5249 matches found
CVE-2024-2878
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible for an attacker to cause a denial of service by crafting unusual search terms for branch names...
CVE-2024-2878 Allocation of Resources Without Limits or Throttling in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible for an attacker to cause a denial of service by crafting unusual search terms for branch names...
PT-2025-5695 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.7 through 16.9.7 GitLab CE/EE versions 16.10 through 16.10.5 GitLab CE/EE versions 16.11 through 16.11.2 Description: An issue has been discovered in GitLab CE/EE that could allow an attacker to cause a denial of...
CVE-2024-2878: Allocation of Resources Without Limits or Throttling
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible for an attacker to cause a denial of service by crafting unusual search terms for branch names...
Use After Free
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the V8 engine. Remediation A fix was pushed into the master branch but not yet...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write through the component grayfindcell. An attacker can cause a crash of the application by sending specially crafted inputs that trigger a segmentation violation. Remediation A fix was pushed into the master branch but...
PT-2025-13225
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the RDMA/mlx5 component. The issue occurs when deregistering memory regions of type DM device memory, which do not have ...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to the plutovgblend component. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Issue - PoC Credit: keepinggg...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the grayrecordcell component. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Issue - PoC Credit: keepinggg...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write through the compositionsourceover component. An attacker can cause a crash or execute arbitrary code by exploiting the improper handling of memory. Remediation A fix was pushed into the master branch but not yet...
openSUSE 15 Security Update : gh (openSUSE-SU-2025:0021-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025:0021-1 advisory. - Update to version 2.65.0: Bump cli/go-gh for indirect security vulnerability Panic mustParseTrackingRef if format is incorrect Move trackingRef into pr...
CVE-2024-10929
In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 revisions before r1p0, Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history...
CVE-2024-10929 Spectre-BSE
In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 revisions before r1p0, Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history...
CVE-2024-10929
The Spectre-Branch Status Eviction (BSE) vulnerability affects Arm Cortex-A72 (revisions prior to r1p0), Cortex-A73 , and Cortex-A75 processors. The flaw resides in a microarchitectural mechanism that allows an adversary to gain a weak form of control over a victim's branch history despite existi...
CVE-2024-10929 Spectre-BSE
In certain circumstances, an issue in Arm Cortex-A57, Cortex-A72 revisions before r1p0, Cortex-A73 and Cortex-A75 may allow an adversary to gain a weak form of control over the victim's branch history...
PT-2025-1613
Name of the Vulnerable Software and Affected Versions Arm Cortex-A72 versions prior to r1p0 Arm Cortex-A73 affected versions not specified Arm Cortex-A75 affected versions not specified Description The issue may allow an adversary to gain a weak form of control over the victim's branch history...
ARM Cortex-A72、Cortex-A73和Cortex-A75 安全漏洞
The ARM Cortex-A72 and others are products of ARM UK.The ARM Cortex-A72 is an efficient, high-performance processor that implements the Armv8-A architecture.The ARM Cortex-A73 is an efficient, high-performance processor.The ARM Cortex-A75 is a high-performance application CPU that delivers high...
PT-2025-3194
Name of the Vulnerable Software and Affected Versions Zulip Server versions 7.0 through 9.3 Description The issue concerns an information disclosure attack where an unauthenticated user can determine if an email address is in use by a user on a Zulip server hosting multiple organizations. There a...
Detection of Error Condition Without Action
Overview Affected versions of this package are vulnerable to Detection of Error Condition Without Action when files are being copied from a client to a server. This allows a server to leak the contents of an arbitrary file from the client's machine. Remediation A fix was pushed into the master...