{"items":[{"id":"CVE-2026-121513","published":"2026-11-03T14:18:29.656Z","updated":"2026-11-03T15:29:27.373Z","title":"Out-of-bounds Write in µD3TN","severity":"HIGH","score":7.5,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2026-121512","published":"2026-11-03T14:18:19.652Z","updated":"2026-11-03T15:29:27.513Z","title":"Missing Release of Memory after Effective Lifetime in µD3TN","severity":"HIGH","score":7.5,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00448,"kevAdded":null},{"id":"CVE-2026-121511","published":"2026-11-03T14:18:14.654Z","updated":"2026-11-03T15:29:27.660Z","title":"Out-of-bounds Read in µD3TN","severity":"HIGH","score":7.1,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00144,"kevAdded":null},{"id":"CVE-2026-121510","published":"2026-11-03T14:18:09.653Z","updated":"2026-11-03T15:29:27.802Z","title":"Out-of-bounds Write in µD3TN","severity":"HIGH","score":7.5,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00448,"kevAdded":null},{"id":"CVE-2026-121508","published":"2026-11-03T14:17:59.669Z","updated":"2026-11-03T15:29:27.937Z","title":"Use After Free in µD3TN","severity":"MEDIUM","score":5.9,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00377,"kevAdded":null},{"id":"CVE-2026-121507","published":"2026-11-03T14:17:54.655Z","updated":"2026-11-03T15:29:28.089Z","title":"Double Free in µD3TN","severity":"MEDIUM","score":5.9,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00377,"kevAdded":null},{"id":"CVE-2026-121506","published":"2026-11-03T14:17:24.651Z","updated":"2026-11-03T15:29:28.236Z","title":"Out-of-bounds Write in NTPsec","severity":"HIGH","score":7.4,"vendor":"NTPsec","product":"NTPsec","kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2026-121505","published":"2026-11-03T14:17:09.654Z","updated":"2026-11-03T18:12:00.515Z","title":"Out-of-bounds Read in NTPsec","severity":"LOW","score":3.7,"vendor":"NTPsec","product":"NTPsec","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2026-110264","published":"2026-10-22T00:33:48.179Z","updated":"2026-10-30T23:20:24.882Z","title":"Integer Overflow or Wraparound in GitLab","severity":"CRITICAL","score":10,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01349,"kevAdded":null},{"id":"CVE-2026-12664","published":"2026-10-21T23:35:30.436Z","updated":"2026-10-23T10:58:25.345Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2026-13319","published":"2026-10-21T23:35:25.440Z","updated":"2026-10-30T17:18:23.068Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2026-14288","published":"2026-10-21T23:35:20.426Z","updated":"2026-10-30T17:18:23.207Z","title":"Use of Incorrectly-Resolved Name or Reference in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0026,"kevAdded":null},{"id":"CVE-2026-15723","published":"2026-10-21T23:35:15.434Z","updated":"2026-10-23T10:58:00.648Z","title":"Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2026-16255","published":"2026-10-21T23:35:10.428Z","updated":"2026-10-30T17:18:23.345Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00216,"kevAdded":null},{"id":"CVE-2026-103515","published":"2026-10-21T23:34:45.429Z","updated":"2026-10-30T17:18:23.480Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00232,"kevAdded":null},{"id":"CVE-2026-105711","published":"2026-10-21T23:34:30.427Z","updated":"2026-10-30T17:18:23.616Z","title":"Use of Cache Containing Sensitive Information in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2026-105777","published":"2026-10-21T23:34:25.440Z","updated":"2026-10-30T17:18:23.749Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00277,"kevAdded":null},{"id":"CVE-2026-112378","published":"2026-10-21T23:33:50.429Z","updated":"2026-10-30T17:35:25.066Z","title":"Use of Less Trusted Source in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00126,"kevAdded":null},{"id":"CVE-2026-112212","published":"2026-10-21T23:33:45.429Z","updated":"2026-10-30T17:33:45.464Z","title":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2026-112326","published":"2026-10-21T23:33:40.603Z","updated":"2026-10-30T17:30:54.664Z","title":"Improper Cleanup on Thrown Exception in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00182,"kevAdded":null},{"id":"CVE-2026-114490","published":"2026-10-21T15:34:11.363Z","updated":"2026-10-29T20:55:36.300Z","title":"Incorrect Authorization in hMailServer","severity":"HIGH","score":7.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2026-114489","published":"2026-10-21T15:34:06.371Z","updated":"2026-10-29T20:55:43.979Z","title":"Missing Authorization in hMailServer","severity":"HIGH","score":8.1,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2026-114479","published":"2026-10-21T15:12:50.851Z","updated":"2026-10-21T17:19:12.258Z","title":"Not Failing Securely ('Failing Open') in hMailServer","severity":"MEDIUM","score":5.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-114478","published":"2026-10-21T15:12:35.847Z","updated":"2026-10-29T20:55:51.043Z","title":"Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer","severity":"MEDIUM","score":5.9,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2026-114477","published":"2026-10-21T15:12:30.844Z","updated":"2026-10-29T20:55:57.794Z","title":"Missing Authorization in hMailServer","severity":"MEDIUM","score":4.3,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2026-114476","published":"2026-10-21T15:12:25.844Z","updated":"2026-10-29T20:56:06.397Z","title":"Incorrect Authorization in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00274,"kevAdded":null},{"id":"CVE-2026-114475","published":"2026-10-21T15:12:20.842Z","updated":"2026-10-29T20:56:12.860Z","title":"Missing Authorization in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-114474","published":"2026-10-21T15:12:15.849Z","updated":"2026-10-29T20:56:19.809Z","title":"Use of Less Trusted Source in hMailServer","severity":"MEDIUM","score":5.9,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2026-114473","published":"2026-10-21T15:12:05.843Z","updated":"2026-10-29T20:56:25.949Z","title":"Incorrect Authorization in hMailServer","severity":"MEDIUM","score":5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2026-114472","published":"2026-10-21T15:11:55.846Z","updated":"2026-10-29T20:56:32.293Z","title":"Insufficient Resource Pool in hMailServer","severity":"LOW","score":3.7,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2026-114471","published":"2026-10-21T15:11:50.847Z","updated":"2026-10-29T20:56:38.681Z","title":"Insertion of Sensitive Information into Log File in hMailServer","severity":"MEDIUM","score":4.7,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2026-114470","published":"2026-10-21T15:11:20.847Z","updated":"2026-10-29T20:56:45.205Z","title":"Cross-Site Request Forgery (CSRF) in hMailServer","severity":"MEDIUM","score":5.3,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2026-102486","published":"2026-10-21T15:04:01.274Z","updated":"2026-10-29T20:56:51.755Z","title":"Out-of-bounds Read in ntpsec","severity":"HIGH","score":7.5,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00548,"kevAdded":null},{"id":"CVE-2026-102485","published":"2026-10-21T15:03:51.277Z","updated":"2026-10-29T20:56:57.697Z","title":"Out-of-bounds Read in ntpsec","severity":"MEDIUM","score":5.2,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00181,"kevAdded":null},{"id":"CVE-2026-102484","published":"2026-10-21T15:03:46.313Z","updated":"2026-10-29T20:57:05.091Z","title":"Heap-based Buffer Overflow in ntpsec","severity":"MEDIUM","score":6.4,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2026-102483","published":"2026-10-21T15:03:41.276Z","updated":"2026-10-29T20:57:11.825Z","title":"Reachable Assertion in ntpsec","severity":"HIGH","score":7.5,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-107571","published":"2026-10-19T15:34:47.493Z","updated":"2026-10-20T19:27:48.906Z","title":"Incorrect Default Permissions in hMailServer","severity":"HIGH","score":7.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2026-107569","published":"2026-10-19T15:34:37.492Z","updated":"2026-10-20T19:27:26.604Z","title":"Unchecked Input for Loop Condition in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2026-107566","published":"2026-10-19T15:34:27.491Z","updated":"2026-10-20T19:25:48.560Z","title":"Missing Authorization in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00181,"kevAdded":null},{"id":"CVE-2026-107568","published":"2026-10-19T15:34:22.493Z","updated":"2026-10-20T19:26:59.743Z","title":"Missing Authorization in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2026-107567","published":"2026-10-19T15:34:17.494Z","updated":"2026-10-20T19:26:19.977Z","title":"Use of Less Trusted Source in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2026-96425","published":"2026-10-16T15:35:22.447Z","updated":"2026-10-18T13:54:07.958Z","title":"Incorrect Permission Assignment for Critical Resource in lomiri-download-manager","severity":"MEDIUM","score":5.5,"vendor":"UBports","product":"lomiri-download-manager","kev":false,"epss":0.00105,"kevAdded":null},{"id":"CVE-2026-96424","published":"2026-10-16T15:35:17.561Z","updated":"2026-10-18T13:54:08.107Z","title":"Incorrect Permission Assignment for Critical Resource in lomiri-download-manager","severity":"HIGH","score":7.8,"vendor":"UBports","product":"lomiri-download-manager","kev":false,"epss":0.00106,"kevAdded":null},{"id":"CVE-2026-18516","published":"2026-10-16T13:37:55.079Z","updated":"2026-10-18T13:54:08.252Z","title":"Improper Encoding or Escaping of Output in Crafty Controller","severity":"CRITICAL","score":9.6,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.00291,"kevAdded":null},{"id":"CVE-2026-90821","published":"2026-10-16T13:37:40.079Z","updated":"2026-10-16T15:20:20.502Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller","severity":"MEDIUM","score":5.4,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2026-109119","published":"2026-10-16T10:27:28.149Z","updated":"2026-10-16T13:31:33.847Z","title":"Missing Authorization in rdiffweb","severity":"HIGH","score":8.8,"vendor":"ikus-soft","product":"rdiffweb","kev":false,"epss":0.0038,"kevAdded":null},{"id":"CVE-2026-109118","published":"2026-10-16T10:27:18.156Z","updated":"2026-10-16T14:11:59.360Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rdiffweb","severity":"MEDIUM","score":4.6,"vendor":"ikus-soft","product":"rdiffweb","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2026-5954","published":"2026-10-13T01:10:06.167Z","updated":"2026-10-13T13:28:29.110Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2026-6567","published":"2026-10-13T01:09:46.171Z","updated":"2026-10-13T13:28:29.233Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2026-7767","published":"2026-10-13T01:09:21.168Z","updated":"2026-10-14T19:06:40.050Z","title":"URL Redirection to Untrusted Site ('Open Redirect') in GitLab","severity":"MEDIUM","score":5.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2026-9268","published":"2026-10-13T01:08:56.161Z","updated":"2026-10-14T19:07:16.325Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2026-14210","published":"2026-10-13T01:08:41.159Z","updated":"2026-10-14T19:10:51.219Z","title":"Insufficient Granularity of Access Control in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2026-14552","published":"2026-10-13T01:08:31.165Z","updated":"2026-10-14T19:11:28.242Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2026-14814","published":"2026-10-13T01:08:26.181Z","updated":"2026-10-14T10:51:05.365Z","title":"Permissive Regular Expression in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00386,"kevAdded":null},{"id":"CVE-2026-16275","published":"2026-10-13T01:08:16.170Z","updated":"2026-10-14T19:05:44.356Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2026-16301","published":"2026-10-13T01:08:11.162Z","updated":"2026-10-14T19:25:42.569Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-78335","published":"2026-10-13T01:08:01.174Z","updated":"2026-10-16T18:05:31.031Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2026-81839","published":"2026-10-13T01:07:51.174Z","updated":"2026-10-14T10:51:05.503Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00279,"kevAdded":null},{"id":"CVE-2026-82632","published":"2026-10-13T01:07:11.167Z","updated":"2026-10-16T18:00:51.552Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2026-84284","published":"2026-10-13T01:06:56.170Z","updated":"2026-10-22T11:14:53.647Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2026-85529","published":"2026-10-13T01:06:16.164Z","updated":"2026-10-14T19:12:36.538Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-92528","published":"2026-10-13T01:06:01.171Z","updated":"2026-10-14T19:13:09.114Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2026-92883","published":"2026-10-13T01:05:51.167Z","updated":"2026-10-14T19:13:38.570Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2026-97229","published":"2026-10-13T01:05:46.166Z","updated":"2026-10-30T23:18:16.598Z","title":"Integer Overflow or Wraparound in GitLab","severity":"CRITICAL","score":10,"vendor":"GitLab","product":"GitLab","kev":true,"epss":0.6522,"kevAdded":"2026-10-29"},{"id":"CVE-2026-96893","published":"2026-10-13T01:05:41.162Z","updated":"2026-10-14T10:51:05.742Z","title":"Improper Neutralization of Input Used for LLM Prompting in GitLab","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00584,"kevAdded":null},{"id":"CVE-2026-100104","published":"2026-10-13T01:05:36.165Z","updated":"2026-10-14T19:14:13.091Z","title":"Server-Side Request Forgery (SSRF) in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2026-100755","published":"2026-10-13T01:05:31.161Z","updated":"2026-10-14T19:04:37.788Z","title":"Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab","severity":"MEDIUM","score":4.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2026-101168","published":"2026-10-13T01:05:21.167Z","updated":"2026-10-14T19:04:08.702Z","title":"Insertion of Sensitive Information into Log File in GitLab","severity":"MEDIUM","score":6.