Lucene search
+L

20 matches found

osv_bit
osv_bit
•added 2026/02/16 4:31 p.m.•20 views

BIT-GITLAB-2026-1282 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to inject malicious content into project labels titles...

5.4CVSS5.7AI score0.00193EPSS
SaveExploits0References4
CVE
CVE
•added 2026/02/11 11:04 a.m.•86 views

CVE-2026-1282

GitLab CVE-2026-1282 affects GitLab CE/EE: versions before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 are vulnerable. An authenticated user could inject malicious content into project labels titles. Remediation is provided via patch releases: 18.6.6, 18.7.4, and 18.8.4. The CVSS data indi...

5.4CVSS5.7AI score0.00193EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/02/11 11:04 a.m.•46 views

CVE-2026-1282 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to inject malicious content into project labels titles...

3.5CVSS0.00193EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/02/11 11:04 a.m.•33 views

CVE-2026-1282

Removed by vendor...

5.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•20 views

PT-2026-7514

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.6 through 18.6.5 GitLab CE/EE versions 18.7 through 18.7.3 GitLab CE/EE versions 18.8 through 18.8.3 Description An authenticated user could inject malicious content into project label titles. This issue affects GitLab...

5.4CVSS5.8AI score0.00193EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•4 views

CVE-2026-1282: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to inject malicious content into project labels titles...

5.4CVSS5.7AI score0.00193EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 10:18 a.m.•20 views

CVE-2019-18450

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...

4.3CVSS5.4AI score0.00759EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2019-8200

Malware in sbrugna...

4.3CVSS5.3AI score0.00759EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 4:07 a.m.•16 views

SUSE CVE-2019-18450

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...

4.3CVSS4.8AI score0.00759EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2019/11/26 5:15 p.m.•28 views

CVE-2019-18450

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...

4.3CVSS6.5AI score0.00759EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2019/11/26 5:15 p.m.•19 views

UBUNTU-CVE-2019-18450

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...

4.3CVSS5.8AI score0.00759EPSS
SaveExploits0References3
Prion
Prion
•added 2019/11/26 5:15 p.m.•20 views

Design/Logic Flaw

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...

4CVSS4.7AI score0.00759EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2019/11/26 5:15 p.m.•30 views

CVE-2019-18450

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...

4.3CVSS5.9AI score0.00759EPSS
SaveExploits0References2
Mend
Mend
•added 2019/11/26 4:44 p.m.•7 views

CVE-2019-18450

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...

5.3CVSS0.00759EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2019/11/26 4:44 p.m.•61 views

CVE-2019-18450

Removed by vendor...

5.8AI score
SaveExploits0
Cvelist
Cvelist
•added 2019/11/26 4:44 p.m.•44 views

CVE-2019-18450

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...

5.4AI score0.00759EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/26 12:00 a.m.•8 views

CVE-2019-18450: Incorrect Permission Assignment for Critical Resource

An issue was discovered in GitLab Community and Enterprise Edition before 12.4 in the Project labels feature. It has Insecure Permissions...

4.3CVSS5.5AI score0.00759EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/11/26 12:00 a.m.•7 views

PT-2019-15407

Name of the Vulnerable Software and Affected Versions GitLab Community and Enterprise Edition versions prior to 12.4 Description An issue was discovered in the Project labels feature, which has Insecure Permissions. Recommendations For versions prior to 12.4, update to version 12.4 or later to...

4.3CVSS0.00759EPSS
SaveExploits0References8
CNVD
CNVD
•added 2019/11/07 12:00 a.m.•16 views

GitLab Information Disclosure Vulnerability (CNVD-2019-42894)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community and...

4.3CVSS6.5AI score0.00759EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/10/10 12:00 a.m.•21 views

Kanboard Design Vulnerability (CNVD-2017-30948)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.47. An...

4.3CVSS4.8AI score0.01191EPSS
SaveExploits0References1
Rows per page
Query Builder