Lucene search
+L

914 matches found

Positive Technologies
Positive Technologies
•added 2022/10/21 12:00 a.m.•8 views

PT-2022-23349 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 10.8 through 15.1.6 GitLab CE/EE versions 15.2 through 15.2.4 GitLab CE/EE versions 15.3 through 15.3.2 Description: A potential DOS issue was discovered in GitLab CE/EE. It is related to improper data handling on branch...

7.5CVSS7.1AI score0.00942EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/21 12:00 a.m.•2 views

CVE-2022-3639: Uncontrolled Resource Consumption

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Improper data handling on branch creation could have been used to trigger high CPU usage...

7.5CVSS7.2AI score0.00942EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/10/21 12:00 a.m.•50 views

CVE-2022-3639

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Improper data handling on branch creation could have been used to trigger high CPU usage...

4.3CVSS7.4AI score0.00942EPSS
SaveExploits0References2
NVD
NVD
•added 2022/10/17 4:15 p.m.•36 views

CVE-2022-2908

A potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 before 15.2.3, all versions starting from 15.3 before 15.3.1 allowed an attacker to trigger high CPU usage via a special crafted input added in the Commit messag...

4.3CVSS0.00993EPSS
SaveExploits0References3
Prion
Prion
•added 2022/10/17 4:15 p.m.•28 views

Design/Logic Flaw

A potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 before 15.2.3, all versions starting from 15.3 before 15.3.1 allowed an attacker to trigger high CPU usage via a special crafted input added in the Commit messag...

4CVSS4.7AI score0.00993EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/10/17 4:15 p.m.•7 views

UBUNTU-CVE-2022-2931

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Malformed content added to the issue description could have been used to trigger high CPU usage...

7.5CVSS7.1AI score0.0121EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2022/10/17 4:15 p.m.•26 views

CVE-2022-2931

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Malformed content added to the issue description could have been used to trigger high CPU usage...

7.5CVSS7AI score0.0121EPSS
SaveExploits0References2
Prion
Prion
•added 2022/10/17 4:15 p.m.•24 views

Design/Logic Flaw

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Malformed content added to the issue description could have been used to trigger high CPU usage...

5CVSS7.4AI score0.0121EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/10/17 12:00 a.m.•46 views

CVE-2022-3283

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 While cloning an issue with special crafted content added to the description could have been used ...

7.5CVSS7.4AI score0.01445EPSS
SaveExploits1References3
CVE
CVE
•added 2022/10/17 12:00 a.m.•102 views

CVE-2022-2931

CVE-2022-2931 affects GitLab CE/EE. A vulnerability in the handling of malformed content in issue descriptions could trigger high CPU usage, enabling a potential DoS. Affected versions include all before 15.1.6, all 15.2 up to before 15.2.4, and all 15.3 up to before 15.3.2. The provided document...

7.5CVSS7.2AI score0.0121EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2022/10/17 12:00 a.m.•121 views

CVE-2022-2908

GitLab CVE-2022-2908 affects GitLab CE/EE: DoS via crafted input in the Commit message field causing high CPU. Affected: GitLab versions starting from 10.7 up to 15.1.5, 15.2 up to 15.2.3, and 15.3 up to 15.3.1. Patches exist in 15.1.5, 15.2.3, and 15.3.1 releases; upgrade to these fixed builds w...

4.3CVSS4.5AI score0.00993EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/17 12:00 a.m.•3 views

CVE-2022-3283: Uncontrolled Resource Consumption

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 While cloning an issue with special crafted content added to the description could have been used ...

7.5CVSS7.1AI score0.01445EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/10/17 12:00 a.m.•10 views

CVE-2022-2931

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Malformed content added to the issue description could have been used to trigger high CPU usage...

7.5CVSS6.8AI score0.0121EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/10/17 12:00 a.m.•11 views

CVE-2022-3283

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 While cloning an issue with special crafted content added to the description could have been used ...

7.5CVSS6.8AI score0.01445EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2022/10/17 12:00 a.m.•99 views

CVE-2022-2908

Removed by vendor...

4.3CVSS5.8AI score0.00993EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/17 12:00 a.m.•2 views

CVE-2022-2931: Uncontrolled Resource Consumption

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. Malformed content added to the issue description could have been used to trigger high CPU usage...

7.5CVSS6.3AI score0.0121EPSS
SaveExploits0References2
OSV
OSV
•added 2022/10/17 12:00 a.m.•27 views

CVE-2022-2908

A potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 before 15.2.3, all versions starting from 15.3 before 15.3.1 allowed an attacker to trigger high CPU usage via a special crafted input added in the Commit messag...

4.3CVSS4.4AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2022/10/17 12:00 a.m.•12 views

CVE-2022-2908

A potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 before 15.2.3, all versions starting from 15.3 before 15.3.1 allowed an attacker to trigger high CPU usage via a special crafted input added in the Commit messag...

4.3CVSS4.4AI score0.00993EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/10/17 12:00 a.m.•18 views

GitLab 资源管理错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE/EE versions prior to 15.2.5, 15.3...

7.5CVSS7.3AI score0.01445EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2022/10/17 12:00 a.m.•76 views

CVE-2022-3283

Removed by vendor...

7.5CVSS7.1AI score0.01445EPSS
SaveExploits1
Rows per page
Query Builder