GHSA-2JWX-73FX-PWRV vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-rails-ce-fips...

GHSA-4V3F-FFRW-XCX6 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

CVE-2025-13335 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

CVE-2025-13927 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

CVE-2026-1102 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips...

CVE-2025-59105

With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, stored PINs and so on can be modified and...

CVE-2025-59105

CVE-2025-59105 describes unencrypted flash storage in the dormakaba access manager. With physical access and time, an attacker can desolder, modify, and reflash memory, enabling read/write of critical data (e.g., /etc/passwd, stored certificates, cryptographic keys, PINs) and potentially gain SSH...

CVE-2025-59105 Unencrypted Flash Storage in dormakaba access manager

With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, stored PINs and so on can be modified and...

EUVD-2025-206374

With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, stored PINs and so on can be modified and...

CVE-2025-59105

With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, stored PINs and so on can be modified and...

CVE-2026-0723

Removed by vendor...

Linux Distros Unpatched Vulnerability : CVE-2025-10569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed...

GHSA-VFMV-JFC5-PJJW vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2024-29034 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2025-32441 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.4-rack, ruby3.2-rack, ruby3.3-rack, ruby4.0-rack...

CVE-2023-29973

Pfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating multiple malicious users in firewall...

CVE-2022-0489

An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issue comments...

CVE-2022-0488

An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes...

CVE-2017-12646

XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address...

UBUNTU-CVE-2025-10569

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed an authenticated user to create a denial of service condition by providing crafted responses to external API calls...