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00157,"kevAdded":null},{"id":"CVE-2026-103549","published":"2026-10-13T01:05:11.166Z","updated":"2026-10-14T19:03:20.241Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2026-104661","published":"2026-10-13T01:05:06.282Z","updated":"2026-10-13T15:49:47.856Z","title":"Incorrect Privilege Assignment in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2026-105458","published":"2026-10-13T01:04:51.348Z","updated":"2026-10-13T15:49:47.992Z","title":"Reliance on Untrusted Inputs in a Security Decision in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2026-107586","published":"2026-10-08T15:11:24.474Z","updated":"2026-10-08T19:12:52.460Z","title":"Allocation of Resources Without Limits or Throttling in hMailServer","severity":"MEDIUM","score":4.3,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2026-107585","published":"2026-10-08T15:11:19.477Z","updated":"2026-10-08T19:13:35.529Z","title":"Allocation of Resources Without Limits or Throttling in hMailServer","severity":"MEDIUM","score":5.3,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00448,"kevAdded":null},{"id":"CVE-2026-107589","published":"2026-10-08T15:11:04.585Z","updated":"2026-10-08T19:14:14.226Z","title":"Authentication Bypass by Spoofing in Jacamar CI","severity":"HIGH","score":7.5,"vendor":"Jacamar CI","product":"Jacamar CI","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2026-107584","published":"2026-10-08T11:49:16.083Z","updated":"2026-10-08T17:34:40.561Z","title":"Not Failing Securely ('Failing Open') in hMailServer","severity":"HIGH","score":7.4,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2026-107583","published":"2026-10-08T11:49:06.081Z","updated":"2026-10-08T14:14:10.184Z","title":"Inefficient Algorithmic Complexity in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00257,"kevAdded":null},{"id":"CVE-2026-107587","published":"2026-10-08T11:49:01.081Z","updated":"2026-10-08T14:13:38.084Z","title":"Improper Certificate Validation in hMailServer","severity":"MEDIUM","score":5.9,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00169,"kevAdded":null},{"id":"CVE-2026-107582","published":"2026-10-08T11:48:26.083Z","updated":"2026-10-08T14:18:43.966Z","title":"Inefficient Algorithmic Complexity in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00257,"kevAdded":null},{"id":"CVE-2026-107581","published":"2026-10-08T11:47:16.084Z","updated":"2026-10-08T14:19:53.760Z","title":"Inefficient Algorithmic Complexity in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2026-107580","published":"2026-10-08T11:47:11.085Z","updated":"2026-10-08T14:20:26.210Z","title":"Inefficient Algorithmic Complexity in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00257,"kevAdded":null},{"id":"CVE-2026-107579","published":"2026-10-08T11:47:06.084Z","updated":"2026-10-08T14:18:19.902Z","title":"Inefficient Algorithmic Complexity in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00347,"kevAdded":null},{"id":"CVE-2026-107578","published":"2026-10-08T11:47:01.083Z","updated":"2026-10-08T14:17:57.729Z","title":"Improper Link Resolution Before File Access ('Link Following') in hMailServer","severity":"MEDIUM","score":6.7,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00073,"kevAdded":null},{"id":"CVE-2026-107576","published":"2026-10-08T11:46:56.083Z","updated":"2026-10-08T14:15:09.064Z","title":"Inefficient Algorithmic Complexity in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-107577","published":"2026-10-08T11:46:51.086Z","updated":"2026-10-08T14:17:33.868Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-107575","published":"2026-10-08T11:46:46.082Z","updated":"2026-10-08T14:17:04.989Z","title":"Inefficient Algorithmic Complexity in hMailServer","severity":"MEDIUM","score":5.3,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00387,"kevAdded":null},{"id":"CVE-2026-107572","published":"2026-10-08T11:46:41.080Z","updated":"2026-10-08T17:35:21.719Z","title":"Inefficient Regular Expression Complexity in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00307,"kevAdded":null},{"id":"CVE-2026-107573","published":"2026-10-08T11:46:31.080Z","updated":"2026-10-08T14:16:35.361Z","title":"Incorrect Default Permissions in hMailServer","severity":"HIGH","score":7.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2026-107574","published":"2026-10-08T11:46:26.206Z","updated":"2026-10-08T14:15:58.279Z","title":"Inefficient Algorithmic Complexity in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-107570","published":"2026-10-08T11:33:26.210Z","updated":"2026-10-09T23:07:33.453Z","title":"Use of Out-of-range Pointer Offset in mutt","severity":"LOW","score":2.5,"vendor":"mutt","product":"mutt","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2026-103011","published":"2026-10-08T10:53:15.629Z","updated":"2026-10-08T14:22:03.806Z","title":"Heap-based Buffer Overflow in hMailServer","severity":"MEDIUM","score":6.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2026-103010","published":"2026-10-08T10:53:10.627Z","updated":"2026-10-08T14:22:28.966Z","title":"Heap-based Buffer Overflow in hMailServer","severity":"HIGH","score":7.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2026-103647","published":"2026-10-08T10:53:05.628Z","updated":"2026-10-08T14:22:56.590Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in hMailServer","severity":"HIGH","score":8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00247,"kevAdded":null},{"id":"CVE-2026-103649","published":"2026-10-08T10:53:00.630Z","updated":"2026-10-08T14:24:21.363Z","title":"Synchronous Access of Remote Resource without Timeout in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-104659","published":"2026-10-08T10:52:55.630Z","updated":"2026-10-08T14:24:55.631Z","title":"Origin Validation Error in hMailServer","severity":"HIGH","score":7.5,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2026-104660","published":"2026-10-08T10:52:50.630Z","updated":"2026-10-08T14:25:20.499Z","title":"Missing Authorization in hMailServer","severity":"HIGH","score":7.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00107,"kevAdded":null},{"id":"CVE-2026-104658","published":"2026-10-08T10:52:45.630Z","updated":"2026-10-08T17:35:46.645Z","title":"Reliance on Untrusted Inputs in a Security Decision in hMailServer","severity":"HIGH","score":7.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.00114,"kevAdded":null},{"id":"CVE-2026-104704","published":"2026-10-08T10:52:40.630Z","updated":"2026-10-08T14:25:42.915Z","title":"Cleartext Transmission of Sensitive Information in hMailServer","severity":"HIGH","score":7.4,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2026-1403","published":"2026-10-07T20:05:40.112Z","updated":"2026-10-07T20:32:41.160Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00327,"kevAdded":null},{"id":"CVE-2026-103648","published":"2026-10-02T16:05:25.331Z","updated":"2026-10-03T15:52:55.709Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader","severity":"CRITICAL","score":9.1,"vendor":"demsking","product":"image-downloader","kev":false,"epss":0.00546,"kevAdded":null},{"id":"CVE-2026-90970","published":"2026-10-02T14:34:49.558Z","updated":"2026-10-02T16:48:01.744Z","title":"Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab AI Gateway","kev":false,"epss":0.17488,"kevAdded":null},{"id":"CVE-2026-82973","published":"2026-09-29T12:11:12.111Z","updated":"2026-09-29T14:35:12.368Z","title":"Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailbox","severity":"CRITICAL","score":9.4,"vendor":"psyb0t","product":"docker-mailbox","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2026-102437","published":"2026-09-29T12:06:02.947Z","updated":"2026-09-29T14:38:51.501Z","title":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix","severity":"HIGH","score":7.8,"vendor":"esengine","product":"DeepSeek-Reasonix","kev":false,"epss":0.01013,"kevAdded":null},{"id":"CVE-2026-4523","published":"2026-09-29T09:35:38.023Z","updated":"2026-09-29T15:39:42.680Z","title":"Missing Authorization in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2026-8937","published":"2026-09-29T09:35:33.015Z","updated":"2026-09-29T15:39:42.804Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00227,"kevAdded":null},{"id":"CVE-2026-10518","published":"2026-09-29T09:35:28.017Z","updated":"2026-09-29T15:39:42.928Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00227,"kevAdded":null},{"id":"CVE-2026-84739","published":"2026-09-29T09:34:28.011Z","updated":"2026-09-29T15:04:40.962Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00343,"kevAdded":null},{"id":"CVE-2026-95391","published":"2026-09-29T09:33:43.016Z","updated":"2026-09-29T15:39:43.067Z","title":"Use After Free in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00096,"kevAdded":null},{"id":"CVE-2026-95389","published":"2026-09-29T09:33:38.020Z","updated":"2026-09-29T15:17:14.877Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"HIGH","score":8.1,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00337,"kevAdded":null},{"id":"CVE-2026-95386","published":"2026-09-29T09:33:28.017Z","updated":"2026-09-29T15:18:27.228Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-95390","published":"2026-09-29T09:33:23.026Z","updated":"2026-09-29T15:19:23.798Z","title":"NULL Pointer Dereference in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2026-95395","published":"2026-09-29T09:33:18.011Z","updated":"2026-09-29T15:51:43.949Z","title":"Missing Release of Memory after Effective Lifetime in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2026-95387","published":"2026-09-29T09:33:13.021Z","updated":"2026-09-29T15:50:45.375Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"HIGH","score":8.1,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00264,"kevAdded":null},{"id":"CVE-2026-95394","published":"2026-09-29T09:33:08.011Z","updated":"2026-09-29T15:49:42.939Z","title":"Unchecked Input for Loop Condition in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2026-95393","published":"2026-09-29T09:33:03.014Z","updated":"2026-09-29T15:47:24.905Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2026-95392","published":"2026-09-29T09:32:58.023Z","updated":"2026-09-29T15:46:13.878Z","title":"Buffer Over-read in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2026-95388","published":"2026-09-29T09:31:13.021Z","updated":"2026-09-29T15:45:03.384Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2026-96422","published":"2026-09-29T09:31:08.020Z","updated":"2026-09-29T15:43:57.112Z","title":"Reachable Assertion in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00139,"kevAdded":null},{"id":"CVE-2026-96421","published":"2026-09-29T09:31:03.020Z","updated":"2026-09-29T15:42:23.522Z","title":"Improperly Controlled Sequential Memory Allocation in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2026-96417","published":"2026-09-29T09:30:58.021Z","updated":"2026-09-29T15:41:14.438Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2026-96418","published":"2026-09-29T09:30:53.027Z","updated":"2026-09-29T15:36:36.106Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2026-96419","published":"2026-09-29T09:30:48.021Z","updated":"2026-09-29T15:35:24.683Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2026-96420","published":"2026-09-29T09:30:43.018Z","updated":"2026-09-29T15:31:28.923Z","title":"Buffer Over-read in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2026-96423","published":"2026-09-29T09:30:38.019Z","updated":"2026-11-03T22:23:38.994Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2026-96416","published":"2026-09-29T09:30:33.022Z","updated":"2026-09-29T15:28:14.729Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2026-96415","published":"2026-09-29T09:30:28.050Z","updated":"2026-09-29T15:20:29.380Z","title":"Stack-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2026-100741","published":"2026-09-27T07:12:54.503Z","updated":"2026-09-28T13:31:30.984Z","title":"Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer","severity":"CRITICAL","score":9.8,"vendor":"Progressive Robot Ltd","product":"hMailServer","kev":false,"epss":0.01731,"kevAdded":null},{"id":"CVE-2026-89078","published":"2026-09-23T23:05:20.132Z","updated":"2026-10-30T23:19:15.012Z","title":"Double Free in GitLab","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00522,"kevAdded":null},{"id":"CVE-2026-92530","published":"2026-09-23T23:05:15.130Z","updated":"2026-09-24T13:25:13.603Z","title":"Use of Less Trusted Source in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00109,"kevAdded":null},{"id":"CVE-2026-92470","published":"2026-09-23T23:05:10.131Z","updated":"2026-09-24T14:38:46.234Z","title":"Missing Authorization in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2026-92529","published":"2026-09-23T23:05:00.130Z","updated":"2026-09-24T13:05:55.894Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2026-92874","published":"2026-09-23T23:04:55.130Z","updated":"2026-09-24T13:09:46.640Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2026-92628","published":"2026-09-23T23:04:50.132Z","updated":"2026-09-24T13:11:17.094Z","title":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2026-93577","published":"2026-09-23T23:04:45.296Z","updated":"2026-10-30T23:19:55.304Z","title":"Integer Overflow or Wraparound in GitLab","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0063,"kevAdded":null},{"id":"CVE-2026-93652","published":"2026-09-18T14:34:32.131Z","updated":"2026-09-18T17:23:04.623Z","title":"Integer Overflow or Wraparound in µD3TN","severity":"HIGH","score":7.5,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00546,"kevAdded":null},{"id":"CVE-2026-86341","published":"2026-09-16T07:55:46.338Z","updated":"2026-09-16T14:53:10.088Z","title":"Access Control Check Implemented After Asset is Accessed in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00364,"kevAdded":null},{"id":"CVE-2024-11222","published":"2026-09-16T06:35:30.821Z","updated":"2026-09-17T03:56:58.182Z","title":"Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2025-14871","published":"2026-09-16T06:34:50.820Z","updated":"2026-09-16T15:50:21.839Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2026-1168","published":"2026-09-16T06:34:35.819Z","updated":"2026-09-16T15:48:16.409Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2026-3855","published":"2026-09-16T06:34:30.822Z","updated":"2026-09-16T15:46:06.041Z","title":"Improper Control of Resource Identifiers ('Resource Injection') in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2026-7514","published":"2026-09-16T06:34:15.825Z","updated":"2026-09-16T15:45:18.169Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2026-8030","published":"2026-09-16T06:34:10.826Z","updated":"2026-09-16T15:44:34.452Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00506,"kevAdded":null},{"id":"CVE-2026-16794","published":"2026-09-16T06:33:50.822Z","updated":"2026-09-16T15:43:11.880Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2026-19619","published":"2026-09-16T06:33:40.829Z","updated":"2026-09-16T17:36:42.232Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":4.