1294 matches found
PT-2024-6775
Name of the Vulnerable Software and Affected Versions GitLab EE versions 12.5 through 17.2.9 GitLab EE versions 17.3 through 17.3.5 GitLab EE versions 17.4 through 17.4.2 Description The issue is related to errors in access control, allowing a remote attacker to run Continuous...
RHSA-2023:6059 Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.12.1 release and security update
Bulletin has no description...
RHSA-2023:7699 Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update
Bulletin has no description...
GHSA-M6FV-JMCG-4JFG vulnerabilities
Vulnerabilities for packages: thingsboard, kubeflow-pipelines, sqlpad, kubeflow-centraldashboard, argo-workflows...
GHSA-M6FV-JMCG-4JFG vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, arangodb, kubeflow-centraldashboard, argo-workflows, sqlpad, thingsboard...
GHSA-CM22-4G7W-348P vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, sqlpad, kubeflow-centraldashboard...
GHSA-CM22-4G7W-348P vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, arangodb, kubeflow-centraldashboard, argo-workflows, sqlpad...
GHSA-QW6H-VGH9-J6WX vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, sqlpad, kubeflow-centraldashboard...
GHSA-QW6H-VGH9-J6WX vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, arangodb, kubeflow-centraldashboard, argo-workflows, sqlpad...
CVE-2024-45590 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, sqlpad, kubeflow-centraldashboard...
GHSA-QWCR-R2FM-QRC7 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, sqlpad, kubeflow-centraldashboard...
CVE-2024-43796 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, sqlpad, kubeflow-centraldashboard...
CVE-2024-43800 vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, sqlpad, kubeflow-centraldashboard...
CVE-2024-43799 vulnerabilities
Vulnerabilities for packages: thingsboard, kubeflow-pipelines, sqlpad, kubeflow-centraldashboard, argo-workflows...
CVE-2024-43796 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, arangodb, kubeflow-centraldashboard, argo-workflows, sqlpad...
CVE-2024-43800 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, arangodb, kubeflow-centraldashboard, argo-workflows, sqlpad...
CVE-2024-43799 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, arangodb, kubeflow-centraldashboard, argo-workflows, sqlpad, thingsboard...
The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a hacker to replace the code in imported CI/CD pipelines.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to replace the code in imported CI/CD pipelines...
UBUNTU-CVE-2024-7110
An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacker to execute arbitrary command in a victim's pipeline through prompt injection...