CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1830 matches found

RedhatCVE•added 2025/05/22 8:29 a.m.•16 views

CVE-2019-15581

An IDOR exists in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE that allowed a project owner or maintainer to see the members of any private group via merge request approval rules...

5.3CVSS6.4AI score0.00966EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 8:27 a.m.•11 views

CVE-2019-15724

An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection...

6.1CVSS6.3AI score0.01225EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 8:14 a.m.•19 views

CVE-2019-16170

An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. It has Incorrect Access Control...

7.1CVSS6.6AI score0.00956EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 8:12 a.m.•9 views

CVE-2019-15733

An issue was discovered in GitLab Community and Enterprise Edition 7.12 through 12.2.1. The specified default branch name could be exposed to unauthorized users...

4.3CVSS6.4AI score0.01043EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 8:12 a.m.•12 views

CVE-2019-15731

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to comment on merge requests despite the repository being set to allow only project members to do so...

5.3CVSS6.5AI score0.01243EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 8:03 a.m.•12 views

CVE-2019-13011

An issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force a user with access to a project, but not it's repository could create a list of merge requests template names. It has excessive algorithmic complexity...

4.3CVSS6.4AI score0.0077EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 7:57 a.m.•12 views

CVE-2019-19261

GitLab Enterprise Edition EE 6.7 and later through 12.5 allows SSRF...

8.8CVSS6.7AI score0.0102EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 7:48 a.m.•15 views

CVE-2019-13010

An issue was discovered in GitLab Enterprise Edition 8.3 through 12.0.2. The color codes decoder was vulnerable to a resource depletion attack if specific formats were used. It allows Uncontrolled Resource Consumption...

5.9CVSS6.4AI score0.00942EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 7:19 a.m.•12 views

CVE-2019-13007

An issue was discovered in GitLab Community and Enterprise Edition 11.11 through 12.0.2. When an admin enabled one of the service templates, it was triggering an action that leads to resource depletion. It allows Uncontrolled Resource Consumption...

4.9CVSS6.5AI score0.00979EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 5:30 a.m.•7 views

CVE-2014-3456

Cross-site scripting XSS vulnerability in GitLab Enterprise Edition EE 6.6.0 before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.00942EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 4:48 a.m.•11 views

CVE-2019-18452

An issue was discovered in GitLab Community and Enterprise Edition 11.3 through 12.4 when moving an issue to a public project from a private one. It has Insecure Permissions...

5.3CVSS6.5AI score0.0088EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 4:48 a.m.•10 views

CVE-2019-19258

GitLab Enterprise Edition EE 10.8 and later through 12.5 has Incorrect Access Control...

5.3CVSS6.7AI score0.00929EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 4:47 a.m.•8 views

CVE-2019-19088

Gitlab Enterprise Edition EE 11.3 through 12.4.2 allows Directory Traversal...

9.8CVSS6.8AI score0.01656EPSS

SaveExploits0References1

RedhatCVE•added 2025/05/22 4:05 a.m.•11 views

CVE-2019-19263

GitLab Enterprise Edition EE 8.2 and later through 12.5 has Insecure Permissions...

4.3CVSS6.7AI score0.00587EPSS

SaveExploits0References1