Unauthorized Access

GitLab is vulnerable to Unauthorized Access.The vulnerability is caused due to improper access controls. This could allows an attacker to access sensitive information within private projects,configurations, and other confidential data associated with CI/CD jobs...

Information Disclosure

GitLab EE is vulnerable to Information Disclosure.The vulnerability is caused due to improper authorization. It was possible for an unauthorised project or group member to read the CI/CD variables using the custom project templates...

Denial Of Service

gitlab:sid is vulnerable to Denial of Service. The vulnerability due to point a CI/CD Component to an incorrect path and cause the server to exhaust all available memory through an infinite loop. it allows an attacker to cause Denial of Service...

cd-dvd.de Improper Access Control vulnerability OBB-3818105

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-46177

IBM MQ Appliance 9.3 LTS and 9.3 CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to view arbitrary files on the system. IBM X-Force ID: 269536...

CVE-2023-46177

IBM MQ Appliance (9.3 LTS and 9.3 CD) contains a remote path-traversal vulnerability due to how it handles crafted URL requests, allowing an attacker to view arbitrary files on the system. Affected versions include 9.3 LTS and 9.3 CD prior to the fixes. Remediation: apply IBM MQ Appliance 9.3.0.1...

Security Bulletin: IBM MQ Appliance is affected by multiple Java vulnerabilitites (CVE-2023-22081 and CVE-2023-5676)

Summary IBM MQ Appliance has resolved multiple Java vulnerabilities. Vulnerability Details CVEID:CVE-2023-22081 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allow a remote attacker to cause no confidentiality impact, no integrity impact, and low...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines 1.10.6 release and security update

Red Hat OpenShift Pipelines 1.10.6 has been released. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in t...

Virtuozzo Hybrid Infrastructure 6.0 (6.0.0-243)

In this release, Virtuozzo Hybrid Infrastructure provides an upgrade of the Linux distribution, kernel, and toolset packages. This release also contains a range of new features that cover storage performance, object storage, as well as monitoring and alerts. Additionally, this release delivers...

CureIAM - Clean Accounts Over Permissions In GCP Infra At Scale

Clean up of over permissioned IAM accounts on GCP infra in an automated way CureIAM is an easy-to-use, reliable, and performant engine for Least Privilege Principle Enforcement on GCP cloud infra. It enables DevOps and Security team to quickly clean up accounts in GCP infra that have granted...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: melange, argo-events-fips, pulumi-kubernetes-operator, flux-notification-controller, argo-workflows, task, snyk-cli, argo-events...

GHSA-3F2Q-6294-FMQ5 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, argo-workflows, melange, snyk-cli, task, argo-events, flux-notification-controller...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, argo-workflows, melange, snyk-cli, task, argo-events, flux-notification-controller...

CVE-2023-46402 vulnerabilities

Vulnerabilities for packages: melange, argo-events-fips, pulumi-kubernetes-operator, flux-notification-controller, argo-workflows, task, snyk-cli, argo-events...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: nodetaint, aws-ebs-csi-driver, aws-efs-csi-driver, prometheus-adapter, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, spark-operator, ip-masq-agent...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: nodetaint, aws-ebs-csi-driver, aws-efs-csi-driver, prometheus-adapter, kubernetes-dns-node-cache, aws-efs-csi-driver-fips, spark-operator, ip-masq-agent...

GitLab 16.2 < 16.3.6 / 16.4 < 16.4.2 / 16.5 < 16.5.1 (CVE-2023-5825)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.2 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. A...

GitLab 11.6 < 16.3.6 / 16.4 < 16.4.2 / 16.5 < 16.5.1 (CVE-2023-3399)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. It was...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: cri-tools, k3s, envoy-ratelimit, kine, kubernetes, buildkitd, volume-modifier-for-k8s, temporal-server, kubernetes-csi-external-resizer, kubescape, docker-compose, metrics-server, temporal, kubevela...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Operator security update

An update is now available for OpenShift-Pipelines-1.11-RHEL-8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...