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00303,"kevAdded":null},{"id":"CVE-2026-78252","published":"2026-09-16T06:33:30.825Z","updated":"2026-09-16T15:41:47.657Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-79708","published":"2026-09-16T06:33:26.046Z","updated":"2026-09-16T15:39:28.393Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00383,"kevAdded":null},{"id":"CVE-2026-12910","published":"2026-09-15T17:36:06.594Z","updated":"2026-09-20T00:45:43.121Z","title":"Missing Authentication for Critical Function in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2026-13210","published":"2026-09-15T17:36:01.592Z","updated":"2026-09-20T00:45:43.263Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2026-82837","published":"2026-09-15T17:35:41.486Z","updated":"2026-09-20T00:45:43.401Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0023,"kevAdded":null},{"id":"CVE-2026-88765","published":"2026-09-15T17:05:55.281Z","updated":"2026-09-16T15:51:26.759Z","title":"Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00675,"kevAdded":null},{"id":"CVE-2026-85706","published":"2026-09-12T02:46:31.624Z","updated":"2026-09-23T21:03:18.163Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab","severity":"CRITICAL","score":10,"vendor":"GitLab","product":"GitLab","kev":true,"epss":0.97355,"kevAdded":"2026-09-11"},{"id":"CVE-2026-87719","published":"2026-09-12T02:46:26.755Z","updated":"2026-09-23T21:05:05.577Z","title":"Deserialization of Untrusted Data in GitLab","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00571,"kevAdded":null},{"id":"CVE-2026-4398","published":"2026-08-27T17:53:14.609Z","updated":"2026-08-28T14:13:54.361Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00242,"kevAdded":null},{"id":"CVE-2026-75871","published":"2026-08-27T16:33:55.451Z","updated":"2026-08-27T18:58:34.704Z","title":"Server-Side Request Forgery (SSRF) in GitLab AI Gateway","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab AI Gateway","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2026-19889","published":"2026-08-27T16:33:50.570Z","updated":"2026-08-27T19:00:15.667Z","title":"Server-Side Request Forgery (SSRF) in GitLab AI Gateway","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab AI Gateway","kev":false,"epss":0.00355,"kevAdded":null},{"id":"CVE-2025-10903","published":"2026-08-26T13:37:00.097Z","updated":"2026-08-26T15:43:12.549Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00525,"kevAdded":null},{"id":"CVE-2026-3035","published":"2026-08-26T13:36:45.137Z","updated":"2026-08-26T15:41:48.692Z","title":"Authentication Bypass Using an Alternate Path or Channel in GitLab","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00315,"kevAdded":null},{"id":"CVE-2026-7487","published":"2026-08-26T13:36:25.081Z","updated":"2026-08-26T15:41:22.945Z","title":"Access Control Check Implemented After Asset is Accessed in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2026-15387","published":"2026-08-26T13:36:05.088Z","updated":"2026-08-26T15:40:50.442Z","title":"Acceptance of Extraneous Untrusted Data With Trusted Data in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2026-18252","published":"2026-08-26T13:36:00.100Z","updated":"2026-08-27T03:57:14.567Z","title":"Inclusion of Functionality from Untrusted Control Sphere in GitLab","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2026-77801","published":"2026-08-26T13:35:45.203Z","updated":"2026-08-26T15:55:52.127Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2026-10053","published":"2026-08-23T09:27:01.138Z","updated":"2026-08-25T03:55:48.856Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00914,"kevAdded":null},{"id":"CVE-2026-78155","published":"2026-08-23T09:26:46.103Z","updated":"2026-08-24T13:01:19.426Z","title":"Untrusted Search Path in StackGres","severity":"CRITICAL","score":9.9,"vendor":"OnGres","product":"StackGres","kev":false,"epss":0.00518,"kevAdded":null},{"id":"CVE-2026-76929","published":"2026-08-19T23:00:21.513Z","updated":"2026-08-20T16:27:30.288Z","title":"Out-of-bounds Read in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00131,"kevAdded":null},{"id":"CVE-2026-76928","published":"2026-08-19T23:00:16.512Z","updated":"2026-08-20T16:27:30.441Z","title":"NULL Pointer Dereference in Wireshark","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00318,"kevAdded":null},{"id":"CVE-2026-76927","published":"2026-08-19T23:00:11.516Z","updated":"2026-09-17T18:48:41.164Z","title":"NULL Pointer Dereference in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2026-76926","published":"2026-08-19T23:00:06.514Z","updated":"2026-08-20T15:26:28.415Z","title":"Reachable Assertion in Wireshark","severity":"LOW","score":3.1,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2026-76891","published":"2026-08-19T22:46:40.525Z","updated":"2026-09-17T18:47:20.810Z","title":"Expired Pointer Dereference in Wireshark","severity":"LOW","score":3.1,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2026-76890","published":"2026-08-19T22:46:35.515Z","updated":"2026-09-17T18:47:04.211Z","title":"Expired Pointer Dereference in Wireshark","severity":"LOW","score":3.1,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2026-76885","published":"2026-08-19T22:46:30.521Z","updated":"2026-09-17T18:46:01.603Z","title":"Buffer Over-read in Wireshark","severity":"LOW","score":3.1,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2026-76924","published":"2026-08-19T22:45:35.518Z","updated":"2026-09-17T18:48:25.639Z","title":"Out-of-bounds Read in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2026-76923","published":"2026-08-19T22:45:30.519Z","updated":"2026-08-20T15:26:29.159Z","title":"Out-of-bounds Read in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2026-76922","published":"2026-08-19T22:45:25.530Z","updated":"2026-09-17T18:48:09.980Z","title":"NULL Pointer Dereference in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2026-76921","published":"2026-08-19T22:45:20.517Z","updated":"2026-08-20T15:26:29.457Z","title":"Use After Free in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2026-76920","published":"2026-08-19T22:45:15.519Z","updated":"2026-08-20T15:26:29.604Z","title":"Out-of-bounds Write in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2026-76919","published":"2026-08-19T22:45:10.520Z","updated":"2026-09-17T18:47:52.348Z","title":"Use of Uninitialized Variable in Wireshark","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2026-76918","published":"2026-08-19T22:45:05.531Z","updated":"2026-08-20T15:26:29.901Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2026-76917","published":"2026-08-19T22:44:10.523Z","updated":"2026-09-17T18:47:36.278Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2026-76880","published":"2026-08-19T22:44:05.539Z","updated":"2026-08-20T15:26:30.315Z","title":"Out-of-bounds Write in Wireshark","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2026-76879","published":"2026-08-19T22:44:00.527Z","updated":"2026-09-17T18:44:57.877Z","title":"Stack-based Buffer Overflow in Wireshark","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2026-76889","published":"2026-08-19T22:35:39.921Z","updated":"2026-09-17T18:46:48.139Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2026-76888","published":"2026-08-19T22:35:34.923Z","updated":"2026-09-17T18:46:31.056Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"LOW","score":3.1,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2026-76887","published":"2026-08-19T22:35:29.925Z","updated":"2026-09-17T18:46:16.633Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"LOW","score":3.1,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2026-76886","published":"2026-08-19T22:35:24.922Z","updated":"2026-08-20T15:01:54.161Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"HIGH","score":8.1,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2026-76884","published":"2026-08-19T22:35:14.923Z","updated":"2026-09-17T18:45:45.134Z","title":"Buffer Over-read in Wireshark","severity":"LOW","score":3.1,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2026-76883","published":"2026-08-19T22:35:09.922Z","updated":"2026-09-17T18:45:28.901Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2026-76882","published":"2026-08-19T22:35:04.927Z","updated":"2026-09-17T18:45:13.885Z","title":"Out-of-bounds Read in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2026-76881","published":"2026-08-19T22:34:59.927Z","updated":"2026-08-20T15:00:57.084Z","title":"NULL Pointer Dereference in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2026-19650","published":"2026-08-17T20:04:56.287Z","updated":"2026-08-17T20:44:54.963Z","title":"Cross-Site Request Forgery (CSRF) in GitLab","severity":"HIGH","score":7.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2026-19478","published":"2026-08-17T20:04:46.400Z","updated":"2026-08-17T20:44:03.074Z","title":"Improper Control of Generation of Code ('Code Injection') in GitLab","severity":"CRITICAL","score":9.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.02155,"kevAdded":null},{"id":"CVE-2026-19694","published":"2026-08-13T08:04:39.162Z","updated":"2026-08-13T14:20:09.086Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2026-19695","published":"2026-08-13T08:04:34.168Z","updated":"2026-08-13T14:19:21.623Z","title":"Stack-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00118,"kevAdded":null},{"id":"CVE-2026-19696","published":"2026-08-13T08:04:29.277Z","updated":"2026-08-13T14:18:35.378Z","title":"Out-of-bounds Write in Wireshark","severity":"MEDIUM","score":6.6,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2025-9486","published":"2026-08-12T19:05:46.417Z","updated":"2026-08-13T12:30:47.213Z","title":"Incorrect Privilege Assignment in GitLab","severity":"LOW","score":3.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2026-4879","published":"2026-08-12T19:05:11.422Z","updated":"2026-08-13T12:25:15.632Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2026-6821","published":"2026-08-12T19:05:06.419Z","updated":"2026-08-13T15:31:22.901Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2026-15217","published":"2026-08-12T19:04:51.420Z","updated":"2026-08-13T14:40:06.098Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00525,"kevAdded":null},{"id":"CVE-2026-15216","published":"2026-08-12T19:04:46.419Z","updated":"2026-08-13T14:40:53.789Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00525,"kevAdded":null},{"id":"CVE-2026-16494","published":"2026-08-12T19:04:36.421Z","updated":"2026-08-13T14:41:39.675Z","title":"Missing Authorization in GitLab","severity":"HIGH","score":7.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2026-18433","published":"2026-08-12T19:04:26.420Z","updated":"2026-08-13T14:42:24.418Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2026-19228","published":"2026-08-12T19:04:16.530Z","updated":"2026-08-13T14:43:02.808Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00352,"kevAdded":null},{"id":"CVE-2026-7427","published":"2026-08-12T18:06:10.271Z","updated":"2026-08-13T14:55:04.449Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00618,"kevAdded":null},{"id":"CVE-2026-8667","published":"2026-08-12T18:06:00.271Z","updated":"2026-08-13T14:56:08.625Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2026-15423","published":"2026-08-12T18:05:50.271Z","updated":"2026-08-13T14:57:10.045Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.004,"kevAdded":null},{"id":"CVE-2026-16627","published":"2026-08-12T18:05:40.268Z","updated":"2026-08-13T03:55:50.759Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2026-18244","published":"2026-08-12T18:05:30.375Z","updated":"2026-08-13T15:03:21.129Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00281,"kevAdded":null},{"id":"CVE-2026-13716","published":"2026-08-11T06:05:12.457Z","updated":"2026-08-11T16:58:17.980Z","title":"Path Traversal: '.../...//' in Crafty Controller","severity":"CRITICAL","score":9.1,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.00802,"kevAdded":null},{"id":"CVE-2026-18258","published":"2026-08-06T15:11:28.257Z","updated":"2026-08-06T15:45:45.358Z","title":"Authorization Bypass Through User-Controlled Key in eScriptorium","severity":"HIGH","score":8.8,"vendor":"Scripta","product":"eScriptorium","kev":false,"epss":0.00528,"kevAdded":null},{"id":"CVE-2026-18277","published":"2026-08-06T15:11:23.252Z","updated":"2026-08-06T15:46:08.198Z","title":"Missing Authorization in eScriptorium","severity":"HIGH","score":7.1,"vendor":"Scripta","product":"eScriptorium","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2026-18359","published":"2026-08-06T15:11:13.252Z","updated":"2026-08-06T15:46:28.026Z","title":"Server-Side Request Forgery (SSRF) in eScriptorium","severity":"HIGH","score":8.5,"vendor":"Scripta","product":"eScriptorium","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2026-18275","published":"2026-08-06T15:11:08.255Z","updated":"2026-08-06T15:46:45.820Z","title":"Authorization Bypass Through User-Controlled Key in eScriptorium","severity":"MEDIUM","score":6.5,"vendor":"Scripta","product":"eScriptorium","kev":false,"epss":0.0039,"kevAdded":null},{"id":"CVE-2026-18276","published":"2026-08-06T15:11:03.369Z","updated":"2026-08-06T15:47:06.237Z","title":"Missing Authorization in eScriptorium","severity":"MEDIUM","score":4.3,"vendor":"Scripta","product":"eScriptorium","kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2026-18321","published":"2026-07-31T18:04:06.697Z","updated":"2026-07-31T18:54:10.546Z","title":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in ntpsec","severity":"MEDIUM","score":4.7,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00111,"kevAdded":null},{"id":"CVE-2025-14562","published":"2026-07-29T19:02:26.038Z","updated":"2026-07-29T19:33:59.228Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00284,"kevAdded":null},{"id":"CVE-2026-3093","published":"2026-07-29T19:02:11.038Z","updated":"2026-07-29T19:34:59.534Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":4.