Lucene search
K

9 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 16 hours ago4 views

Malicious code in gpt-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9bdc5e04979d5b4f73407bcedaecc9df24dbb03e0bfbc0edefe333023dc50c On npm install, postinstall.js runs unconditionally and collects a wide range of installer-side reconnaissance data: hostname and FQDN, contents of...

5.5AI score
Exploits0References9
OSV
OSV
added 2026/03/13 9:30 a.m.4 views

BIT-GITLAB-2025-12555 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that, under certain conditions, could have allowed an authenticated user to access previous pipeline job information on projects with repository and CI/CD...

4.3CVSS5.8AI score0.00019EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/03/11 4:7 p.m.22 views

CVE-2025-12555 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that, under certain conditions, could have allowed an authenticated user to access previous pipeline job information on projects with repository and CI/CD...

4.3CVSS0.00019EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/03/11 4:7 p.m.5 views

CVE-2025-12555

Removed by vendor...

4.3CVSS5.8AI score0.00019EPSS
Exploits0
CNNVD
CNNVD
added 2021/02/04 12:0 a.m.5 views

多款Trend Micro产品缓冲区错误漏洞

Trend Micro OfficeScan XG is a suite of distributed anti-virus software.Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response. Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection...

5.5CVSS6AI score0.00148EPSS
Exploits0References5
NVD
NVD
added 2019/12/18 9:15 p.m.19 views

CVE-2019-15580

An information exposure vulnerability exists in gitlab.com v12.3.2, v12.2.6, and v12.1.10 when using the blocking merge request feature, it was possible for an unauthenticated user to see the head pipeline data of a public project even though pipeline visibility was restricted...

6.5CVSS6.3AI score0.00238EPSS
Exploits1References1
Prion
Prion
added 2019/12/18 9:15 p.m.14 views

Information disclosure

An information exposure vulnerability exists in gitlab.com v12.3.2, v12.2.6, and v12.1.10 when using the blocking merge request feature, it was possible for an unauthenticated user to see the head pipeline data of a public project even though pipeline visibility was restricted...

4CVSS6.3AI score0.00238EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2019/12/18 8:59 p.m.22 views

CVE-2019-15580

Removed by vendor...

6.5CVSS6.6AI score0.00238EPSS
Exploits1
CNVD
CNVD
added 2019/09/03 12:0 a.m.2 views

Unspecified Vulnerability in GitLab (CNVD-2019-30487)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise and...

7.5CVSS6.4AI score0.00463EPSS
Exploits0References1
Rows per page
Query Builder