CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

22523 matches found

CNNVD•added 2025/03/03 12:00 a.m.•18 views

GitLab Enterprise Edition 跨站脚本漏洞

GitLab Enterprise Edition EE is a content management system from the American company GitLab. A cross-site scripting vulnerability exists in GitLab Enterprise Edition versions prior to 16.6 through 17.7.6, versions prior to 17.8 through 17.8.4, and versions prior to 17.9 through 17.9.1 that...

7.7CVSS8.1AI score0.00487EPSS

SaveExploits0References5

Tenable Nessus•added 2025/03/03 12:00 a.m.•18 views

GitLab 16.6 < 17.7.6 / 17.8 < 17.8.4 / 17.9 < 17.9.1 (CVE-2025-0555)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A Cross Site Scripting XSS vulnerability in GitLab-EE affecting all versions from 16.6 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows an attacker to bypass security controls an...

7.7CVSS8.7AI score0.00487EPSS

SaveExploits0References4

CNNVD•added 2025/03/03 12:00 a.m.•12 views

GitLab Enterprise Edition（EE）和GitLab Community Edition（CE）跨站脚本漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition EE and GitLab Community Edition CE A cross-site scripting...

8.7CVSS7.9AI score0.00486EPSS

SaveExploits0References4

CNNVD•added 2025/03/03 12:00 a.m.•13 views

GitLab 跨站脚本漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A cross-site scripting vulnerability exists in GitLab versions prior to 16.6...

5.4CVSS6AI score0.00341EPSS

SaveExploits0References4

Tenable Nessus•added 2025/02/28 12:00 a.m.•8 views

FreeBSD : Gitlab -- Vulnerabilities (8fb9101e-f58a-11ef-b4e4-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8fb9101e-f58a-11ef-b4e4-2cf05da270f3 advisory. Gitlab reports: XSS in k8s proxy endpoint XSS Maven Dependency Proxy HTML injection leads to X...

8.7CVSS8.6AI score0.00487EPSS

SaveExploits1References6

Positive Technologies•added 2025/02/26 12:00 a.m.•7 views

PT-2025-9085 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab-EE versions 16.2 through 17.7.5 GitLab-EE versions 17.8 through 17.8.3 GitLab-EE versions 17.9 through 17.9.0 Description: A vulnerability in GitLab-EE allows a Guest user to read Security policy YAML. Recommendations: For GitLab-EE...

5.5CVSS6.2AI score0.00332EPSS

SaveExploits1References13