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00286,"kevAdded":null},{"id":"CVE-2026-4672","published":"2026-07-29T19:01:31.039Z","updated":"2026-07-29T19:35:54.247Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2026-6267","published":"2026-07-29T19:01:16.040Z","updated":"2026-07-31T16:10:45.590Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00613,"kevAdded":null},{"id":"CVE-2026-6336","published":"2026-07-29T19:01:06.041Z","updated":"2026-07-29T19:40:48.747Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2026-12436","published":"2026-07-29T19:00:36.048Z","updated":"2026-07-31T16:10:56.005Z","title":"Improperly Controlled Modification of Dynamically-Determined Object Attributes in GitLab","severity":"HIGH","score":8.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2026-13113","published":"2026-07-29T19:00:31.041Z","updated":"2026-08-20T13:55:43.159Z","title":"Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00257,"kevAdded":null},{"id":"CVE-2026-14341","published":"2026-07-29T19:00:21.052Z","updated":"2026-07-29T19:45:32.122Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2026-14351","published":"2026-07-29T19:00:16.040Z","updated":"2026-07-29T19:33:59.070Z","title":"Exposure of Sensitive Information Through Metadata in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2026-15077","published":"2026-07-29T19:00:11.047Z","updated":"2026-07-29T19:33:20.717Z","title":"Improper Neutralization of Input Used for LLM Prompting in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2026-15831","published":"2026-07-29T19:00:01.048Z","updated":"2026-07-29T19:32:52.354Z","title":"Generation of Incorrect Security Tokens in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2026-15975","published":"2026-07-29T18:59:56.043Z","updated":"2026-07-29T19:32:20.549Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00509,"kevAdded":null},{"id":"CVE-2026-16553","published":"2026-07-29T18:59:46.164Z","updated":"2026-07-29T19:31:40.245Z","title":"Insufficiently Protected Credentials in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2026-18257","published":"2026-07-29T16:34:09.688Z","updated":"2026-07-29T18:04:53.132Z","title":"Improper Certificate Validation in S2OPC","severity":"MEDIUM","score":5.6,"vendor":"Systerel","product":"S2OPC","kev":false,"epss":0.00155,"kevAdded":null},{"id":"CVE-2026-15168","published":"2026-07-08T21:47:19.856Z","updated":"2026-07-09T13:54:17.773Z","title":"Use of Uninitialized Variable in Wireshark","severity":"LOW","score":2.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2026-15166","published":"2026-07-08T20:55:55.070Z","updated":"2026-07-09T13:13:51.109Z","title":"Stack-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2026-15174","published":"2026-07-08T20:51:25.274Z","updated":"2026-07-09T13:14:37.906Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2026-15172","published":"2026-07-08T20:51:20.287Z","updated":"2026-07-09T13:42:52.886Z","title":"Unchecked Input for Loop Condition in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2026-15173","published":"2026-07-08T20:51:15.275Z","updated":"2026-07-09T13:44:23.196Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00129,"kevAdded":null},{"id":"CVE-2026-15171","published":"2026-07-08T20:51:10.283Z","updated":"2026-07-09T13:44:55.663Z","title":"NULL Pointer Dereference in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2026-15169","published":"2026-07-08T20:51:05.273Z","updated":"2026-07-09T13:45:27.007Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2026-15167","published":"2026-07-08T20:51:00.295Z","updated":"2026-07-09T13:45:58.260Z","title":"Stack-based Buffer Overflow in Wireshark","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2026-15170","published":"2026-07-08T20:50:50.275Z","updated":"2026-07-09T13:46:30.782Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2026-15165","published":"2026-07-08T20:50:45.283Z","updated":"2026-07-09T13:47:02.064Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2026-15163","published":"2026-07-08T20:50:40.278Z","updated":"2026-07-09T13:49:25.283Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2026-15164","published":"2026-07-08T20:50:35.393Z","updated":"2026-07-09T13:50:08.985Z","title":"Heap-based Buffer Overflow in ciscodump","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"ciscodump","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2025-12506","published":"2026-07-08T20:47:28.863Z","updated":"2026-07-09T13:53:34.205Z","title":"Use of Incorrectly-Resolved Name or Reference in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00326,"kevAdded":null},{"id":"CVE-2026-6352","published":"2026-07-08T20:46:43.862Z","updated":"2026-07-09T14:13:17.427Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00439,"kevAdded":null},{"id":"CVE-2026-6896","published":"2026-07-08T20:46:38.858Z","updated":"2026-07-09T14:13:51.367Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2026-7492","published":"2026-07-08T20:46:33.861Z","updated":"2026-07-09T14:14:15.159Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00346,"kevAdded":null},{"id":"CVE-2026-8472","published":"2026-07-08T20:46:28.855Z","updated":"2026-07-09T14:14:43.271Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2026-11827","published":"2026-07-08T20:46:23.863Z","updated":"2026-07-09T14:15:01.193Z","title":"Insufficiently Protected Credentials in GitLab","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00444,"kevAdded":null},{"id":"CVE-2026-13320","published":"2026-07-08T20:46:13.854Z","updated":"2026-07-09T13:41:48.373Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2026-10086","published":"2026-06-25T05:03:58.451Z","updated":"2026-06-26T03:55:20.860Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2026-0934","published":"2026-06-25T04:35:54.038Z","updated":"2026-06-25T12:50:22.510Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00326,"kevAdded":null},{"id":"CVE-2026-1606","published":"2026-06-25T04:34:59.038Z","updated":"2026-06-25T12:55:06.795Z","title":"Improper Control of Generation of Code ('Code Injection') in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2026-2238","published":"2026-06-25T04:34:54.041Z","updated":"2026-06-25T12:56:58.304Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00472,"kevAdded":null},{"id":"CVE-2026-3176","published":"2026-06-25T04:34:39.038Z","updated":"2026-06-25T12:58:45.561Z","title":"Missing Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2026-5309","published":"2026-06-25T04:34:29.038Z","updated":"2026-06-25T13:02:04.632Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00348,"kevAdded":null},{"id":"CVE-2026-5796","published":"2026-06-25T04:34:24.040Z","updated":"2026-06-25T13:03:08.906Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2026-5952","published":"2026-06-25T04:34:14.043Z","updated":"2026-06-25T13:07:25.242Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2026-8330","published":"2026-06-25T04:34:04.042Z","updated":"2026-06-25T13:09:32.205Z","title":"Insertion of Sensitive Information into Log File in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2026-10712","published":"2026-06-25T04:33:54.043Z","updated":"2026-06-26T03:55:21.959Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2026-11379","published":"2026-06-25T04:33:49.041Z","updated":"2026-06-25T13:11:32.968Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0034,"kevAdded":null},{"id":"CVE-2026-12053","published":"2026-06-25T04:33:44.039Z","updated":"2026-06-25T13:19:41.535Z","title":"Insertion of Sensitive Information into Log File in GitLab","severity":"HIGH","score":8.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00627,"kevAdded":null},{"id":"CVE-2026-12635","published":"2026-06-25T04:33:34.156Z","updated":"2026-06-25T13:25:43.223Z","title":"Reliance on Reverse DNS Resolution for a Security-Critical Action in GitLab","severity":"NONE","score":0,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2026-11968","published":"2026-06-24T09:33:49.575Z","updated":"2026-06-24T12:01:06.166Z","title":"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in TortoiseGit","severity":"MEDIUM","score":5.5,"vendor":"TortoiseGit team","product":"TortoiseGit","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2026-1500","published":"2026-06-11T10:21:51.428Z","updated":"2026-06-11T12:20:51.347Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-3553","published":"2026-06-11T10:21:26.429Z","updated":"2026-06-11T12:28:57.450Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00236,"kevAdded":null},{"id":"CVE-2026-6269","published":"2026-06-11T10:20:41.430Z","updated":"2026-06-11T12:30:06.368Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2026-6277","published":"2026-06-11T10:20:31.429Z","updated":"2026-06-11T12:31:03.704Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2026-6976","published":"2026-06-11T10:20:11.436Z","updated":"2026-06-11T12:33:23.414Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2026-7250","published":"2026-06-11T10:20:06.443Z","updated":"2026-06-11T12:27:15.170Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2026-8589","published":"2026-06-11T10:20:01.515Z","updated":"2026-06-11T12:28:51.255Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2026-9204","published":"2026-06-11T10:19:51.431Z","updated":"2026-06-11T12:38:17.055Z","title":"Server-Side Request Forgery (SSRF) in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00247,"kevAdded":null},{"id":"CVE-2026-9694","published":"2026-06-11T10:19:46.466Z","updated":"2026-06-11T12:38:55.300Z","title":"Improper Neutralization of Substitution Characters in GitLab","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2026-10087","published":"2026-06-11T10:19:41.424Z","updated":"2026-06-11T12:39:51.628Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2026-10733","published":"2026-06-11T10:19:27.101Z","updated":"2026-06-11T12:40:20.729Z","title":"Improper Restriction of Rendered UI Layers or Frames in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2026-9758","published":"2026-06-10T12:32:39.183Z","updated":"2026-06-10T13:54:59.235Z","title":"Improper Certificate Validation in S2OPC","severity":"HIGH","score":7.3,"vendor":"Systerel","product":"S2OPC","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2026-6899","published":"2026-06-09T08:39:00.495Z","updated":"2026-06-09T14:25:59.888Z","title":"Improper Check for Certificate Revocation in S2OPC","severity":"MEDIUM","score":5.6,"vendor":"Systerel","product":"S2OPC","kev":false,"epss":0.00108,"kevAdded":null},{"id":"CVE-2026-9807","published":"2026-05-28T07:34:37.630Z","updated":"2026-05-28T12:11:19.756Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2026-9759","published":"2026-05-27T18:33:18.742Z","updated":"2026-05-27T19:36:26.557Z","title":"NULL Pointer Dereference in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00092,"kevAdded":null},{"id":"CVE-2026-1402","published":"2026-05-27T17:55:48.942Z","updated":"2026-05-27T18:53:49.218Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2026-2601","published":"2026-05-27T17:55:38.935Z","updated":"2026-05-27T19:04:49.153Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2026-4868","published":"2026-05-27T17:55:23.935Z","updated":"2026-05-28T03:55:58.116Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00427,"kevAdded":null},{"id":"CVE-2026-5296","published":"2026-05-27T17:55:18.937Z","updated":"2026-05-27T19:01:02.944Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2026-6713","published":"2026-05-27T17:55:13.955Z","updated":"2026-05-27T19:22:57.385Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2026-8716","published":"2026-05-27T17:54:59.110Z","updated":"2026-05-27T19:36:40.034Z","title":"Use of Incorrectly-Resolved Name or Reference in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00187,"kevAdded":null},{"id":"CVE-2025-12669","published":"2026-05-14T05:38:37.338Z","updated":"2026-05-14T17:47:03.748Z","title":"Improper Control of Generation of Code ('Code Injection') in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2025-13874","published":"2026-05-14T05:38:27.341Z","updated":"2026-05-14T17:45:08.662Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00227,"kevAdded":null},{"id":"CVE-2025-14869","published":"2026-05-14T05:38:02.894Z","updated":"2026-05-14T17:44:06.082Z","title":"Improper Validation of Specified Quantity in Input in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2025-14870","published":"2026-05-14T05:37:32.535Z","updated":"2026-05-14T13:03:02.406Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00339,"kevAdded":null},{"id":"CVE-2026-1184","published":"2026-05-14T05:37:02.391Z","updated":"2026-05-14T13:04:20.915Z","title":"Deserialization of Untrusted Data in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2026-1322","published":"2026-05-14T05:36:47.351Z","updated":"2026-05-14T13:05:16.129Z","title":"Business Logic Errors in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00311,"kevAdded":null},{"id":"CVE-2026-1338","published":"2026-05-14T05:36:42.333Z","updated":"2026-05-14T13:05:58.427Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2026-1659","published":"2026-05-14T05:36:32.362Z","updated":"2026-05-14T13:00:59.317Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00355,"kevAdded":null},{"id":"CVE-2026-2900","published":"2026-05-14T05:36:17.336Z","updated":"2026-05-14T13:07:17.299Z","title":"Missing Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2026-3073","published":"2026-05-14T05:36:12.338Z","updated":"2026-05-14T13:07:50.839Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2026-3074","published":"2026-05-14T05:36:02.934Z","updated":"2026-05-14T13:08:28.045Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2026-3160","published":"2026-05-14T05:35:57.340Z","updated":"2026-05-14T13:09:24.780Z","title":"Unintended Proxy or Intermediary ('Confused Deputy') in GitLab","severity":"MEDIUM","score":5.