CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

22126 matches found

Tenable Nessus•added 2026/05/14 12:0 a.m.•12 views

GitLab 18.7 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-6073)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitLab CVE-2026-6073 Note that Nessus has not tested for this issue but has instead relied only on the application...

8.7CVSS5.8AI score0.00188EPSS

SaveExploits0References5

Tenable Nessus•added 2026/05/14 12:0 a.m.•16 views

FreeBSD : Gitlab -- vulnerabilities (b3cb8f40-4f4c-11f1-80f1-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b3cb8f40-4f4c-11f1-80f1-2cf05da270f3 advisory. Gitlab reports: Cross-site Scripting issue in Analytics dashboard chart rendering impacts GitL...

8.7CVSS6AI score0.00355EPSS

SaveExploits1References27

Tenable Nessus•added 2026/05/14 12:0 a.m.•24 views

GitLab 8.3 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-8280)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Allocation of Resources Without Limits or Throttling in GitLab CVE-2026-8280 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version numbe...

6.5CVSS5.8AI score0.00295EPSS

SaveExploits0References5

Tenable Nessus•added 2026/05/14 12:0 a.m.•12 views

GitLab 18.3 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-3607)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Access Control Check Implemented After Asset is Accessed in GitLab CVE-2026-3607 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

4.3CVSS5.8AI score0.00228EPSS

SaveExploits0References5

RedhatCVE•added 2026/05/13 8:23 p.m.•11 views

CVE-2026-42195

draw.io is a configurable diagramming and whiteboarding application. Prior to version 29.7.9, the draw.io client accepts a ?gitlab= URL parameter that overrides the GitLab server URL used during OAuth sign-in. A crafted link causes the user's click on draw.io's "Authorize in GitLab" dialog to ope...

3.4CVSS5.8AI score0.00192EPSS

SaveExploits0References1

Positive Technologies•added 2026/05/13 12:0 a.m.•32 views

PT-2026-40876

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.7 through 18.9.6 GitLab EE versions 18.10 through 18.10.5 GitLab EE versions 18.11 through 18.11.2 Description An issue in customizable analytics dashboards allows an authenticated user to execute arbitrary JavaScript in...

8.7CVSS6.1AI score0.00256EPSS

SaveExploits0References13

Wolfi•added 2026/05/12 7:48 a.m.•21 views

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: trufflehog, trivy-operator, kots, grype, dagger, pulumi-language-yaml, snyk-cli, xeol, nuclei, pulumi-language-java, gitea, kyverno, trivy, nfpm, argo-cd, wolfictl, guac, pulumi, src-fingerprint, flux-source-controller, goreleaser, scorecard,...

7.5CVSS5.5AI score0.00159EPSS

SaveExploits0

Wolfi•added 2026/05/12 7:48 a.m.•22 views

GHSA-389R-GV7P-R3RP vulnerabilities

5.3AI score

SaveExploits0

Chainguard•added 2026/05/12 7:19 a.m.•11 views

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: steampipe, gitlab-runner, kaniko, mapotf, crossplane-fips, argo-workflows, gitlab-rails-ce-fips, rancher-fleet-fips, rancher-fleet, kubescape-server-fips, pulumi-kubernetes-operator, src-fingerprint, kyverno, pulumi-language-dotnet, trivy-operator, cerbos-fips,...

5.3AI score

SaveExploits0

Chainguard•added 2026/05/12 7:19 a.m.•40 views

CVE-2026-45022 vulnerabilities

7.5CVSS5.5AI score0.00159EPSS

SaveExploits0

Chainguard•added 2026/05/10 7:17 a.m.•14 views

GHSA-526F-JXPJ-JMG2 vulnerabilities