3504 matches found
CVE-2023-3399
Removed by vendor...
CVE-2023-5825
GitLab CE/EE CVE-2023-5825 affects 16.2–16.3.5, 16.4.0–16.4.1, and 16.5.0 before 16.5.1. A low-privileged attacker can point a CI/CD Component to an incorrect path, causing memory exhaustion via an infinite loop and Denial of Service. Impact: availability only. Remediation: upgrade to GitLab 16.3...
CVE-2023-5825 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A low-privileged attacker can point a CI/CD Component to an incorrect path and cause the server to...
CVE-2023-5825
Removed by vendor...
CVE-2023-5825 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A low-privileged attacker can point a CI/CD Component to an incorrect path and cause the server to...
CVE-2023-5825
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A low-privileged attacker can point a CI/CD Component to an incorrect path and cause the server to...
Rocky Linux 8 : container-tools:rhel8 (RLSA-2021:4154)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4154 advisory. - A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is...
CVE-2023-3399: Insertion of Sensitive Information Into Sent Data
An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom...
PT-2023-32357 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.2 through 16.3.5 GitLab CE/EE versions 16.4 through 16.4.1 GitLab CE/EE versions 16.5 through 16.5.0 Description: A low-privileged attacker can point a CI/CD Component to an incorrect path, causing the server to exhau...
CVE-2023-5825: Loop with Unreachable Exit Condition
An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A low-privileged attacker can point a CI/CD Component to an incorrect path and cause the server to...
CVE-2023-46176
Affected software : IBM MQ Appliance 9.3 CD. Vulnerability : local elevation of privileges due to improper validation of security keys. Root cause : security keys validation flaw allows a local attacker to gain elevated privileges. Impact : attacker could obtain higher privileges on the system. E...
GHSA-Q78C-GWQW-JCMC vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...
CVE-2023-3955 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines...
CVE-2023-3955 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver, aws-efs-csi-driver-fips...
Security Bulletin: IBM MQ is affected by a denial-of-service vulnerability
Summary IBM MQ has addressed an error within the IBM MQ clustering logic, in which a specially crafted message could cause a denial-of-service. Vulnerability Details CVEID: CVE-2023-45177 DESCRIPTION: IBM MQ is vulnerable to a denial-of-service attack due to an error within the IBM MQ clustering...
Security Bulletin: IBM MQ Appliance could allow a local attacker to gain elevated privileges on the system
Summary IBM MQ Appliance has resolved an elevated privileges vulnerability. Vulnerability Details CVEID:CVE-2023-46176 DESCRIPTION: IBM MQ Appliance could allow a local attacker to gain elevated privileges on the system, caused by improper validation of security keys. CVSS Base score: 6.7 CVSS...
Gitlab -- Vulnerabilities
Gitlab reports: Disclosure of CI/CD variables using Custom project templates GitLab omnibus DoS crash via OOM with CI Catalogs Parsing gitlab-ci.yml with large string via timeout input leads to Denial of Service DoS - Blocking FIFO files in Tar archives Titles exposed by service-desk template...
The vulnerability of the Jenkins CloudBees CD Plugin, related to errors in processing symbolic links, allows a hacker to delete arbitrary files.
The vulnerability of the Jenkins CloudBees CD Plugin is related to errors in processing symbolic links. Exploiting this vulnerability could allow a malicious actor to delete any files they desire...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner-fips, slsa-verifier, volume-modifier-for-k8s-fips, terraform-provider-sendgrid, kubernetes-csi-livenessprobe, src, kube-oidc-proxy, kubeflow, prometheus-blackbox-exporter, buildkitd, kubeflow-fips, kubevela, k3d,...