Lucene search
+L

2006 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.11 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to errors in resource release, allows a violator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect handling of user names. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service interruptions...

4.3CVSS5.5AI score0.00998EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.11 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to lack of access control, allows a perpetrator to gain access to confidential data and compromise its integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability to update a secure branch. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data and compromise its integrity...

7.9CVSS6.6AI score0.00922EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.12 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to information disclosure, allows attackers to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of access control checks. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data...

4.3CVSS5.6AI score0.00812EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.11 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from insufficient neutralization of certain elements in the query, allowing an attacker to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the insufficient neutralization of certain elements in the request. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.4CVSS5.9AI score0.00747EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:00 a.m.12 views

The vulnerability of the software platform based on Git for collaborative code development on GitLab allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper display of code in merge requests. Exploiting this vulnerability allows a malicious actor, operating remotely, to access confidential data, compromise its integrity, and...

9CVSS7.2AI score0.00965EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:00 a.m.13 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a perpetrator to gain access to confidential data and compromise its integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the possibility for users to delete tokens. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data and compromise its integrity...

5.5CVSS6AI score0.0083EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:00 a.m.12 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the disclosure of information in the error-prone data area, allows a perpetrator to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to confusion between tag names and branches. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

6.8CVSS6.6AI score0.01126EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:00 a.m.13 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a hacker to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the display of an email address in error messages. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

4.3CVSS5.6AI score0.00974EPSS
SaveExploits0References6Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/03/28 7:15 p.m.6 views

CVE-2022-0344

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a...

4.3CVSS5.3AI score0.01091EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/28 7:15 p.m.10 views

CVE-2022-0249

A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since requests to shared address space were not blocked...

9.1CVSS7.7AI score0.01138EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2022/03/28 6:53 p.m.84 views

CVE-2022-0249

Removed by vendor...

9.1CVSS7.3AI score0.01138EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2022/01/18 5:15 p.m.9 views

CVE-2022-0154

An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to a Cross-Site Request Forgery attack that allows a malicious user to have their...

8CVSS7.4AI score0.00478EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2022/01/18 5:15 p.m.17 views

Design/Logic Flaw

An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was not correctly handling requests to delete existing packages which could result in a Denial ...

5CVSS5AI score0.01121EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/01/13 12:00 a.m.12 views

GitLab 信息泄露漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. There is an information disclosure vulnerability in GitLab, no more informatio...

6.5CVSS6.5AI score0.01141EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/01/13 12:00 a.m.12 views

GitLab 跨站请求伪造漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A cross-site request forgery vulnerability exists in GitLab, which stems from ...

8CVSS7.5AI score0.00478EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2021/12/13 4:15 p.m.8 views

CVE-2021-39917

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. A regular expression related to quick actions features was susceptible to catastrophic backtracking...

6.5CVSS6.5AI score0.01328EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/12/13 4:15 p.m.6 views

UBUNTU-CVE-2021-39932

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Using large payloads, the diff feature could be used to trigger high load time for users reviewing co...

4.3CVSS5.8AI score0.0086EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/12/07 12:00 a.m.10 views

GitLab代码问题漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A code issue vulnerability exists in GitLab CE/EE that stems from an...

7.5CVSS7.9AI score0.35649EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2021/12/07 12:00 a.m.13 views

GitLab 输入验证错误漏洞

GitLab is an open source, end-to-end software development platform from US-based GitLab with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. An input validation error vulnerability exists in GitLab Community Edition...

4.3CVSS5.2AI score0.0086EPSS
SaveExploits0References6
OSV
OSV
added 2021/12/06 6:15 p.m.8 views

UBUNTU-CVE-2021-39890

It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 and above...

9.8CVSS5.8AI score0.01068EPSS
SaveExploits0References4
Rows per page
Query Builder