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2026-3607","published":"2026-05-14T05:35:42.338Z","updated":"2026-05-14T13:06:45.555Z","title":"Access Control Check Implemented After Asset is Accessed in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00275,"kevAdded":null},{"id":"CVE-2026-4524","published":"2026-05-14T05:34:52.339Z","updated":"2026-05-14T13:23:21.379Z","title":"Authentication Bypass Using an Alternate Path or Channel in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00291,"kevAdded":null},{"id":"CVE-2026-4527","published":"2026-05-14T05:34:32.344Z","updated":"2026-05-14T13:22:37.251Z","title":"Cross-Site Request Forgery (CSRF) in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2026-6063","published":"2026-05-14T05:34:12.358Z","updated":"2026-05-14T13:21:53.278Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2026-6073","published":"2026-05-14T05:34:07.338Z","updated":"2026-05-15T03:55:46.640Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-6335","published":"2026-05-14T05:33:57.334Z","updated":"2026-05-15T09:58:59.492Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2026-6883","published":"2026-05-14T05:33:52.339Z","updated":"2026-05-14T13:14:42.194Z","title":"Missing Authorization in GitLab","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2026-7377","published":"2026-05-14T05:33:42.345Z","updated":"2026-05-15T03:55:50.629Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2026-7471","published":"2026-05-14T05:33:37.334Z","updated":"2026-05-14T13:17:54.408Z","title":"Server-Side Request Forgery (SSRF) in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-7481","published":"2026-05-14T05:33:32.366Z","updated":"2026-05-15T03:55:51.754Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2026-8280","published":"2026-05-14T05:33:22.338Z","updated":"2026-05-14T13:15:30.549Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00295,"kevAdded":null},{"id":"CVE-2026-8144","published":"2026-05-14T05:33:17.465Z","updated":"2026-05-14T13:49:09.445Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00181,"kevAdded":null},{"id":"CVE-2026-6525","published":"2026-05-02T11:33:33.147Z","updated":"2026-05-04T14:59:08.976Z","title":"NULL Pointer Dereference in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2026-5404","published":"2026-04-30T23:04:08.537Z","updated":"2026-05-01T14:20:15.602Z","title":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2026-5403","published":"2026-04-30T23:04:03.523Z","updated":"2026-07-15T00:43:53.843Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2026-5656","published":"2026-04-30T23:03:58.516Z","updated":"2026-07-15T00:42:33.553Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark","severity":"HIGH","score":7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2026-5405","published":"2026-04-30T23:03:53.654Z","updated":"2026-07-15T00:43:51.365Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2026-5409","published":"2026-04-30T05:41:19.212Z","updated":"2026-04-30T12:58:18.159Z","title":"Uncontrolled Recursion in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2026-5408","published":"2026-04-30T05:40:59.205Z","updated":"2026-04-30T12:51:52.698Z","title":"Uncontrolled Recursion in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2026-5406","published":"2026-04-30T05:40:24.223Z","updated":"2026-04-30T12:56:20.888Z","title":"Uncontrolled Recursion in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2026-5407","published":"2026-04-30T05:39:29.251Z","updated":"2026-04-30T12:54:35.494Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2026-5299","published":"2026-04-30T05:39:24.216Z","updated":"2026-04-30T12:53:49.555Z","title":"Uncontrolled Recursion in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2026-5402","published":"2026-04-30T05:39:14.217Z","updated":"2026-07-15T00:43:56.702Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"HIGH","score":8.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0039,"kevAdded":null},{"id":"CVE-2026-5401","published":"2026-04-30T05:39:09.207Z","updated":"2026-04-30T13:00:48.178Z","title":"Uncontrolled Recursion in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2026-5654","published":"2026-04-30T05:39:04.227Z","updated":"2026-04-30T13:02:57.653Z","title":"Stack-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00206,"kevAdded":null},{"id":"CVE-2026-5655","published":"2026-04-30T05:38:59.211Z","updated":"2026-04-30T12:52:43.399Z","title":"Use After Free in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00206,"kevAdded":null},{"id":"CVE-2026-5657","published":"2026-04-30T05:38:54.201Z","updated":"2026-04-30T12:45:26.656Z","title":"Double Free in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00206,"kevAdded":null},{"id":"CVE-2026-5653","published":"2026-04-30T05:38:49.245Z","updated":"2026-04-30T12:51:06.316Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00206,"kevAdded":null},{"id":"CVE-2026-6538","published":"2026-04-30T05:38:34.353Z","updated":"2026-04-30T12:50:22.346Z","title":"Stack-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2026-6537","published":"2026-04-30T05:37:59.221Z","updated":"2026-04-30T12:49:48.987Z","title":"Stack-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2026-6536","published":"2026-04-30T05:36:59.213Z","updated":"2026-04-30T12:46:16.109Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2026-6535","published":"2026-04-30T05:36:49.218Z","updated":"2026-04-30T12:31:36.338Z","title":"Improperly Controlled Sequential Memory Allocation in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2026-6534","published":"2026-04-30T05:36:44.216Z","updated":"2026-04-30T12:48:49.296Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2026-6533","published":"2026-04-30T05:36:39.300Z","updated":"2026-04-30T12:35:09.262Z","title":"Improperly Controlled Sequential Memory Allocation in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2026-6532","published":"2026-04-30T05:36:34.222Z","updated":"2026-04-30T12:34:29.690Z","title":"Buffer Over-read in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2026-6531","published":"2026-04-30T05:36:29.251Z","updated":"2026-04-30T13:04:58.095Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-6530","published":"2026-04-30T05:36:24.210Z","updated":"2026-04-30T13:14:06.742Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2026-6529","published":"2026-04-30T05:36:14.210Z","updated":"2026-04-30T15:19:22.354Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2026-6528","published":"2026-04-30T05:36:04.243Z","updated":"2026-04-30T15:19:29.664Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00141,"kevAdded":null},{"id":"CVE-2026-6527","published":"2026-04-30T05:35:29.246Z","updated":"2026-04-30T15:19:37.482Z","title":"Uncontrolled Recursion in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2026-6526","published":"2026-04-30T05:34:29.214Z","updated":"2026-04-30T15:19:46.683Z","title":"NULL Pointer Dereference in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2026-6524","published":"2026-04-30T05:34:19.201Z","updated":"2026-04-30T15:19:54.077Z","title":"Access of Uninitialized Pointer in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2026-6523","published":"2026-04-30T05:34:14.217Z","updated":"2026-04-30T15:20:03.000Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2026-6521","published":"2026-04-30T05:34:09.211Z","updated":"2026-04-30T15:20:12.427Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00143,"kevAdded":null},{"id":"CVE-2026-6520","published":"2026-04-30T05:34:04.217Z","updated":"2026-04-30T15:20:22.200Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-6519","published":"2026-04-30T05:33:59.213Z","updated":"2026-04-30T12:32:21.685Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-6522","published":"2026-04-30T05:33:54.211Z","updated":"2026-04-30T12:47:52.863Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00122,"kevAdded":null},{"id":"CVE-2026-6870","published":"2026-04-30T05:33:44.224Z","updated":"2026-04-30T12:25:36.207Z","title":"Access of Uninitialized Pointer in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0016,"kevAdded":null},{"id":"CVE-2026-6869","published":"2026-04-30T05:33:39.211Z","updated":"2026-04-30T12:47:07.534Z","title":"Improperly Controlled Sequential Memory Allocation in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2026-6867","published":"2026-04-30T05:33:34.283Z","updated":"2026-04-30T15:20:39.343Z","title":"Improperly Controlled Sequential Memory Allocation in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00124,"kevAdded":null},{"id":"CVE-2026-6868","published":"2026-04-30T05:04:30.622Z","updated":"2026-04-30T15:20:49.496Z","title":"Stack-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2026-7378","published":"2026-04-30T05:04:25.612Z","updated":"2026-04-30T15:21:01.242Z","title":"Heap-based Buffer Overflow in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2026-7379","published":"2026-04-30T05:04:20.609Z","updated":"2026-04-30T15:21:14.812Z","title":"Missing Release of Memory after Effective Lifetime in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2026-7375","published":"2026-04-30T05:04:15.610Z","updated":"2026-04-30T15:21:26.890Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2026-7376","published":"2026-04-30T05:04:10.614Z","updated":"2026-05-06T15:26:25.819Z","title":"NULL Pointer Dereference in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2026-3254","published":"2026-04-22T16:29:48.833Z","updated":"2026-04-22T17:39:44.965Z","title":"Improper Restriction of Rendered UI Layers or Frames in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2026-4922","published":"2026-04-22T16:29:38.861Z","updated":"2026-04-24T03:55:17.281Z","title":"Cross-Site Request Forgery (CSRF) in GitLab","severity":"HIGH","score":8.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00267,"kevAdded":null},{"id":"CVE-2025-0186","published":"2026-04-22T16:05:41.343Z","updated":"2026-04-22T17:25:02.340Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2025-3922","published":"2026-04-22T16:05:31.304Z","updated":"2026-04-22T17:28:16.879Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2025-6016","published":"2026-04-22T16:05:26.340Z","updated":"2026-04-22T17:32:08.602Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2025-9957","published":"2026-04-22T16:05:16.304Z","updated":"2026-04-22T17:34:06.772Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2026-1660","published":"2026-04-22T16:04:51.382Z","updated":"2026-04-22T17:39:02.958Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2026-5262","published":"2026-04-22T16:04:36.550Z","updated":"2026-04-22T18:08:34.142Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00223,"kevAdded":null},{"id":"CVE-2026-5377","published":"2026-04-22T16:04:31.304Z","updated":"2026-04-22T17:52:14.162Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2026-5816","published":"2026-04-22T16:04:26.293Z","updated":"2026-04-23T03:56:09.061Z","title":"Improper Resolution of Path Equivalence in GitLab","severity":"HIGH","score":8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00407,"kevAdded":null},{"id":"CVE-2026-6515","published":"2026-04-22T16:04:11.611Z","updated":"2026-04-22T17:51:09.883Z","title":"Insufficient Session Expiration in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2026-5652","published":"2026-04-21T16:33:56.878Z","updated":"2026-04-21T17:22:27.276Z","title":"Authorization Bypass Through User-Controlled Key in Crafty Controller","severity":"CRITICAL","score":9,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.0044,"kevAdded":null},{"id":"CVE-2025-9484","published":"2026-04-08T22:27:17.831Z","updated":"2026-04-09T13:03:18.113Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00274,"kevAdded":null},{"id":"CVE-2025-12664","published":"2026-04-08T22:26:42.854Z","updated":"2026-04-09T13:03:53.739Z","title":"Improper Validation of Specified Quantity in Input in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00588,"kevAdded":null},{"id":"CVE-2026-1092","published":"2026-04-08T22:26:12.837Z","updated":"2026-04-09T15:09:51.969Z","title":"Improper Validation of Specified Quantity in Input in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00562,"kevAdded":null},{"id":"CVE-2026-1101","published":"2026-04-08T22:26:07.834Z","updated":"2026-04-09T15:41:03.766Z","title":"Improper Validation of Specified Quantity in Input in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-1516","published":"2026-04-08T22:25:57.848Z","updated":"2026-04-09T15:42:34.893Z","title":"Improper Control of Generation of Code ('Code Injection') in GitLab","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2026-1752","published":"2026-04-08T22:25:52.858Z","updated":"2026-04-09T14:58:43.291Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2026-2104","published":"2026-04-08T22:25:47.858Z","updated":"2026-04-09T15:43:25.441Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2026-2619","published":"2026-04-08T22:25:37.932Z","updated":"2026-04-09T13:04:26.216Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00339,"kevAdded":null},{"id":"CVE-2026-4332","published":"2026-04-08T22:25:27.848Z","updated":"2026-04-09T13:05:08.328Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0029,"kevAdded":null},{"id":"CVE-2026-4916","published":"2026-04-08T22:25:22.837Z","updated":"2026-04-09T13:05:54.501Z","title":"Missing Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2026-5173","published":"2026-04-08T22:25:12.946Z","updated":"2026-04-09T13:16:53.628Z","title":"Exposed Dangerous Method or Function in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00433,"kevAdded":null},{"id":"CVE-2026-5302","published":"2026-04-08T12:05:06.430Z","updated":"2026-04-08T14:10:15.915Z","title":"Permissive Cross-domain Policy with Untrusted Domains in coolercontrold","severity":"MEDIUM","score":6.3,"vendor":"CoolerControl","product":"coolercontrold","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2026-5300","published":"2026-04-08T12:04:56.421Z","updated":"2026-04-08T14:11:53.589Z","title":"Missing Authentication for Critical Function in coolercontrold","severity":"MEDIUM","score":5.9,"vendor":"CoolerControl","product":"coolercontrold","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-5301","published":"2026-04-08T12:04:51.524Z","updated":"2026-04-08T16:02:36.804Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in coolercontrol-ui","severity":"HIGH","score":7.6,"vendor":"CoolerControl","product":"coolercontrol-ui","kev":false,"epss":0.0028,"kevAdded":null},{"id":"CVE-2026-5208","published":"2026-04-08T11:36:11.910Z","updated":"2026-04-08T12:55:51.455Z","title":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in coolercontrold","severity":"HIGH","score":8.2,"vendor":"CoolerControl","product":"coolercontrold","kev":false,"epss":0.00989,"kevAdded":null},{"id":"CVE-2026-2370","published":"2026-03-29T23:33:44.410Z","updated":"2026-07-15T01:18:09.229Z","title":"Improper Handling of Parameters in GitLab","severity":"HIGH","score":8.