41 matches found
CVE-2024-32002
CVE-2024-32002 gitlab-shell 취약점 cve 2024-32002를 위한 리버스 셸 생성기 이것은 아직 테스트 단계에 있으며 완료되면 업데이트하겠습니다...
CLEANSTART-2026-EL80803 Security fix for CVE-2024-10041 applied in: gitlab-shell 14.45.5-r0, gitlab-shell-fips 14.45.5-r0
CVE-2024-10041 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-UX00872 Security fixes in gitlab-shell-fips 14.45.5-r0
Package gitlab-shell-fips version 14.45.5-r0 fixes 3 vulnerabilities: CVE-2024-10041, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...
CLEANSTART-2026-AX77726 vulnerability was found in PAM
Multiple security vulnerabilities affect the gitlab-shell-fips package. A vulnerability was found in PAM. See references for individual vulnerability details...
CVE-2021-22254
Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...
EUVD-2021-9323
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-22177
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via...
CVE-2021-22177
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...
GHSA-V6V8-XJ6M-XWQH vulnerabilities
Vulnerabilities for packages: slsa-verifier, argo-events, pulumi, flux-source-controller, crossplane-provider-family-azure, actions-runner-controller, bank-vaults, crossplane-provider-azure-storage, k3s, kubescape, aactl, gitsign, rook, src-fingerprint, neuvector-sigstore-interface,...
CVE-2024-6104 vulnerabilities
Vulnerabilities for packages: slsa-verifier, argo-events, pulumi, flux-source-controller, crossplane-provider-family-azure, actions-runner-controller, bank-vaults, crossplane-provider-azure-storage, k3s, kubescape, aactl, gitsign, rook, src-fingerprint, neuvector-sigstore-interface,...
BIT-GITLAB-2021-22177
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: pulumi, cue, skaffold, zot, gomplate, prometheus-mongodb-exporter-fips, pulumi-language-dotnet, metrics-server-fips, kube-fluentd-operator, prometheus-blackbox-exporter, atlantis, metacontroller, tkn, buildkitd, prometheus-adapter, hugo, amass, kubernetes-dashboard,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: fuse-overlayfs-snapshotter, slsa-verifier, skaffold, spark-operator, flux-source-controller, gitness, nri-prometheus, rqlite, ko, newrelic-infrastructure-agent, kots, flux-notification-controller, cosign, flux-helm-controller, ip-masq-agent, scorecard, hey, nats,...
UBUNTU-CVE-2021-22254
Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...
CVE-2021-22254
Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...
GitLab 安全漏洞
GitLab is a self-hosted, Git version control system project repository application developed in Ruby on Rails by GitLab, Inc. The application can be used to access a project's file content, commit history, bug list, etc. A security vulnerability exists in Gitlab, which stems from the product's la...
CVE-2021-22254: Improper Encoding or Escaping of Output
Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7 and 13.12.9...
CVE-2021-22177
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...
CVE-2021-22177
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...
CVE-2021-22177
Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command...