CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

15799 matches found

RedhatCVE•added 2025/05/22 5:30 a.m.•7 views

CVE-2014-3456

Cross-site scripting XSS vulnerability in GitLab Enterprise Edition EE 6.6.0 before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.00942EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 5:24 a.m.•14 views

CVE-2019-15585

Improper authentication exists in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE in the GitLab SAML integration had a validation issue that permitted an attacker to takeover another user's account...

9.8CVSS6.7AI score0.01634EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 5:11 a.m.•16 views

CVE-2019-6793

An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue...

7CVSS6.6AI score0.03506EPSS

SaveExploits1References1

RedhatCVE•added 2025/05/22 4:50 a.m.•15 views

CVE-2019-18451

An issue was discovered in GitLab Community and Enterprise Edition 10.7.4 through 12.4 in the InternalRedirect filtering feature. It has an Open Redirect...

6.1CVSS6.5AI score0.00692EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 4:48 a.m.•12 views

CVE-2019-18452

An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions...

5.3CVSS6.5AI score0.0088EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 4:48 a.m.•11 views

CVE-2019-19258

GitLab Enterprise Edition EE 10.8 and later through 12.5 has Incorrect Access Control...

5.3CVSS6.7AI score0.00929EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 4:47 a.m.•9 views

CVE-2019-19088

Gitlab Enterprise Edition EE 11.3 through 12.4.2 allows Directory Traversal...

9.8CVSS6.8AI score0.01656EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 4:05 a.m.•11 views

CVE-2019-19263

GitLab Enterprise Edition EE 8.2 and later through 12.5 has Insecure Permissions...

4.3CVSS6.7AI score0.00587EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 3:39 a.m.•10 views

CVE-2010-0381

SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showstats action. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

7.5CVSS8.6AI score0.01013EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 3:38 a.m.•17 views

CVE-2011-2883

The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 attempts to validate signed DLLs by checking the certificate subject, not the signature, which allows man-in-the-middle attackers to...

9.3CVSS7.7AI score0.01529EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 12:40 a.m.•15 views

CVE-2014-9300

Cross-site request forgery CSRF vulnerability in the cmisbrowser servlet in Content Management Interoperability Service CMIS in Alfresco Community Edition before 5.0.a allows remote attackers to hijack the authentication of users for requests that access unauthorized URLs and obtain user...

6.8CVSS7.5AI score0.00628EPSS

SaveExploits1References1

RedhatCVE•added 2025/05/22 12:01 a.m.•10 views

CVE-2009-2146

Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition aka SugarCRM before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct...

6CVSS7.6AI score0.21465EPSS

SaveExploits3References1