Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-15504

Malicious code in bioql PyPI...

4.3CVSS4.7AI score0.00304EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/22 8:11 a.m.7 views

CVE-2019-15576

An information disclosure vulnerability exists in GitLab CE/EE...

7.5CVSS7.2AI score0.00566EPSS
Exploits1References1
OSV
OSV
added 2024/03/06 11:16 a.m.20 views

BIT-GITLAB-2022-0344

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a...

4.3CVSS4.3AI score0.00304EPSS
Exploits1References4
Veracode
Veracode
added 2023/07/22 8:45 a.m.23 views

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability exists because the private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a Merge Request and later moved to a public project...

4.3CVSS6.8AI score0.00304EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/03/28 7:15 p.m.0 views

UBUNTU-CVE-2022-0344

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a...

4.3CVSS5.7AI score0.00304EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2022/03/28 7:15 p.m.22 views

CVE-2022-0344

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a...

4.3CVSS5.8AI score0.00304EPSS
Exploits1References4
Prion
Prion
added 2022/03/28 7:15 p.m.14 views

Code injection

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a...

4.3CVSS4.5AI score0.00304EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2022/03/28 6:53 p.m.127 views

CVE-2022-0344

GitLab CVE-2022-0344 affects GitLab versions 10.0 to 14.5.3 (and 10.1 to 14.6.3; 10.2 to 14.7.0 as listed) where private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a Merge Request and later moved to a public project. The impact is an informat...

4.3CVSS4.4AI score0.00304EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2022/03/28 6:53 p.m.47 views

CVE-2022-0344

Removed by vendor...

4.3CVSS5.8AI score0.00304EPSS
Exploits1
OSV
OSV
added 2022/03/28 6:53 p.m.20 views

CVE-2022-0344

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a...

3.1CVSS6.3AI score0.00304EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2022/03/28 12:0 a.m.1 views

PT-2022-13118 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 10.0 through 14.5.4 GitLab versions 10.1 through 14.6.4 GitLab versions 10.2 through 14.7.1 Description: An issue in GitLab allows private project paths to be disclosed to unauthorized users via system notes when an Issue is...

4.3CVSS4.1AI score0.00304EPSS
Exploits1References10
FreeBSD
FreeBSD
added 2022/02/03 12:0 a.m.22 views

Gitlab -- multiple vulnerabilities

Gitlab reports: Arbitrary POST requests via special HTML attributes in Jupyter Notebooks DNS Rebinding vulnerability in Irker IRC Gateway integration Missing certificate validation for external CI services Blind SSRF Through Project Import Open redirect vulnerability in Jira Integration Issue lin...

9.1CVSS1.2AI score0.00304EPSS
Exploits6References1
Prion
Prion
added 2019/12/18 9:15 p.m.12 views

Information disclosure

An information disclosure vulnerability exists in GitLab CE/EE v12.3.2, v12.2.6, and v12.1.12 that allowed an attacker to view private system notes from a GraphQL endpoint...

5CVSS6.9AI score0.00566EPSS
Exploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2019/12/18 9:15 p.m.13 views

CVE-2019-15576

An information disclosure vulnerability exists in GitLab CE/EE v12.3.2, v12.2.6, and v12.1.12 that allowed an attacker to view private system notes from a GraphQL endpoint...

7.5CVSS7.1AI score0.00566EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2019/12/18 9:0 p.m.18 views

CVE-2019-15576

Removed by vendor...

7.5CVSS7.1AI score0.00566EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2019/10/03 12:0 a.m.60 views

FreeBSD : Gitlab -- Multiple Vulnerabilities (b17c86b9-e52e-11e9-86e9-001b217b3468)

SO-AND-SO reports : XSS in Markdown Preview Using Mermaid Bypass Email Verification using Salesforce Authentication Account Takeover using SAML Uncontrolled Resource Consumption in Markdown using Mermaid Disclosure of Private Project Path and Labels Disclosure of Assignees via Milestones Disclosu...

5.5CVSS7.6AI score0.00428EPSS
Exploits1References3
myhack58
myhack58
added 2011/06/25 12:0 a.m.33 views

High-speed Ankang School Site program v3. 1. 1 cookie injection vulnerability-vulnerability warning-the black bar safety net

PS:seems to be oyaya kernel. Use the system notes: 1. The present program consists of extreme well-being and development,the symbolic charge a little Fee for everyone to use! 2. The present system for sharing procedures,the user the freedom to choose whether to use,in use, any problems and losses...

7.3AI score
Exploits0
Rows per page
Query Builder