74 matches found
CVE-2026-1322
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a readapi scoped OAuth application to create issues and add comments to issues in private projects due t...
UBUNTU-CVE-2026-1322
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a readapi scoped OAuth application to create issues and add comments to issues in private projects due t...
CVE-2026-1322 Business Logic Errors in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with a readapi scoped OAuth application to create issues and add comments to issues in private projects due t...
CVE-2026-1322
GitLab CVE-2026-1322 affects GitLab CE/EE; authenticated users with a read_api scoped OAuth app could create issues and add comments in private projects due to improper authorization. Affected versions: 16.0–<18.9.7, 18.10–<18.10.6, 18.11–
CVE-2026-20719
Mattermost contains a DoS vulnerability (CVE-2026-20719) in rendering external SVGs within link embeds. Affected versions are Mattermost 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, and 10.11.x
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the milestone selection. An attacker can execute arbitrary JavaScript code in the context of another user's browser by storing a crafted HTML or JavaScript payload in a repository's milestone name, which is...
Jira issue creation fails due to a problem with security level mapping.
h3. Issue Summary As per the issue-level security configuration|https://confluence.atlassian.com/adminjiraserver103/configuring-issue-level-security-1489807354.html documentation, when setting the default security level for an issue security scheme, if the issue reporter does not have the 'Set...
EUVD-2021-9385
Malicious code in bioql PyPI...
CVE-2025-57768 Stored XSS in “hours” fields when creating or editing an issue, using SQLite database
Phproject is a high performance full-featured project management system. From 1.8.0 to before 1.8.3, a Stored Cross-Site Scripting XSS vulnerability exists in the Planned Hours field when creating a new project. When sending a POST request to /issues/new/, the value provided in the Planned Hours...
Linux Distros Unpatched Vulnerability : CVE-2022-3066
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions...
CVE-2025-53102
creationtimestamp| type| source ---|---|--- 2025-07-29 21:46:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv53ganjw42a...
GHSA-4P5M-GVPF-F3X5
creationtimestamp| type| source ---|---|--- 2025-07-16 05:32:18+00:00| seen| https://gist.github.com/safer-bot/ac258bea45025717f0ed3e9461a069c2...
GHSA-HMR7-M48G-48F6
creationtimestamp| type| source ---|---|--- 2025-07-16 04:03:07+00:00| seen| https://gist.github.com/safer-bot/c5ef5221e2cb60139a177929ba5fe952 2025-07-16 07:18:05+00:00| seen| https://gist.github.com/safer-bot/3c43a302c33a551aa633dcedbb152fe3...
GHSA-CH48-9R3Q-PV7X
creationtimestamp| type| source ---|---|--- 2025-07-16 03:54:14+00:00| seen| https://gist.github.com/safer-bot/f6680196cf1b0aee1c5fa9abea2ce0e1...
CVE-2025-36519
creationtimestamp| type| source ---|---|--- 2025-06-24 05:49:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19315 2025-06-24 06:08:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsdgoveqnr2a...
CVE-2025-5737
creationtimestamp| type| source ---|---|--- 2025-06-06 09:31:41+00:00| published-proof-of-concept| Telegram/mYiFhS0KI41FnuJb80DPaIeUDJlgHATfKqT73V-Gr4Yn1fQ 2025-06-06 10:18:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635904686208441...
CVE-2025-48930
creationtimestamp| type| source ---|---|--- 2025-05-28 18:14:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114586815688198231 2025-05-28 22:40:23+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lqbbiwuu2n24 2025-07-01 20:09:45+00:00| seen|...
CVE-2024-45094
creationtimestamp| type| source ---|---|--- 2025-05-28 00:47:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6y24w7l7o2 2025-05-28 03:46:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7c5kkmuf2o...
CVE-2025-5131
creationtimestamp| type| source ---|---|--- 2025-05-24 20:46:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17494 2025-05-24 21:20:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpx32lc44u22 2025-05-25...
CVE-2025-48753
creationtimestamp| type| source ---|---|--- 2025-05-24 02:54:06+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpv5dhfubod2...