13092 matches found
CVE-2025-1042 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-pages, gitlab-ee-fips, gitlab-pages-fips, gitlab-runner-fips, gitlab-cng, gitlab-rails-ee, gitlab-cng-fips, gitlab-ee...
CVE-2025-0376 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An XSS vulnerability exists in GitLab CE/EE affecting all versions from 13.3 prior to 17.6.5, 17.7 prior to 17.7.4 and 17.8 prior to 17.8.2 that allows an attacker to execute unauthorized actions via a change page...
CVE-2025-1042 Files or Directories Accessible to External Parties in GitLab
An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to view repositories in an unauthorized way...
Cross-site Scripting (XSS)
serialize-javascript is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization due to the failure to properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject and execute malicious code when deserializ...
BELL-CVE-2025-25186
Bulletin has no description...
CGA-Q4QV-4RRG-QCH7
Bulletin has no description...
CGA-M3H4-R4GV-2X42
Bulletin has no description...
CGA-3GQG-3QWP-HV84
Bulletin has no description...
CGA-2G5C-3CP4-872W
Bulletin has no description...
CVE-2024-48170
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via a crafted payload injected into the name in the profile.php...
Withdrawn Advisory: Command injection in Ray
Withdrawn Advisory This advisory is a duplicate of GHSA-6wgj-66m2-xxp2 / CVE-2023-48022. Original Description An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-57000 vulnerabilities
Vulnerabilities for packages: kserve...
CGA-M5F6-J323-RQCV
Bulletin has no description...
GHSA-469F-WF4F-3JJV Magento Improper Access Control vulnerability
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain elevated...
GHSA-M4RG-MPP2-97PX Magento Stored Cross-Site Scripting (XSS) Vulnerability
Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed...
CGA-9FWM-WMWP-WH5W
Bulletin has no description...
CGA-7W5P-69P3-FCWM
Bulletin has no description...
CVE-2025-24414 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed...