CVE-2024-12619

Removed by vendor...

CVE-2024-12619

GitLab CVE-2024-12619 affects GitLab CE/EE. Affected versions are 16.0 up to before 17.8.6, 17.9 up to before 17.9.3, and 17.10 up to before 17.10.1. The issue allows internal users to gain unauthorized access to internal projects due to an unspecified vulnerability in these releases. The primary...

CVE-2024-12619 Insufficient Granularity of Access Control in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...

BIT-MATTERMOST-2025-27715

Mattermost versions 9.11.x = 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them...

BELL-CVE-2025-21892

Bulletin has no description...

BELL-CVE-2023-52982

Bulletin has no description...

BELL-CVE-2023-52995

Bulletin has no description...

BELL-CVE-2023-53006

Bulletin has no description...

BELL-CVE-2023-53002

Bulletin has no description...

BELL-CVE-2023-53024

Bulletin has no description...

BELL-CVE-2025-21883

Bulletin has no description...

BELL-CVE-2023-52999

Bulletin has no description...

BELL-CVE-2023-53000

Bulletin has no description...

BELL-CVE-2023-53016

Bulletin has no description...

BELL-CVE-2023-52928

Bulletin has no description...

BELL-CVE-2023-52976

Bulletin has no description...

BELL-CVE-2023-52988

Bulletin has no description...

BELL-CVE-2023-52993

Bulletin has no description...

Denial Of Service (DoS)

litellm is vulnerable to Denial of Service DoS. The vulnerability is due to the use of ast.literaleval to parse user input, allowing an attacker to send specially crafted input that crashes the litellm Python server...

Denial Of Service (DoS)

Aim is vulnerable to Denial Of Service DoS. The vulnerability is due to improper thread management due to the ScheduledStatusReporter object running on the main thread of the tracking server, blocking it indefinitely and preventing it from responding to requests...