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2026-4980","published":"2026-03-27T14:50:48.271Z","updated":"2026-10-26T18:10:37.229Z","title":"Improper Restriction of XML External Entity Reference in Inkscape","severity":"MEDIUM","score":6.3,"vendor":"Inkscape","product":"Inkscape","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2025-13078","published":"2026-03-25T16:35:03.858Z","updated":"2026-03-25T17:02:57.718Z","title":"Improper Validation of Specified Quantity in Input in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00424,"kevAdded":null},{"id":"CVE-2025-13436","published":"2026-03-25T16:34:53.851Z","updated":"2026-03-25T17:03:54.631Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00424,"kevAdded":null},{"id":"CVE-2025-14595","published":"2026-03-25T16:34:43.856Z","updated":"2026-03-27T14:58:40.717Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00262,"kevAdded":null},{"id":"CVE-2026-1724","published":"2026-03-25T16:34:28.860Z","updated":"2026-03-27T14:59:15.608Z","title":"Missing Authentication for Critical Function in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2026-2745","published":"2026-03-25T16:34:18.860Z","updated":"2026-03-26T03:55:31.559Z","title":"Authentication Bypass Using an Alternate Path or Channel in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2026-2726","published":"2026-03-25T16:34:13.838Z","updated":"2026-03-25T17:14:34.612Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2026-2973","published":"2026-03-25T16:34:03.852Z","updated":"2026-03-26T17:24:32.440Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2026-2995","published":"2026-03-25T16:33:58.853Z","updated":"2026-03-26T13:20:13.378Z","title":"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2026-3857","published":"2026-03-25T16:33:53.854Z","updated":"2026-03-26T13:20:03.781Z","title":"Cross-Site Request Forgery (CSRF) in GitLab","severity":"HIGH","score":8.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00215,"kevAdded":null},{"id":"CVE-2026-3988","published":"2026-03-25T16:33:43.952Z","updated":"2026-03-25T17:21:53.191Z","title":"Inefficient Algorithmic Complexity in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00487,"kevAdded":null},{"id":"CVE-2026-4363","published":"2026-03-25T15:04:46.503Z","updated":"2026-03-25T19:57:37.853Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00121,"kevAdded":null},{"id":"CVE-2026-1182","published":"2026-03-12T01:33:23.543Z","updated":"2026-03-12T13:25:11.338Z","title":"Improper Removal of Sensitive Information Before Storage or Transfer in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00206,"kevAdded":null},{"id":"CVE-2025-12555","published":"2026-03-11T16:07:15.673Z","updated":"2026-03-12T16:20:07.813Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2025-12576","published":"2026-03-11T16:06:15.686Z","updated":"2026-03-11T19:36:36.682Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00408,"kevAdded":null},{"id":"CVE-2025-12697","published":"2026-03-11T16:06:00.688Z","updated":"2026-03-11T17:23:04.370Z","title":"Improper Encoding or Escaping of Output in GitLab","severity":"LOW","score":2.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2025-12704","published":"2026-03-11T16:05:55.759Z","updated":"2026-03-12T16:20:13.909Z","title":"Missing Authorization in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2025-13690","published":"2026-03-11T16:05:45.741Z","updated":"2026-03-12T16:20:22.100Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00408,"kevAdded":null},{"id":"CVE-2025-13929","published":"2026-03-11T16:05:35.672Z","updated":"2026-03-12T16:20:28.038Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2025-14513","published":"2026-03-11T16:05:30.683Z","updated":"2026-03-11T19:32:33.904Z","title":"Improper Validation of Specified Quantity in Input in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00504,"kevAdded":null},{"id":"CVE-2026-0602","published":"2026-03-11T16:05:20.680Z","updated":"2026-03-11T19:36:50.673Z","title":"Authentication Bypass Using an Alternate Path or Channel in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2026-1069","published":"2026-03-11T16:05:10.674Z","updated":"2026-03-11T19:39:56.098Z","title":"Uncontrolled Recursion in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00422,"kevAdded":null},{"id":"CVE-2026-1090","published":"2026-03-11T16:05:05.863Z","updated":"2026-03-12T13:32:23.694Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00245,"kevAdded":null},{"id":"CVE-2026-1230","published":"2026-03-11T16:05:00.849Z","updated":"2026-03-11T19:46:36.143Z","title":"Use of Incorrectly-Resolved Name or Reference in GitLab","severity":"MEDIUM","score":4.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2026-1663","published":"2026-03-11T16:04:50.787Z","updated":"2026-03-12T16:15:41.091Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2026-1732","published":"2026-03-11T15:37:26.891Z","updated":"2026-03-12T16:12:20.254Z","title":"Improper Removal of Sensitive Information Before Storage or Transfer in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2026-3848","published":"2026-03-11T15:37:11.894Z","updated":"2026-03-12T14:23:58.017Z","title":"Improper Neutralization of CRLF Sequences ('CRLF Injection') in GitLab","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2025-14511","published":"2026-02-25T20:05:24.799Z","updated":"2026-02-26T15:57:25.416Z","title":"Improper Validation of Specified Quantity in Input in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00406,"kevAdded":null},{"id":"CVE-2026-0752","published":"2026-02-25T20:05:19.818Z","updated":"2026-02-26T14:44:05.136Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2026-1388","published":"2026-02-25T20:05:05.289Z","updated":"2026-02-26T15:07:56.004Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00409,"kevAdded":null},{"id":"CVE-2026-1662","published":"2026-02-25T20:04:59.913Z","updated":"2026-02-26T15:10:46.924Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00406,"kevAdded":null},{"id":"CVE-2026-1747","published":"2026-02-25T20:04:49.893Z","updated":"2026-02-26T15:39:03.951Z","title":"Authentication Bypass Using an Alternate Path or Channel in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2026-1725","published":"2026-02-25T20:04:44.830Z","updated":"2026-02-26T15:42:29.688Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00406,"kevAdded":null},{"id":"CVE-2026-2845","published":"2026-02-25T20:04:35.210Z","updated":"2026-02-26T15:45:14.406Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00296,"kevAdded":null},{"id":"CVE-2025-3525","published":"2026-02-25T19:33:56.609Z","updated":"2026-02-25T20:51:14.590Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2025-14103","published":"2026-02-25T19:33:35.698Z","updated":"2026-02-25T20:52:22.958Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2026-3203","published":"2026-02-25T14:36:00.984Z","updated":"2026-09-17T18:35:21.214Z","title":"Buffer Over-read in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2026-3202","published":"2026-02-25T14:35:55.986Z","updated":"2026-03-27T13:56:59.690Z","title":"NULL Pointer Dereference in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-3201","published":"2026-02-25T14:35:50.969Z","updated":"2026-03-27T13:56:59.581Z","title":"Improperly Controlled Sequential Memory Allocation in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2025-7659","published":"2026-02-11T11:35:16.441Z","updated":"2026-02-26T14:44:27.435Z","title":"Origin Validation Error in GitLab","severity":"HIGH","score":8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2025-8099","published":"2026-02-11T11:35:11.456Z","updated":"2026-02-11T15:14:09.487Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00465,"kevAdded":null},{"id":"CVE-2025-12073","published":"2026-02-11T11:34:46.437Z","updated":"2026-02-11T15:14:53.506Z","title":"Server-Side Request Forgery (SSRF) in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2025-12575","published":"2026-02-11T11:34:36.432Z","updated":"2026-02-11T15:15:26.432Z","title":"Server-Side Request Forgery (SSRF) in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2025-14560","published":"2026-02-11T11:34:16.431Z","updated":"2026-02-26T14:44:27.727Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2025-14594","published":"2026-02-11T11:34:06.815Z","updated":"2026-02-11T15:17:25.802Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2025-14592","published":"2026-02-11T11:34:01.432Z","updated":"2026-02-11T15:18:04.995Z","title":"Missing Authorization in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00298,"kevAdded":null},{"id":"CVE-2026-0595","published":"2026-02-11T11:33:56.425Z","updated":"2026-02-26T14:44:28.036Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2026-0958","published":"2026-02-11T11:33:46.426Z","updated":"2026-02-11T15:19:41.414Z","title":"Interpretation Conflict in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2026-1080","published":"2026-02-11T11:33:41.565Z","updated":"2026-02-11T15:35:58.862Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00278,"kevAdded":null},{"id":"CVE-2026-1094","published":"2026-02-11T11:04:35.229Z","updated":"2026-02-11T21:18:35.282Z","title":"Improper Validation of Unsafe Equivalence in Input in GitLab","severity":"MEDIUM","score":4.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2026-1282","published":"2026-02-11T11:04:25.235Z","updated":"2026-02-11T21:18:14.189Z","title":"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2026-1387","published":"2026-02-11T11:04:20.771Z","updated":"2026-02-11T21:17:29.372Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00339,"kevAdded":null},{"id":"CVE-2026-1456","published":"2026-02-11T11:04:15.246Z","updated":"2026-02-11T15:40:00.821Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2026-1458","published":"2026-02-11T11:04:05.401Z","updated":"2026-02-11T15:42:58.333Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2026-1868","published":"2026-02-09T06:33:11.812Z","updated":"2026-02-09T15:46:45.991Z","title":"Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab AI Gateway","kev":false,"epss":0.00696,"kevAdded":null},{"id":"CVE-2026-1751","published":"2026-02-02T09:04:38.090Z","updated":"2026-02-02T13:24:44.683Z","title":"Missing Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00239,"kevAdded":null},{"id":"CVE-2026-0805","published":"2026-01-30T06:04:15.330Z","updated":"2026-02-02T16:33:11.255Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller","severity":"HIGH","score":8.2,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.00651,"kevAdded":null},{"id":"CVE-2026-0963","published":"2026-01-30T06:04:05.503Z","updated":"2026-02-02T16:33:26.381Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller","severity":"CRITICAL","score":9.9,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.0074,"kevAdded":null},{"id":"CVE-2026-1466","published":"2026-01-28T06:33:15.181Z","updated":"2026-01-28T20:48:25.368Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau","severity":"MEDIUM","score":6.1,"vendor":"Jirafeau project","product":"Jirafeau","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2025-13928","published":"2026-01-22T13:34:18.349Z","updated":"2026-01-22T15:26:44.128Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00699,"kevAdded":null},{"id":"CVE-2025-13927","published":"2026-01-22T13:34:13.359Z","updated":"2026-01-22T15:27:56.204Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00831,"kevAdded":null},{"id":"CVE-2026-0723","published":"2026-01-22T13:34:08.340Z","updated":"2026-02-26T14:44:33.144Z","title":"Unchecked Return Value in GitLab","severity":"HIGH","score":7.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01042,"kevAdded":null},{"id":"CVE-2026-1102","published":"2026-01-22T13:33:53.530Z","updated":"2026-01-22T15:29:45.284Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00585,"kevAdded":null},{"id":"CVE-2025-13335","published":"2026-01-22T10:04:27.602Z","updated":"2026-01-22T14:12:36.778Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00566,"kevAdded":null},{"id":"CVE-2026-0961","published":"2026-01-14T20:23:48.832Z","updated":"2026-03-27T13:56:59.242Z","title":"Out-of-bounds Write in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2026-0962","published":"2026-01-14T20:23:38.829Z","updated":"2026-03-27T13:56:59.374Z","title":"Out-of-bounds Write in Wireshark","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-0960","published":"2026-01-14T20:23:33.849Z","updated":"2026-03-27T13:56:59.148Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":4.7,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00146,"kevAdded":null},{"id":"CVE-2026-0959","published":"2026-01-14T20:23:28.986Z","updated":"2026-03-27T13:56:59.047Z","title":"Out-of-bounds Write in Wireshark","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00213,"kevAdded":null},{"id":"CVE-2025-11224","published":"2026-01-14T18:58:03.982Z","updated":"2026-02-26T15:04:08.322Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2025-3950","published":"2026-01-09T10:04:51.264Z","updated":"2026-01-09T14:42:21.828Z","title":"Exposure of Private Personal Information to an Unauthorized Actor in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2025-9222","published":"2026-01-09T10:04:36.272Z","updated":"2026-07-15T01:24:25.170Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2025-10569","published":"2026-01-09T10:04:26.275Z","updated":"2026-01-09T19:12:12.768Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00521,"kevAdded":null},{"id":"CVE-2025-11246","published":"2026-01-09T10:04:21.283Z","updated":"2026-01-09T19:13:17.900Z","title":"Insufficient Granularity of Access Control in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2025-13772","published":"2026-01-09T10:04:06.293Z","updated":"2026-07-15T01:27:27.924Z","title":"Missing Authorization in GitLab","severity":"HIGH","score":7.