1682 matches found
CVE-2024-4105
A vulnerability has been found in FAST/TOOLS and CI Server. The affected product's WEB HMI server's function to process HTTP requests has a security flaw Reflected XSS that allows the execution of malicious scripts. Therefore, if a client PC with inadequate security measures accesses a product UR...
CVE-2024-4105
CVE-2024-4105 affects Yokogawa FAST/TOOLS and CI Server. The issue is a reflected XSS in the WEB HMI server when processing HTTP requests, which could allow a malicious script to execute in a client browser. Affected products/versions: FAST/TOOLS RVSVRN/UNSVRN/HMIWEB/FTEES/HMIMOB (R9.01–R10.04) a...
MAL-2024-1982 Malicious code in @b2bgeo/ci-startrek (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @b2bgeo/ci-startrek (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @b2bgeo/ci-s3 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @b2bgeo/ci-github (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1980 Malicious code in @b2bgeo/ci-github (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1979 Malicious code in @b2bgeo/ci-aws (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @b2bgeo/ci-aws (npm)
--- -= Per source details. Do not edit below this line.=-...
BIT-GITLAB-2024-1736 Uncontrolled Resource Consumption in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. A vulnerability in GitLab's CI/CD pipeline editor could allow for denial of service attacks through maliciously crafted configuration...
FreeBSD : Gitlab -- Vulnerabilities (92cd1c03-2940-11ef-bc02-001b217b3468)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 92cd1c03-2940-11ef-bc02-001b217b3468 advisory. Gitlab reports: ReDoS in gomod dependency linker ReDoS in CI interpolation fix bypass ReDoS in...
CVE-2024-1736
An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. A vulnerability in GitLab's CI/CD pipeline editor could allow for denial of service attacks through maliciously crafted configuration...
CVE-2024-1736
An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. A vulnerability in GitLab's CI/CD pipeline editor could allow for denial of service attacks through maliciously crafted configuration...
CVE-2024-1736 Uncontrolled Resource Consumption in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.10.7, starting from 16.11 prior to 16.11.4, and starting from 17.0 prior to 17.0.2. A vulnerability in GitLab's CI/CD pipeline editor could allow for denial of service attacks through maliciously crafted configuration...
CVE-2024-1736
GitLab CE/EE contains a DoS vulnerability in the CI/CD pipeline editor that can be triggered by malicious configuration files. Affected versions: all before 16.10.7, 16.11 before 16.11.4, and 17.0 before 17.0.2. Remediation: upgrade to 16.10.7+ (or 16.11.4+), or to 17.0.2+ where fixed, as per Git...
CVE-2024-1736
Removed by vendor...
Gitlab -- Vulnerabilities
Gitlab reports: ReDoS in gomod dependency linker ReDoS in CI interpolation fix bypass ReDoS in Asana integration issue mapping when webhook is called XSS and content injection when viewing raw XHTML files on iOS devices Missing agentk request validation could cause KAS to panic...
Fedora: Security Advisory for rust-is_ci (FEDORA-2024-40ee18b2e7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, due to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of the Continuous Integration and Application Delivery system CI/CD of TeamCity exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using reports from third-part...
