CVE-2025-10004

CVE-2025-10004 affects GitLab CE/EE versions 13.12 through 18.2.8, 18.3 through 18.3.4, and 18.4 through 18.4.2. The issue allows crafted GraphQL queries to request large repository blobs, potentially making a GitLab instance unresponsive or severely degraded. A remediation has been released; Git...

CVE-2025-10004 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could make the GitLab instance unresponsive or severely degraded by sending crafted GraphQL queries requesting large repository blobs...

EUVD-2011-1443

Malware in sbrugna...

EUVD-2021-22795

Malware in sbrugna...

EUVD-2014-0061

Malware in sbrugna...

EUVD-2019-6543

Malware in sbrugna...

EUVD-2020-5532

Malware in sbrugna...

CVE-2025-34206

The CVE-2025-34206 entry concerns Vasion Print (PrinterLogic) Virtual Appliance Host and Application. It describes overly-permissive permissions on host files mounted into multiple Docker containers under /var/www/efs_storage, enabling access to secrets.env, GPG-encrypted blobs, MySQL client keys...

CVE-2025-34206 Vasion Print (formerly PrinterLogic) Insecure Shared Storage Permissions

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments mount host configuration and secret material under /var/www/efsstorage into many Docker containers with overly-permissive filesystem permissions. Files such as secrets.env, GPG-encrypted blobs in...

The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.

...

Linux Distros Unpatched Vulnerability : CVE-2020-13271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through...

PT-2026-33168

Name of the Vulnerable Software and Affected Versions AMD Platform Configuration Blob APCB SMM driver affected versions not specified Description Incorrect use of boot service in the AMD Platform Configuration Blob APCB SMM driver could allow a privileged attacker with local access Ring 0 to...

Malicious code in test-mlw2-husky-blobs (npm)

The package test-mlw2-husky-blobs was found to contain malicious code...

Malicious code in @malware-test-blobs-teams-brood-thugs/test-mlw3-blobs-teams-brood-thugs (npm)

The package @malware-test-blobs-teams-brood-thugs/test-mlw3-blobs-teams-brood-thugs was found to contain malicious code...

MAL-2025-35545 Malicious code in test-mlw2-husky-blobs (npm)

The package test-mlw2-husky-blobs was found to contain malicious code...

CVE-2020-13271

A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1...

CVE-2019-15575

A command injection exists in GitLab CE/EE...

PT-2024-41481 · Ооо 'Ред Софт' · Ред База Данных

Уязвимость функции evlReadFile в модуле SysFunction.cpp системы управления базами данных «Ред База Данных» связана с механизмом доступа к файловым блобам, настроенным в конфигурационном файле directories.conf. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить...

OPENSUSE-SU-2024:12757-1 aws-nitro-enclaves-binaryblobs-upstream-1.2.2~git0.4ccc639-1.1 on GA media

These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.2.2git0.4ccc639-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11931-1 aws-nitro-enclaves-binaryblobs-upstream-1.2.0~git2.841ef94-1.1 on GA media

These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.2.0git2.841ef94-1.1 package on the GA media of openSUSE Tumbleweed...