Linux Distros Unpatched Vulnerability : CVE-2017-0918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution. CVE-2017-091...

GHSA-RWWP-3RV3-J6Q6 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2024-10219 vulnerabilities

Vulnerabilities for packages: gitlab-runner...

CVE-2024-10219 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...

GHSA-RWWP-3RV3-J6Q6 vulnerabilities

Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...

Linux Distros Unpatched Vulnerability : CVE-2021-3139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopylocateudev in tcmurcmdhandler.c lacks a check for transport-layer restrictions, allowing...

Linux Distros Unpatched Vulnerability : CVE-2020-13350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runner...

Linux Distros Unpatched Vulnerability : CVE-2022-4201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local...

Malicious code in test_oversight_runner (npm)

The package testoversightrunner was found to contain malicious code...

MAL-2025-16199 Malicious code in browser-sync-task-runner (npm)

The package browser-sync-task-runner was found to contain malicious code...

Malicious code in browser-sync-task-runner (npm)

The package browser-sync-task-runner was found to contain malicious code...

Malicious code in casper-runner (npm)

The package casper-runner was found to contain malicious code...

Malicious code in buildkite-runner (npm)

The package buildkite-runner was found to contain malicious code...

MAL-2025-16330 Malicious code in buildkite-runner (npm)

The package buildkite-runner was found to contain malicious code...

MAL-2025-16627 Malicious code in casper-runner (npm)

The package casper-runner was found to contain malicious code...

MAL-2025-36708 Malicious code in test_oversight_runner (npm)

The package testoversightrunner was found to contain malicious code...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: container-object-storage-interface-fips, step-issuer, nri-mssql, nova-fips, cluster-api-aws-controller, flux-image-reflector-controller-fips, gops, supercronic, sbomqs, vault-env, rancher-fleet-fips, opensearch-k8s-operator, prometheus-mysqld-exporter, etcd,...

BIT-APISIX-2025-27446 Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges

Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIXjava-plugin-runner. Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIXjava-plugin-runner: from 0.2.0 through 0.5.0. Users are...

Apache Apisix elevation of privilege vulnerability (CNVD-2025-20873)

Apache Apisix is a cloud-native microservices API gateway service of the U.S. Apache Apache Foundation. The software is based on OpenResty and etcd to realize , with dynamic routing and plug-in hot loading , suitable for microservice system under the API management . An elevation of privilege...

Malicious code in ec2-github-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c7ca0d5642601c1f68fbd89dabf82a89747d310ed0196ea76061981bed79fd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...