.6 / 16.7 < 16.7.4 / 16.8 < 16.8.1 (CVE-2023-5933)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. Improper input sanitization of user name allows arbitrary...

6.4CVSS6.2AI score0.10356EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/01/25 12:0 a.m.2 views

PT-2024-1483 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.7 through 16.6.5 GitLab CE/EE versions 16.7 through 16.7.3 GitLab CE/EE versions 16.8 through 16.8.0 Description: An issue has been discovered in GitLab CE/EE due to improper input sanitization of the user name,...

8.5CVSS7.5AI score0.10356EPSS
Exploits0References14
Apple
Apple
added 2023/12/19 12:0 a.m.29 views

Apple Security Update: iOS 16.7.4 and iPadOS 16.7.4

Apple recommends to install security update iOS 16.7.4 and iPadOS 16.7.4 on devices iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation...

6.6AI score
Exploits0References1Affected Software2
Rows per page
Query Builder