CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

274 matches found

Prion•added 2022/01/18 5:15 p.m.•20 views

Design/Logic Flaw

An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to unauthorized access to some particular fields through the GraphQL API...

4CVSS6.2AI score0.01141EPSS

SaveExploits1References2Affected Software1

UbuntuCve•added 2022/01/18 5:15 p.m.•25 views

CVE-2022-0152

6.5CVSS6.5AI score0.01141EPSS

SaveExploits1References3

CVE•added 2022/01/18 4:51 p.m.•69 views

CVE-2022-0152

The CVE-2022-0152 issue affects GitLab and is described as an unauthorized access vulnerability in the GraphQL API. Affected versions include all from 13.10 up to 14.4.5 (i.e., 13.10–14.4.4), all from 14.5.0 up to 14.5.3 (i.e., 14.5.0–14.5.2), and all from 14.6.0 up to 14.6.2 (i.e., 14.6.0–14.6.1...

6.5CVSS6AI score0.01141EPSS

SaveExploits1References2Affected Software1

OSV•added 2022/01/18 4:51 p.m.•19 views

CVE-2022-0152

6.5CVSS6.3AI score

SaveExploits0References4

Debian CVE•added 2022/01/18 4:51 p.m.•53 views

CVE-2022-0152

Removed by vendor...

6.5CVSS6.6AI score0.01141EPSS

SaveExploits1

Cvelist•added 2022/01/18 4:51 p.m.•32 views

CVE-2022-0152

6.5CVSS6.6AI score0.01141EPSS

SaveExploits1References2

Tenable Nessus•added 2022/01/13 12:00 a.m.•62 views

FreeBSD : Gitlab -- Multiple Vulnerabilities (43f84437-73ab-11ec-a587-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 43f84437-73ab-11ec-a587-001b217b3468 advisory. - Gitlab reports: Arbitrary file read via group import feature Stored XSS in notes Lack of sta...

8.7CVSS6.2AI score0.01449EPSS

SaveExploits1References13

OSV•added 2021/12/13 4:15 p.m.•26 views

CVE-2021-39915

Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows an attacker to see the names of project access tokens on arbitrary projects...

5.3CVSS6.4AI score

SaveExploits0References3

Prion•added 2021/12/13 4:15 p.m.•22 views

Improper access control

5CVSS5.3AI score0.01134EPSS

SaveExploits0References3Affected Software1

UbuntuCve•added 2021/12/13 4:15 p.m.•39 views

CVE-2021-39915

5.3CVSS6.2AI score0.01134EPSS

SaveExploits0References1

OSV•added 2021/12/13 4:15 p.m.•13 views

UBUNTU-CVE-2021-39915

5.3CVSS6.2AI score0.01134EPSS

SaveExploits0References2

CVE•added 2021/12/13 3:47 p.m.•64 views

CVE-2021-39915

CVE-2021-39915: GitLab CE/EE GraphQL API has improper access control that lets an attacker view the names of project access tokens on arbitrary projects. Affected: GitLab versions starting from 13.0 up to before 14.3.6, 14.4 before 14.4.4, and 14.5 before 14.5.2. Remediation per sources is to upg...

5.3CVSS5.3AI score0.01134EPSS

SaveExploits0References3Affected Software1

Positive Technologies•added 2021/12/13 12:00 a.m.•14 views

PT-2021-22761 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.0 through 14.3.6 GitLab CE/EE versions 14.4 through 14.4.4 GitLab CE/EE versions 14.5 through 14.5.2 Description: The issue is related to improper access control in the GraphQL API, allowing an attacker to see the nam...

5.3CVSS5.1AI score0.01134EPSS

SaveExploits0References11

Tenable Nessus•added 2021/12/13 12:00 a.m.•33 views

FreeBSD : Gitlab -- Multiple Vulnerabilities (b299417a-5725-11ec-a587-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b299417a-5725-11ec-a587-001b217b3468 advisory. - Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4...

8.8CVSS6.4AI score0.35649EPSS

SaveExploits0References21

NVD•added 2021/11/05 12:15 a.m.•26 views

CVE-2021-39904

An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestion...

4.3CVSS0.00822EPSS

SaveExploits1References3

ATTACKERKB•added 2021/11/05 12:15 a.m.•7 views

CVE-2021-39904

4.3CVSS5.8AI score0.00822EPSS

SaveExploits1References4Affected Software1

UbuntuCve•added 2021/11/05 12:15 a.m.•28 views

CVE-2021-39904

4.3CVSS5.9AI score0.00822EPSS

SaveExploits1References1

Cvelist•added 2021/11/04 11:13 p.m.•39 views

CVE-2021-39904

4.3CVSS5.1AI score0.00822EPSS

SaveExploits1References3

CVE•added 2021/11/04 11:13 p.m.•88 views

CVE-2021-39904

CVE-2021-39904 is an Improper Access Control vulnerability in GitLab’s GraphQL API affecting GitLab CE/EE versions 13.1–14.2.5, 14.3 before 14.3.4, and 14.4 before 14.4.1. The MR creator could resolve discussions and apply suggestions after the MR owner locked the MR. Root cause: inadequate acces...

4.3CVSS4.5AI score0.00822EPSS

SaveExploits1References3Affected Software1

Positive Technologies•added 2021/11/04 12:00 a.m.•8 views

PT-2021-22751 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.1 through 14.2.6 GitLab CE/EE versions 14.3 through 14.3.4 GitLab CE/EE versions 14.4 through 14.4.1 Description: The issue is related to an Improper Access Control vulnerability in the GraphQL API. This vulnerability...

4.3CVSS4.2AI score0.00822EPSS

SaveExploits1References11

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by