41 matches found
CVE-2024-32002
CVE-2024-32002 gitlab-shell 취약점 cve 2024-32002를 위한 리버스 셸 생성기 이것은 아직 테스트 단계에 있으며 완료되면 업데이트하겠습니다...
CLEANSTART-2026-EL80803 Security fix for CVE-2024-10041 applied in: gitlab-shell 14.45.5-r0, gitlab-shell-fips 14.45.5-r0
CVE-2024-10041 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-UX00872 Security fixes in gitlab-shell-fips 14.45.5-r0
Package gitlab-shell-fips version 14.45.5-r0 fixes 3 vulnerabilities: CVE-2024-10041, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...
CLEANSTART-2026-AX77726 vulnerability was found in PAM
Multiple security vulnerabilities affect the gitlab-shell-fips package. A vulnerability was found in PAM. See references for individual vulnerability details...
CVE-2021-22254
Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...
EUVD-2021-9323
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-22177
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via...
CVE-2021-22177
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...
GHSA-V6V8-XJ6M-XWQH vulnerabilities
Vulnerabilities for packages: terragrunt, actions-runner-controller, argo-events, kubernetes-event-exporter, crossplane-provider-azure-authorization, flux, guac, ksops, step-ca, scorecard, policy-controller, zarf, glab, flux-image-automation-controller, rabbitmq-messaging-topology-operator, vexct...
CVE-2024-6104 vulnerabilities
Vulnerabilities for packages: terragrunt, actions-runner-controller, argo-events, kubernetes-event-exporter, crossplane-provider-azure-authorization, flux, guac, ksops, step-ca, scorecard, policy-controller, zarf, glab, flux-image-automation-controller, rabbitmq-messaging-topology-operator, vexct...
BIT-GITLAB-2021-22177
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: kube-oidc-proxy, vertical-pod-autoscaler, flux-notification-controller, bank-vaults, metrics-server-fips, prometheus-mongodb-exporter, weaviate, zot, prometheus-pushgateway-fips, stakater-reloader, up, wireguard-go, kots, kubewatch, minio,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: newrelic-infrastructure-agent, atlantis, metacontroller, kubeflow, ollama, aactl, gobuster, cue, pulumi, skaffold, grpcurl, kubevela, mc, nats, terraform-provider-aws, secrets-store-csi-driver-provider-gcp, slsa-verifier, kubeflow-katib, cortex, spark-operator, helm,...
UBUNTU-CVE-2021-22254
Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...
CVE-2021-22254
Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...
GitLab 安全漏洞
GitLab is a self-hosted, Git version control system project repository application developed in Ruby on Rails by GitLab, Inc. The application can be used to access a project's file content, commit history, bug list, etc. A security vulnerability exists in Gitlab, which stems from the product's la...
CVE-2021-22254: Improper Encoding or Escaping of Output
Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...
CVE-2021-22177
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...
CVE-2021-22177
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...
CVE-2021-22177
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...