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2025-13761","published":"2026-01-09T10:04:01.331Z","updated":"2026-07-15T01:27:30.282Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00697,"kevAdded":null},{"id":"CVE-2025-13781","published":"2026-01-09T10:03:51.554Z","updated":"2026-01-09T19:14:05.513Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00445,"kevAdded":null},{"id":"CVE-2025-14700","published":"2025-12-17T00:04:37.049Z","updated":"2025-12-17T21:25:02.839Z","title":"Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller","severity":"CRITICAL","score":9.9,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.06559,"kevAdded":null},{"id":"CVE-2025-14701","published":"2025-12-17T00:04:32.259Z","updated":"2025-12-17T21:20:58.124Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller","severity":"HIGH","score":7.1,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.00292,"kevAdded":null},{"id":"CVE-2025-14758","published":"2025-12-16T00:33:32.971Z","updated":"2025-12-16T21:22:55.691Z","title":"Initialization of a Resource with an Insecure Default in YAOOK","severity":"MEDIUM","score":6.5,"vendor":"ALASCA","product":"YAOOK","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2025-12029","published":"2025-12-11T07:32:16.477Z","updated":"2026-02-26T16:21:04.107Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00527,"kevAdded":null},{"id":"CVE-2025-12734","published":"2025-12-11T07:32:01.735Z","updated":"2025-12-16T23:44:05.510Z","title":"Improper Encoding or Escaping of Output in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2025-4097","published":"2025-12-11T04:05:22.190Z","updated":"2025-12-11T15:00:16.738Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2025-8405","published":"2025-12-11T04:05:07.234Z","updated":"2026-11-04T00:15:54.569Z","title":"Improper Encoding or Escaping of Output in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00515,"kevAdded":null},{"id":"CVE-2025-11247","published":"2025-12-11T04:04:57.190Z","updated":"2025-12-11T15:12:43.664Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2025-11984","published":"2025-12-11T04:04:47.302Z","updated":"2026-02-26T16:21:04.830Z","title":"Authentication Bypass Using an Alternate Path or Channel in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2025-12562","published":"2025-12-11T03:33:47.966Z","updated":"2025-12-11T15:17:34.128Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00864,"kevAdded":null},{"id":"CVE-2025-12716","published":"2025-12-11T03:33:37.916Z","updated":"2026-02-26T16:21:05.064Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00424,"kevAdded":null},{"id":"CVE-2025-13978","published":"2025-12-11T03:33:22.925Z","updated":"2025-12-11T15:23:44.385Z","title":"Generation of Error Message Containing Sensitive Information in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2025-14157","published":"2025-12-11T03:33:18.048Z","updated":"2025-12-11T15:33:50.064Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2024-9183","published":"2025-12-05T16:34:00.971Z","updated":"2026-02-26T16:57:29.574Z","title":"Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00255,"kevAdded":null},{"id":"CVE-2025-13946","published":"2025-12-03T08:04:54.335Z","updated":"2026-03-27T13:56:58.594Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00159,"kevAdded":null},{"id":"CVE-2025-13945","published":"2025-12-03T08:04:49.403Z","updated":"2026-03-27T13:56:58.495Z","title":"Improperly Controlled Sequential Memory Allocation in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2025-6195","published":"2025-11-26T19:46:42.649Z","updated":"2025-12-10T23:01:24.471Z","title":"Direct Request ('Forced Browsing') in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2025-7449","published":"2025-11-26T19:46:32.641Z","updated":"2025-12-10T23:01:24.555Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00444,"kevAdded":null},{"id":"CVE-2025-12571","published":"2025-11-26T19:46:17.647Z","updated":"2025-12-10T23:01:24.090Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2025-12653","published":"2025-11-26T19:46:12.641Z","updated":"2025-12-10T23:01:24.241Z","title":"Authentication Bypass by Spoofing in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00309,"kevAdded":null},{"id":"CVE-2025-13611","published":"2025-11-26T19:45:57.778Z","updated":"2026-03-31T11:46:48.585Z","title":"Insertion of Sensitive Information into Log File in GitLab","severity":"LOW","score":2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2025-13674","published":"2025-11-26T11:33:39.916Z","updated":"2026-03-27T13:56:58.384Z","title":"Access of Uninitialized Pointer in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2025-13499","published":"2025-11-21T06:03:52.020Z","updated":"2026-03-27T13:56:58.105Z","title":"Access of Uninitialized Pointer in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2025-9825","published":"2025-11-21T05:33:31.558Z","updated":"2025-11-24T18:09:10.207Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2025-12983","published":"2025-11-15T08:13:32.098Z","updated":"2025-11-17T20:17:39.698Z","title":"Memory Allocation with Excessive Size Value in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2025-2615","published":"2025-11-15T08:04:44.743Z","updated":"2025-11-17T20:16:30.455Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.004,"kevAdded":null},{"id":"CVE-2025-6945","published":"2025-11-15T08:04:29.739Z","updated":"2025-11-17T20:16:05.892Z","title":"Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00283,"kevAdded":null},{"id":"CVE-2025-6171","published":"2025-11-15T08:04:24.736Z","updated":"2025-11-17T20:15:16.095Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2025-7000","published":"2025-11-15T08:04:19.745Z","updated":"2025-11-17T20:14:12.187Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2025-7736","published":"2025-11-15T08:04:14.734Z","updated":"2025-11-17T20:13:18.378Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2025-11865","published":"2025-11-15T08:03:59.731Z","updated":"2025-11-17T20:12:20.808Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0024,"kevAdded":null},{"id":"CVE-2025-11990","published":"2025-11-15T08:03:49.850Z","updated":"2025-11-17T20:11:14.935Z","title":"Improper Handling of URL Encoding (Hex Encoding) in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2025-11702","published":"2025-10-29T07:04:52.286Z","updated":"2026-02-26T16:57:01.903Z","title":"Missing Authorization in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00607,"kevAdded":null},{"id":"CVE-2025-6601","published":"2025-10-27T00:06:04.304Z","updated":"2025-11-24T07:26:31.684Z","title":"Business Logic Errors in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2025-10497","published":"2025-10-27T00:05:39.306Z","updated":"2025-10-28T15:02:48.809Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00624,"kevAdded":null},{"id":"CVE-2025-11971","published":"2025-10-27T00:05:34.305Z","updated":"2025-10-28T15:00:45.588Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00245,"kevAdded":null},{"id":"CVE-2025-11974","published":"2025-10-27T00:05:24.332Z","updated":"2025-10-28T14:59:56.029Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2025-11447","published":"2025-10-27T00:05:19.810Z","updated":"2025-10-28T14:58:37.798Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00821,"kevAdded":null},{"id":"CVE-2025-11989","published":"2025-10-26T23:33:50.230Z","updated":"2025-10-28T14:44:46.810Z","title":"Missing Authorization in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2025-11626","published":"2025-10-10T22:33:26.431Z","updated":"2026-03-27T13:56:57.911Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0012,"kevAdded":null},{"id":"CVE-2025-10004","published":"2025-10-09T12:04:30.109Z","updated":"2025-10-09T13:16:38.980Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00532,"kevAdded":null},{"id":"CVE-2025-11340","published":"2025-10-09T12:04:20.127Z","updated":"2025-10-09T13:43:00.365Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00383,"kevAdded":null},{"id":"CVE-2025-2934","published":"2025-10-09T11:33:43.956Z","updated":"2025-10-09T13:48:56.561Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00542,"kevAdded":null},{"id":"CVE-2025-8014","published":"2025-09-27T16:33:32.601Z","updated":"2025-09-30T17:27:13.696Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00624,"kevAdded":null},{"id":"CVE-2025-11042","published":"2025-09-26T09:18:31.712Z","updated":"2025-09-26T13:10:33.841Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00337,"kevAdded":null},{"id":"CVE-2025-5069","published":"2025-09-26T09:11:09.636Z","updated":"2025-09-26T13:12:27.389Z","title":"Incorrect Ownership Assignment in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2025-10868","published":"2025-09-26T09:10:49.812Z","updated":"2025-09-26T13:13:02.624Z","title":"Business Logic Errors in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00274,"kevAdded":null},{"id":"CVE-2025-7691","published":"2025-09-26T09:05:06.532Z","updated":"2026-02-26T17:47:53.973Z","title":"Privilege Defined With Unsafe Actions in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2025-9642","published":"2025-09-26T09:04:51.532Z","updated":"2025-09-26T13:15:17.950Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2025-9958","published":"2025-09-26T09:04:41.537Z","updated":"2025-11-06T17:30:27.285Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00527,"kevAdded":null},{"id":"CVE-2025-10858","published":"2025-09-26T09:04:31.555Z","updated":"2025-09-26T15:32:55.310Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0058,"kevAdded":null},{"id":"CVE-2025-10867","published":"2025-09-26T09:04:26.530Z","updated":"2025-09-26T15:33:34.488Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2025-10871","published":"2025-09-26T09:04:21.687Z","updated":"2026-11-04T00:13:58.087Z","title":"Missing Authorization in GitLab","severity":"LOW","score":3.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00377,"kevAdded":null},{"id":"CVE-2025-1250","published":"2025-09-12T06:06:14.804Z","updated":"2025-09-12T17:20:05.685Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00488,"kevAdded":null},{"id":"CVE-2025-2256","published":"2025-09-12T06:06:04.796Z","updated":"2025-09-12T17:19:32.801Z","title":"Improper Validation of Specified Quantity in Input in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00528,"kevAdded":null},{"id":"CVE-2025-6454","published":"2025-09-12T06:05:49.792Z","updated":"2025-09-12T17:18:59.590Z","title":"Server-Side Request Forgery (SSRF) in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00733,"kevAdded":null},{"id":"CVE-2025-6769","published":"2025-09-12T06:05:44.797Z","updated":"2025-09-12T17:18:18.621Z","title":"Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2025-7337","published":"2025-09-12T06:05:35.035Z","updated":"2025-09-12T16:07:00.708Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00488,"kevAdded":null},{"id":"CVE-2025-10094","published":"2025-09-12T04:57:11.650Z","updated":"2025-09-12T13:05:11.654Z","title":"Improper Validation of Specified Quantity in Input in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2025-9817","published":"2025-09-03T07:38:58.940Z","updated":"2026-03-27T13:56:58.947Z","title":"NULL Pointer Dereference in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2025-2246","published":"2025-08-27T19:34:00.919Z","updated":"2025-08-27T19:49:56.554Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":5.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00276,"kevAdded":null},{"id":"CVE-2025-3601","published":"2025-08-27T19:33:50.920Z","updated":"2025-08-27T19:54:21.123Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2025-4225","published":"2025-08-27T19:33:45.928Z","updated":"2025-08-27T19:52:40.877Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00371,"kevAdded":null},{"id":"CVE-2025-5101","published":"2025-08-27T19:33:36.040Z","updated":"2025-08-27T19:53:36.682Z","title":"Improper Control of Generation of Code ('Code Injection') in GitLab","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00128,"kevAdded":null},{"id":"CVE-2024-10219","published":"2025-08-13T17:28:00.498Z","updated":"2025-08-13T19:59:02.008Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2024-12303","published":"2025-08-13T17:27:45.555Z","updated":"2025-08-13T20:00:25.961Z","title":"Incorrect Privilege Assignment in GitLab","severity":"MEDIUM","score":6.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00445,"kevAdded":null},{"id":"CVE-2025-1477","published":"2025-08-13T17:27:25.496Z","updated":"2025-08-13T20:01:32.448Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00516,"kevAdded":null},{"id":"CVE-2025-2498","published":"2025-08-13T17:27:10.511Z","updated":"2025-08-13T20:02:26.796Z","title":"Insufficient Granularity of Access Control in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00279,"kevAdded":null},{"id":"CVE-2025-2614","published":"2025-08-13T17:27:00.485Z","updated":"2025-08-13T18:31:35.236Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2025-2937","published":"2025-08-13T17:26:55.506Z","updated":"2025-08-13T20:03:48.370Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00411,"kevAdded":null},{"id":"CVE-2025-5819","published":"2025-08-13T17:26:45.482Z","updated":"2025-08-29T16:23:04.943Z","title":"Incorrect Permission Assignment for Critical Resource in GitLab","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00291,"kevAdded":null},{"id":"CVE-2025-6186","published":"2025-08-13T17:26:35.507Z","updated":"2025-08-13T20:36:52.358Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00319,"kevAdded":null},{"id":"CVE-2025-7739","published":"2025-08-13T17:26:25.490Z","updated":"2025-08-13T20:36:20.769Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2025-7734","published":"2025-08-13T17:26:20.482Z","updated":"2025-08-13T20:35:29.997Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00319,"kevAdded":null},{"id":"CVE-2025-8770","published":"2025-08-13T17:26:10.817Z","updated":"2025-08-13T20:05:23.927Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2025-8279","published":"2025-07-28T14:04:28.764Z","updated":"2025-07-28T14:23:37.024Z","title":"Missing Authentication for Critical Function in GitLab Language Server","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab Language Server","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2025-8183","published":"2025-07-25T09:33:41.854Z","updated":"2025-07-25T12:41:43.798Z","title":"NULL Pointer Dereference in µD3TN","severity":"HIGH","score":7.5,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00593,"kevAdded":null},{"id":"CVE-2025-0765","published":"2025-07-24T06:33:38.009Z","updated":"2025-07-24T13:36:22.397Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2025-1299","published":"2025-07-24T06:33:28.184Z","updated":"2025-07-24T13:36:27.415Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2025-4976","published":"2025-07-24T06:05:37.730Z","updated":"2025-07-24T13:36:32.546Z","title":"Exposure of Sensitive Information Due to Incompatible Policies in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00504,"kevAdded":null},{"id":"CVE-2025-7001","published":"2025-07-24T06:05:22.870Z","updated":"2025-07-24T13:36:37.546Z","title":"Insufficient