1841 matches found
EUVD-2022-49076
Malicious code in bioql PyPI...
EUVD-2024-27818
Malicious code in bioql PyPI...
EUVD-2022-0003
Malicious code in bioql PyPI...
EUVD-2022-2192
Malicious code in bioql PyPI...
SonarQube 操作系统命令注入漏洞
SonarQube is a code inspection tool from Sonar Open Source. An operating system command injection vulnerability exists in SonarQube versions 4.0.0 through prior to 6.0.0, which stems from a failure to properly validate user input on the Windows runner and could lead to arbitrary command execution...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-12.8, azuredisk-csi-fips, sftpgo-plugin-geoipfilter, confluent-common-docker, rancher-machine, cluster-api, k8sgpt-operator, pvc-autoresizer, linkerd2-proxy-init, blob-csi-fips, prometheus-beat-exporter-fips, modelmesh-runtime-adapter,...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: nvidia-nsight-compute-12.8, azuredisk-csi-fips, sftpgo-plugin-geoipfilter, confluent-common-docker, rancher-machine, cluster-api, k8sgpt-operator, pvc-autoresizer, linkerd2-proxy-init, blob-csi-fips, prometheus-beat-exporter-fips, modelmesh-runtime-adapter,...
BIT-GITLAB-2025-6769 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces...
CVE-2025-6769
An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces...
CVE-2025-6769 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces...
CVE-2025-6769 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces...
CVE-2025-6769
GitLab CE/EE (versions 15.1–18.1.5, 18.2–18.2.5, 18.3–18.3.1) are affected by CVE-2025-6769. In affected builds, an authenticated user could view administrator-only maintenance notes by accessing runner details through specific interfaces. The public descriptions indicate the issue enabled exposu...
CVE-2025-6769 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces...
PT-2025-37293
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.1 through 18.1.5 GitLab CE/EE versions 18.2 through 18.2.5 GitLab CE/EE versions 18.3 through 18.3.1 Description: An issue exists in GitLab CE/EE that could allow authenticated users to view administrator-only...
GitLab CE和EE 安全漏洞
GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability in GitLab CE and EE versions 15.1 through before 18.1.6, 18.2...
CVE-2025-6769: Exposure of Sensitive System Information to an Unauthorized Control Sphere
An issue has been discovered in GitLab CE/EE affecting all versions from 15.1 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to view administrator-only maintenance notes by accessing runner details through specific interfaces...
GitLab 15.1 < 18.1.6 / 18.2 < 18.2.6 / 18.3 < 18.3.2 (CVE-2025-6769)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - The vulnerability exists due to excessive data output by the application in runner endpoints. A remote user can gain unauthorized access to sensitive information on the system. CVE-2025-6769 Note that...
CVE-2025-2246 vulnerabilities
Vulnerabilities for packages: gitlab-runner...