Lucene search
+L

22615 matches found

CNNVD
CNNVD
added 2025/02/13 12:00 a.m.13 views

GitLab Enterprise Edition和GitLab Community Edition 代码问题漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A code issue exists in GitLab Enterprise Edition EE and GitLab Community Edition CE,...

5.3CVSS6.7AI score0.00254EPSS
SaveExploits0References1
Chainguard
Chainguard
added 2025/02/12 7:18 p.m.14 views

GHSA-7G2V-JJ9Q-G3RG vulnerabilities

Vulnerabilities for packages: ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, ruby4.0-rack, logstash, ruby3.2-rails, ruby3.3-rails, ruby3.4-rails, kube-fluentd-operator...

5.9AI score
SaveExploits0
Wolfi
Wolfi
added 2025/02/12 7:18 p.m.5 views

GHSA-7G2V-JJ9Q-G3RG vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, logstash, ruby3.3-rack, ruby4.0-rack, ruby3.2-rack, ruby3.4-rack...

5.9AI score
SaveExploits0
Chainguard
Chainguard
added 2025/02/12 5:15 p.m.32 views

CVE-2025-25184 vulnerabilities

Vulnerabilities for packages: ruby3.2-rack, ruby3.3-rack, ruby3.4-rack, ruby4.0-rack, logstash, ruby3.2-rails, ruby3.3-rails, ruby3.4-rails, kube-fluentd-operator...

7.1CVSS6.8AI score0.01185EPSS
SaveExploits1
Wolfi
Wolfi
added 2025/02/12 5:15 p.m.12 views

CVE-2025-25184 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, logstash, ruby3.3-rack, ruby4.0-rack, ruby3.2-rack, ruby3.4-rack...

7.1CVSS6.8AI score0.01185EPSS
SaveExploits1
Wolfi
Wolfi
added 2025/02/12 4:15 p.m.25 views

CVE-2025-0516 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

4.3CVSS5.8AI score0.00297EPSS
SaveExploits1
Chainguard
Chainguard
added 2025/02/12 4:15 p.m.19 views

CVE-2025-0516 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-pages, gitlab-ee-fips, gitlab-pages-fips, gitlab-runner-fips, gitlab-cng, gitlab-rails-ee, gitlab-cng-fips, gitlab-ee...

4.3CVSS5.8AI score0.00297EPSS
SaveExploits1
NVD
NVD
added 2025/02/12 4:15 p.m.14 views

CVE-2025-0516

Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project data...

4.3CVSS0.00297EPSS
SaveExploits1References2
NVD
NVD
added 2025/02/12 4:15 p.m.19 views

CVE-2024-9870

An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from the GitLab server to unintended services...

8.8CVSS0.00393EPSS
SaveExploits1References2
OSV
OSV
added 2025/02/12 4:15 p.m.14 views

UBUNTU-CVE-2024-9870

An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from the GitLab server to unintended services...

8.8CVSS5.8AI score0.00393EPSS
SaveExploits1References4
OSV
OSV
added 2025/02/12 4:15 p.m.14 views

UBUNTU-CVE-2025-0516

Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project data...

4.3CVSS5.8AI score0.00297EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2025/02/12 4:15 p.m.14 views

CVE-2025-0516

Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project data...

4.3CVSS5.9AI score0.00297EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2025/02/12 4:15 p.m.14 views

CVE-2024-9870

An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from the GitLab server to unintended services...

8.8CVSS5.9AI score0.00393EPSS
SaveExploits1References3
CVE
CVE
added 2025/02/12 3:31 p.m.82 views

CVE-2024-9870

CVE-2024-9870 is an external service interaction vulnerability in GitLab Enterprise Edition (GitLab EE) affecting all versions from 15.11 up to 17.6.5, 17.7 up to 17.7.4, and 17.8 up to 17.8.2. The issue allows an attacker to cause the GitLab server to issue requests to unintended external servic...

8.8CVSS4.3AI score0.00393EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/12 3:31 p.m.10 views

CVE-2024-9870 Unintended Proxy or Intermediary ('Confused Deputy') in GitLab

An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from the GitLab server to unintended services...

4.3CVSS4.3AI score0.00393EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/02/12 3:31 p.m.25 views

CVE-2024-9870 Unintended Proxy or Intermediary ('Confused Deputy') in GitLab

An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from the GitLab server to unintended services...

4.3CVSS0.00393EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2025/02/12 3:31 p.m.39 views

CVE-2024-9870

Removed by vendor...

8.8CVSS5.8AI score0.00393EPSS
SaveExploits1
OSV
OSV
added 2025/02/12 3:31 p.m.6 views

CVE-2024-9870 Unintended Proxy or Intermediary ('Confused Deputy') in GitLab

An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from the GitLab server to unintended services...

4.3CVSS6.4AI score
SaveExploits0References5
Cvelist
Cvelist
added 2025/02/12 3:30 p.m.39 views

CVE-2025-0516 Incorrect Authorization in GitLab

Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project data...

4.3CVSS0.00297EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2025/02/12 3:30 p.m.21 views

CVE-2025-0516

Removed by vendor...

4.3CVSS5.8AI score0.00297EPSS
SaveExploits1
Rows per page
Query Builder