Filter
-Infinity
0
Trending
The RegisterCloud security explained: What’s left exposed?
First published (updated )
News
The RegisterGitLabAllocation of Resources Without Limits or Throttling in GitLab
4.3
First published (updated )
GitLab Community EditionInsufficient Granularity of Access Control in GitLab
5.2
First published (updated )
GitLabImproper Control of Generation of Code ('Code Injection') in GitLab
4.4
EPSS
0.01%
First published (updated )
GitLab Enterprise EditionImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
3.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab Community EditionImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
8.7
First published (updated )
GitLab Community EditionIncorrect Authorization in GitLab
7.5
First published (updated )
GitLabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
8.7
First published (updated )
GitLab 17.10End of life
First published (updated )
Arbitrary File Write CVE-2024-0402 in GitLab (Exploit)
First published (updated )
Social
redditNever miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
BleepingComputerGitLab patches critical authentication bypass vulnerabilities
First published (updated )
News
BleepingComputerGitLab Enterprise EditionIncorrect Authorization in GitLab
2.7
First published (updated )
GitLab Enterprise EditionAllocation of Resources Without Limits or Throttling in GitLab
6.5
First published (updated )
GitLab Enterprise EditionImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
3.7
First published (updated )
GitLabGeneration of Error Message Containing Sensitive Information in GitLab
4.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab Enterprise EditionAllocation of Resources Without Limits or Throttling in GitLab
6.5
First published (updated )
GitLab Enterprise EditionIncorrect Authorization in GitLab
4.3
First published (updated )
GitLab Community EditionIncorrect Authorization in GitLab
3.1
First published (updated )
GitLabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
7.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLabAuthorization Bypass Through User-Controlled Key in GitLab
5.4
First published (updated )
GitLab Community EditionImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
8.7
First published (updated )
GitLab Enterprise EditionImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
5.4
First published (updated )
GitLab 17.9Out of support
First published (updated )
GitLab Enterprise EditionAn issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, star…
6.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
GitLab Community EditionInsufficient Session Expiration in GitLab
4.2
First published (updated )
GitLab Community EditionExecution with Unnecessary Privileges in GitLab
9.6
First published (updated )
GitLab Community EditionExecution with Unnecessary Privileges in GitLab
4.4
First published (updated )
GitLab Enterprise EditionUnintended Proxy or Intermediary ('Confused Deputy') in GitLab
4.3
First published (updated )
GitLab Community EditionIncorrect Authorization in GitLab
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.