Lucene search
K

21284 matches found

Wolfi
Wolfi
added 2026/05/30 1:48 a.m.18 views

CVE-2026-8716 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

4.3CVSS5.8AI score0.00027EPSS
Exploits0
Wolfi
Wolfi
added 2026/05/30 1:48 a.m.13 views

CVE-2026-1402 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

6.5CVSS5.8AI score0.00064EPSS
Exploits0
Wolfi
Wolfi
added 2026/05/30 1:48 a.m.12 views

GHSA-5P55-QCQV-882W vulnerabilities

Vulnerabilities for packages: gitlab-runner...

5.8AI score
Exploits0
Wolfi
Wolfi
added 2026/05/30 1:48 a.m.12 views

CVE-2026-6713 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

5.3CVSS5.8AI score0.00019EPSS
Exploits0
Wolfi
Wolfi
added 2026/05/30 1:48 a.m.10 views

GHSA-WGQ9-QP63-G8J3 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

5.8AI score
Exploits0
Chainguard
Chainguard
added 2026/05/30 1:18 a.m.10 views

CVE-2026-8716 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce...

4.3CVSS5.4AI score0.00027EPSS
Exploits0
Chainguard
Chainguard
added 2026/05/30 1:18 a.m.7 views

GHSA-WGQ9-QP63-G8J3 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce...

5.4AI score
Exploits0
Chainguard
Chainguard
added 2026/05/30 1:18 a.m.7 views

GHSA-R38R-HVG8-XQHF vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce...

5.4AI score
Exploits0
Chainguard
Chainguard
added 2026/05/30 1:18 a.m.8 views

GHSA-5P55-QCQV-882W vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce...

5.4AI score
Exploits0
Chainguard
Chainguard
added 2026/05/30 1:18 a.m.8 views

CVE-2026-6713 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce...

5.3CVSS5.4AI score0.00019EPSS
Exploits0
Chainguard
Chainguard
added 2026/05/30 1:17 a.m.8 views

CVE-2026-1402 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce...

6.5CVSS5.4AI score0.00064EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/05/30 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-5296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that when foundational...

4.3CVSS5.8AI score0.00012EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/30 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-4868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that, under certain...

8.2CVSS5.8AI score0.00012EPSS
Exploits0References2
NVD
NVD
added 2026/05/29 11:16 a.m.11 views

CVE-2026-10078

A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...

2.7CVSS0.00033EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/29 9:30 a.m.7 views

CVE-2026-10078

A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...

2.7CVSS5.7AI score0.00033EPSS
Exploits0References3
CVE
CVE
added 2026/05/29 9:30 a.m.12 views

CVE-2026-10078

The CVE-2026-10078 entry concerns Quay config-tool’s GitLab OAuth validator. The vulnerability causes client_id and client_secret to be sent in plaintext via URL query parameters during POST requests to the GitLab endpoint, enabling potential exposure of credentials in logs (server access logs, r...

2.7CVSS5.7AI score0.00033EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/29 9:30 a.m.8 views

CVE-2026-10078 Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring

A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...

2.7CVSS5.7AI score0.00033EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/29 9:30 a.m.34 views

CVE-2026-10078 Quay/config-tool: quay/config-tool: gitlab oauth client_secret exposed in url querystring

A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...

2.7CVSS0.00033EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/29 9:12 a.m.11 views

CVE-2026-10078

A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...

2.7CVSS5.7AI score0.00033EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/29 12:0 a.m.6 views

Red Hat Quay 安全漏洞

Red Hat Quay is a container image repository platform operated by the American company Red Hat. Red Hat Quay has a security vulnerability; this vulnerability stems from the fact that GitLab’s OAuth verifier transmits sensitive credentials as plain-text parameters in URL queries, which may lead to...

2.7CVSS5.8AI score0.00033EPSS
Exploits0References2
Rows per page
Query Builder