GitLab Community Edition和GitLab Enterprise Edition 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Community Edition and GitLab Enterprise...

GitLab 15.0 < 17.6.4 / 17.7 < 17.7.2 / 17.8 < 17.8.0 (CVE-2025-0290)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 prior to 17.5.5, from 17.6 prior to 17.6.3, and from 17.7 prior to 17.7.1. Under certain conditions, processing o...

AZL-55942 CVE-2024-11218 affecting package podman 4.1.1-26

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

DEBIAN-CVE-2024-11218

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

UBUNTU-CVE-2024-11218

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

Buildah 安全漏洞

Buildah is a Buildah open source tool that supports building OCI container images. A security vulnerability exists in Buildah that stems from building a malicious Containerfile using --jobs=2 and a contention condition, leading to container escape and host file enumeration...

CVE-2025-0218

CVE-2025-0218 affects pgAgent: when batch jobs run, a script is created in a temporary directory. In pgAgent versions before 4.2.3, the directory name is generated using an insufficiently seeded RNG, allowing a local attacker to pre-create the directory and disrupt job execution (DoS). Affected: ...

CVE-2025-0218

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-creat...

CVE-2025-0218

When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-creat...

pgAgent 安全漏洞

pgAgent is an open source job scheduler for PostgreSQL from the pgAdmin Project. A security vulnerability exists in pgAgent versions prior to 4.2.3 that stems from insufficient initialization of the random number generator used to generate directory names, which allows a local attacker to...

PT-2025-3813 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.0 through 17.5.5 GitLab CE/EE versions 17.6 through 17.6.3 GitLab CE/EE versions 17.7 through 17.7.1 Description: An issue has been discovered in GitLab CE/EE where under certain conditions, processing of CI artifacts...

CVE-2024-12132: Authorization Bypass Through User-Controlled Key

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated...

PT-2025-49782

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the drm/sched subsystem related to a potential deadlock within the drm sched entity kill jobs cb function. The issue arises when handling dependencies...

Malicious code in kubernetes-jobs-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f29c07041ce33c528ad150db3916598a7a3f185ca196c18df969a2dc1ad3d4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12078 Malicious code in kubernetes-jobs-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f29c07041ce33c528ad150db3916598a7a3f185ca196c18df969a2dc1ad3d4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-28689

Missing Authorization vulnerability in JoomSky JS Job Manager js-jobs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Job Manager: from n/a through = 2.0.0...

CVE-2024-40717

CVE-2024-40717 affects Veeam Backup & Replication (12.x prior to 12.3.0.310). A low-privileged user with certain roles can update an existing job and configure pre/post scripts (potentially on a network share) that run with elevated privileges, enabling remote code execution by scheduling near-im...

CVE-2024-52459

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chameleoni Chameleoni Jobs chameleon-jobs allows Reflected XSS.This issue affects Chameleoni Jobs: from n/a through = 2.5.4...

CVE-2024-52459

CVE-2024-52459 is a Reflected Cross-Site Scripting (XSS) in WordPress plugin Chameleoni Jobs (versions up to 2.5.4). The issue arises from improper input neutralization during web page generation, enabling potential script execution in victims’ browsers if an attacker can induce the vulnerable pl...

CVE-2024-52459 WordPress Chameleoni Jobs plugin <= 2.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Chameleoni.Com Chameleoni Jobs chameleon-jobs allows Reflected XSS.This issue affects Chameleoni Jobs: from n/a through 2.5.4...