Lucene search
+L

4107 matches found

OSV
OSV
•added 2026/02/02 7:52 p.m.•13 views

CVE-2026-24007 Tuleap is missing CSRF protection in the Overview inconsistent items

Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview inconsistent items. An attacker could use this vulnerability to trick victims into repairing inconsistent items creating artifact links from the release. This...

4.6CVSS5.5AI score
SaveExploits0References6
Chainguard
Chainguard
•added 2026/02/02 1:17 p.m.•13 views

GHSA-R4MG-4433-C7G3 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

5.2AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/02/02 1:17 p.m.•11 views

GHSA-QJXF-MC72-WJR2 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

5.2AI score
SaveExploits0
OSV
OSV
•added 2026/02/02 10:16 a.m.•16 views

UBUNTU-CVE-2026-1751

A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could have allowed unauthorized edits to merge request approval rules under certain conditions...

3.1CVSS5.8AI score0.00233EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/02/02 9:04 a.m.•23 views

EUVD-2026-5136

A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could have allowed unauthorized edits to merge request approval rules under certain conditions...

3.1CVSS5.3AI score0.00233EPSS
SaveExploits1References2
OSV
OSV
•added 2026/02/02 9:04 a.m.•18 views

CVE-2026-1751 Missing Authorization in GitLab

A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could have allowed unauthorized edits to merge request approval rules under certain conditions...

3.1CVSS5.3AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/02/02 9:04 a.m.•17 views

CVE-2026-1751

Removed by vendor...

3.1CVSS5.9AI score0.00233EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/02/02 12:00 a.m.•23 views

PT-2026-5715

Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 17.0.99.1768924735 Tuleap Enterprise Edition versions 17.2-5, 17.1-6, and 17.0-9 Description Tuleap lacks CSRF protection in the Overview inconsistent items feature. An attacker could exploit this to...

4.6CVSS5.5AI score0.00161EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/02 12:00 a.m.•4 views

CVE-2026-24007: Cross-Site Request Forgery (CSRF)

Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview inconsistent items. An attacker could use this vulnerability to trick victims into repairing inconsistent items creating artifact links from the release. This...

4.6CVSS5.9AI score0.00161EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/02 12:00 a.m.•20 views

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of the American company GitLab. GitLab Enterprise Edition is a content management system. GitLab Community Edition is a community-based version of GitLab. Versions of GitLab CE/EE from 16.8 to 18.5.0 contained security...

3.1CVSS5.8AI score0.00233EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/01/31 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-0723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowe...

7.4CVSS7.3AI score0.01057EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/01/31 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-13928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowe...

7.5CVSS7.3AI score0.0071EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/01/30 12:00 a.m.•17 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE, related to deficiencies in the authentication process, allows a violator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS6.2AI score0.0071EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/01/30 12:00 a.m.•15 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE arises from the lack of checks for the return value. This allows attackers to increase their privileges.

The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE is related to the lack of checking for the return value. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

7.4CVSS6.2AI score0.01057EPSS
SaveExploits0References2Affected Software1
Chainguard
Chainguard
•added 2026/01/28 7:17 p.m.•17 views

GHSA-P9CP-QQ4C-2WR5 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/01/28 7:17 p.m.•14 views

GHSA-CPX5-2Q84-PRC5 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/01/28 7:17 p.m.•17 views

GHSA-PV96-F897-XCCH vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

5.8AI score
SaveExploits0
Chainguard
Chainguard
•added 2026/01/28 7:17 p.m.•18 views

CVE-2025-13978 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips...

4.3CVSS5.7AI score0.00302EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/01/28 7:17 p.m.•20 views

CVE-2025-8405 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips...

7.7CVSS7.6AI score0.00515EPSS
SaveExploits0
Chainguard
Chainguard
•added 2026/01/28 7:17 p.m.•24 views

CVE-2025-12571 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-rails-ce, gitlab-rails-ce-fips...

7.5CVSS7.4AI score0.00507EPSS
SaveExploits0
Rows per page
Query Builder