1844 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-2227
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in the runner jobs API in GitLab CE/EE affecting all versions prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows a...
Linux Distros Unpatched Vulnerability : CVE-2020-13295
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF. CVE-2020-13295 Note th...
Linux Distros Unpatched Vulnerability : CVE-2023-2478
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.9.7, all versions starting from 15.10 before 15.10.6, all...
Linux Distros Unpatched Vulnerability : CVE-2020-13310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending...
CVE-2025-9403 jqlang jq JSON jq_test.c run_jq_tests assertion
A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function runjqtests of the file jqtest.c of the component JSON Parser. Executing manipulation can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Othe...
Linux Distros Unpatched Vulnerability : CVE-2017-0918
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution. CVE-2017-091...
GHSA-RWWP-3RV3-J6Q6 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2024-10219 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2024-10219 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
GHSA-RWWP-3RV3-J6Q6 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips...
Linux Distros Unpatched Vulnerability : CVE-2021-3139
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopylocateudev in tcmurcmdhandler.c lacks a check for transport-layer restrictions, allowing...
Linux Distros Unpatched Vulnerability : CVE-2020-13350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runner...
Linux Distros Unpatched Vulnerability : CVE-2022-4201
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local...
Malicious code in browser-sync-task-runner (npm)
The package browser-sync-task-runner was found to contain malicious code...
Malicious code in casper-runner (npm)
The package casper-runner was found to contain malicious code...
Malicious code in test_oversight_runner (npm)
The package testoversightrunner was found to contain malicious code...
MAL-2025-16627 Malicious code in casper-runner (npm)
The package casper-runner was found to contain malicious code...
MAL-2025-16199 Malicious code in browser-sync-task-runner (npm)
The package browser-sync-task-runner was found to contain malicious code...