Granularity of Access Control in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00444,"kevAdded":null},{"id":"CVE-2025-4439","published":"2025-07-23T18:09:17.968Z","updated":"2026-11-03T22:03:04.008Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0028,"kevAdded":null},{"id":"CVE-2025-4700","published":"2025-07-23T17:33:13.646Z","updated":"2026-02-26T17:50:16.041Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2025-3396","published":"2025-07-10T08:31:04.703Z","updated":"2025-07-10T20:12:01.609Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0035,"kevAdded":null},{"id":"CVE-2025-4972","published":"2025-07-10T08:30:59.709Z","updated":"2025-07-10T20:11:10.748Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00366,"kevAdded":null},{"id":"CVE-2025-6168","published":"2025-07-10T08:30:54.721Z","updated":"2025-07-10T20:08:14.880Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00358,"kevAdded":null},{"id":"CVE-2025-6948","published":"2025-07-10T08:30:39.878Z","updated":"2026-02-26T17:50:48.879Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0054,"kevAdded":null},{"id":"CVE-2025-7066","published":"2025-07-04T12:02:34.287Z","updated":"2025-09-16T11:01:26.893Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau","severity":"MEDIUM","score":6.1,"vendor":"Jirafeau project","product":"Jirafeau","kev":false,"epss":0.00309,"kevAdded":null},{"id":"CVE-2025-1754","published":"2025-06-26T05:31:40.856Z","updated":"2025-06-26T13:19:41.870Z","title":"Missing Authentication for Critical Function in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00296,"kevAdded":null},{"id":"CVE-2025-2938","published":"2025-06-26T05:31:30.851Z","updated":"2026-11-03T22:02:57.331Z","title":"Business Logic Errors in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00318,"kevAdded":null},{"id":"CVE-2025-3279","published":"2025-06-26T05:31:25.858Z","updated":"2025-06-26T13:22:27.886Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2025-5315","published":"2025-06-26T05:31:15.850Z","updated":"2025-06-26T13:22:43.572Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00264,"kevAdded":null},{"id":"CVE-2025-5846","published":"2025-06-26T05:31:05.956Z","updated":"2025-06-26T13:22:59.788Z","title":"Missing Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00273,"kevAdded":null},{"id":"CVE-2023-5600","published":"2025-06-20T19:31:08.397Z","updated":"2025-06-20T19:52:09.173Z","title":"Missing Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00326,"kevAdded":null},{"id":"CVE-2024-4994","published":"2025-06-20T18:14:37.887Z","updated":"2025-06-23T15:22:37.297Z","title":"Cross-Site Request Forgery (CSRF) in GitLab","severity":"HIGH","score":8.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2024-4025","published":"2025-06-20T18:14:33.011Z","updated":"2025-06-23T15:22:59.976Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00553,"kevAdded":null},{"id":"CVE-2025-2443","published":"2025-06-20T17:12:54.738Z","updated":"2025-06-20T17:27:26.650Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2025-5121","published":"2025-06-20T17:12:39.860Z","updated":"2025-06-20T17:29:37.340Z","title":"Missing Authorization in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.12436,"kevAdded":null},{"id":"CVE-2024-7586","published":"2025-06-20T13:58:37.159Z","updated":"2025-06-20T14:53:39.330Z","title":"Insertion of Sensitive Information into Log File in GitLab","severity":"MEDIUM","score":4.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2025-5990","published":"2025-06-15T18:01:09.667Z","updated":"2025-06-16T13:48:53.025Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Crafty Controller","severity":"HIGH","score":7.6,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2025-5982","published":"2025-06-12T16:27:56.700Z","updated":"2025-06-12T17:29:27.471Z","title":"Insufficient Granularity of Access Control in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2024-9512","published":"2025-06-12T14:02:55.123Z","updated":"2025-06-12T14:13:37.117Z","title":"Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2025-0673","published":"2025-06-12T11:03:28.366Z","updated":"2025-06-12T13:16:12.190Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2025-5195","published":"2025-06-12T10:31:00.372Z","updated":"2025-06-12T13:25:45.847Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00303,"kevAdded":null},{"id":"CVE-2025-1478","published":"2025-06-12T10:02:49.998Z","updated":"2025-06-12T13:30:42.186Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00427,"kevAdded":null},{"id":"CVE-2025-1516","published":"2025-06-12T10:02:45.134Z","updated":"2025-06-12T13:38:08.165Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00427,"kevAdded":null},{"id":"CVE-2025-2254","published":"2025-06-12T10:02:40.003Z","updated":"2025-06-12T13:42:30.110Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2025-4278","published":"2025-06-12T10:02:25.006Z","updated":"2025-06-12T13:43:54.714Z","title":"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.10883,"kevAdded":null},{"id":"CVE-2025-5996","published":"2025-06-12T10:02:15.206Z","updated":"2025-08-01T17:15:41.215Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00782,"kevAdded":null},{"id":"CVE-2025-5601","published":"2025-06-04T10:30:46.001Z","updated":"2026-03-27T13:56:58.863Z","title":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2025-1763","published":"2025-05-30T11:02:36.384Z","updated":"2025-05-30T12:50:13.554Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00566,"kevAdded":null},{"id":"CVE-2024-7803","published":"2025-05-23T12:31:21.008Z","updated":"2025-05-27T14:40:07.374Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00513,"kevAdded":null},{"id":"CVE-2024-9163","published":"2025-05-23T12:31:11.192Z","updated":"2025-05-27T14:40:36.623Z","title":"User Interface (UI) Misrepresentation of Critical Information in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00404,"kevAdded":null},{"id":"CVE-2024-12093","published":"2025-05-22T14:32:04.147Z","updated":"2025-05-22T14:44:03.881Z","title":"Improper Validation of Consistency within Input in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2025-0605","published":"2025-05-22T14:31:54.105Z","updated":"2025-05-22T14:45:03.172Z","title":"Weak Authentication in GitLab","severity":"MEDIUM","score":4.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2025-0679","published":"2025-05-22T14:31:44.104Z","updated":"2025-05-22T14:46:00.223Z","title":"Exposure of Private Personal Information to an Unauthorized Actor in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2025-0993","published":"2025-05-22T14:31:34.239Z","updated":"2025-05-22T14:46:54.356Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00507,"kevAdded":null},{"id":"CVE-2025-1110","published":"2025-05-22T14:02:31.385Z","updated":"2025-05-22T14:17:44.379Z","title":"Insufficient Granularity of Access Control in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2025-2853","published":"2025-05-22T13:30:48.335Z","updated":"2025-05-22T14:50:36.079Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00468,"kevAdded":null},{"id":"CVE-2025-3111","published":"2025-05-22T13:30:43.544Z","updated":"2025-05-22T14:51:11.125Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00465,"kevAdded":null},{"id":"CVE-2025-4979","published":"2025-05-22T13:30:28.496Z","updated":"2025-05-22T14:21:32.253Z","title":"Insufficient Granularity of Access Control in GitLab","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2024-8973","published":"2025-05-09T16:14:45.564Z","updated":"2025-05-09T19:54:29.190Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00406,"kevAdded":null},{"id":"CVE-2025-0549","published":"2025-05-09T16:13:23.860Z","updated":"2025-05-09T19:58:30.277Z","title":"Authentication Bypass Using an Alternate Path or Channel in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2025-1278","published":"2025-05-09T16:13:14.048Z","updated":"2025-05-09T20:03:19.786Z","title":"Insufficient Granularity of Access Control in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2024-12244","published":"2025-04-24T07:31:11.125Z","updated":"2025-04-24T15:23:11.499Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00311,"kevAdded":null},{"id":"CVE-2025-0639","published":"2025-04-24T07:31:06.117Z","updated":"2025-04-24T15:23:17.586Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2025-1908","published":"2025-04-24T07:30:51.255Z","updated":"2025-04-24T15:23:23.164Z","title":"Business Logic Errors in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2025-0362","published":"2025-04-10T14:31:17.009Z","updated":"2025-04-10T14:56:33.843Z","title":"Improper Restriction of Rendered UI Layers or Frames in GitLab","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2025-2469","published":"2025-04-10T13:30:43.136Z","updated":"2025-04-10T14:13:00.917Z","title":"Debug Messages Revealing Unnecessary Information in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.004,"kevAdded":null},{"id":"CVE-2024-11129","published":"2025-04-10T13:02:48.148Z","updated":"2025-04-10T13:16:35.153Z","title":"Generation of Error Message Containing Sensitive Information in GitLab","severity":"MEDIUM","score":6.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00377,"kevAdded":null},{"id":"CVE-2025-1677","published":"2025-04-10T12:30:58.715Z","updated":"2025-04-10T13:02:54.300Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2025-2408","published":"2025-04-10T12:30:48.931Z","updated":"2025-04-10T13:03:28.479Z","title":"Insufficient Granularity of Access Control in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0035,"kevAdded":null},{"id":"CVE-2024-10307","published":"2025-03-28T10:02:23.294Z","updated":"2025-03-28T13:42:16.490Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2024-12619","published":"2025-03-28T10:02:13.406Z","updated":"2025-03-28T13:46:51.887Z","title":"Insufficient Granularity of Access Control in GitLab","severity":"MEDIUM","score":5.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00275,"kevAdded":null},{"id":"CVE-2025-2867","published":"2025-03-27T14:02:18.359Z","updated":"2025-03-27T14:18:32.168Z","title":"Improper Control of Generation of Code ('Code Injection') in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00218,"kevAdded":null},{"id":"CVE-2024-9773","published":"2025-03-27T12:31:27.475Z","updated":"2025-03-27T13:07:40.267Z","title":"Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2025-0811","published":"2025-03-27T12:31:07.487Z","updated":"2025-03-27T13:08:11.807Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2025-2242","published":"2025-03-27T12:30:57.479Z","updated":"2025-03-27T13:11:00.331Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00423,"kevAdded":null},{"id":"CVE-2025-2255","published":"2025-03-27T12:30:47.592Z","updated":"2025-03-27T13:13:21.218Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.003,"kevAdded":null},{"id":"CVE-2024-7296","published":"2025-03-13T06:00:54.415Z","updated":"2025-03-14T13:43:35.011Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00364,"kevAdded":null},{"id":"CVE-2025-1257","published":"2025-03-13T06:00:36.063Z","updated":"2025-03-14T13:44:11.141Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00461,"kevAdded":null},{"id":"CVE-2024-8402","published":"2025-03-13T05:56:29.590Z","updated":"2025-03-13T19:38:58.363Z","title":"Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2024-12380","published":"2025-03-13T05:56:14.642Z","updated":"2025-03-14T14:35:18.525Z","title":"Generation of Error Message Containing Sensitive Information in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00573,"kevAdded":null},{"id":"CVE-2024-13054","published":"2025-03-13T05:56:09.637Z","updated":"2025-03-14T14:36:19.463Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2025-0652","published":"2025-03-13T05:55:59.744Z","updated":"2025-03-14T18:04:47.874Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00418,"kevAdded":null},{"id":"CVE-2025-2045","published":"2025-03-06T13:04:16.661Z","updated":"2025-03-06T16:07:19.120Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00281,"kevAdded":null},{"id":"CVE-2025-1540","published":"2025-03-06T08:31:07.791Z","updated":"2025-03-06T16:29:08.261Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2025-0555","published":"2025-03-03T16:02:28.441Z","updated":"2025-03-04T16:50:43.845Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00487,"kevAdded":null},{"id":"CVE-2024-10925","published":"2025-03-03T11:02:24.017Z","updated":"2025-08-26T19:58:07.582Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00339,"kevAdded":null},{"id":"CVE-2025-0475","published":"2025-03-03T10:30:47.570Z","updated":"2025-03-03T12:07:55.921Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00496,"kevAdded":null},{"id":"CVE-2024-8186","published":"2025-03-03T10:02:44.912Z","updated":"2025-03-03T12:32:03.051Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00348,"kevAdded":null},{"id":"CVE-2025-1492","published":"2025-02-20T01:30:46.055Z","updated":"2026-03-27T13:56:58.763Z","title":"Uncontrolled Recursion in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2024-3303","published":"2025-02-13T08:31:11.062Z","updated":"2025-02-13T14:36:00.382Z","title":"Improper Neutralization of Input Used for LLM Prompting in GitLab","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.004,"kevAdded":null},{"id":"CVE-2025-1198","published":"2025-02-13T00:55:50.295Z","updated":"2025-02-13T14:57:28.962Z","title":"Insufficient Session Expiration in GitLab","severity":"MEDIUM","score":4.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2024-7102","published":"2025-02-13T00:54:25.633Z","updated":"2025-02-13T14:59:00.454Z","title":"Execution with Unnecessary Privileges in GitLab","severity":"CRITICAL","score":9.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00513,"kevAdded":null},{"id":"CVE-2024-8266","published":"2025-02-13T00:54:15.748Z","updated":"2025-02-13T15:06:49.385Z","title":"Execution with Unnecessary Privileges in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00448,"kevAdded":null},{"id":"CVE-2024-9870","published":"2025-02-12T15:31:02.886Z","updated":"2025-02-12T15:59:49.272Z","title":"Unintended Proxy or Intermediary ('Confused Deputy') in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2025-0516","published":"2025-02-12T15:30:47.995Z","updated":"2025-02-12T16:00:10.811Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2024-12379","published":"2025-02-12T15:02:32.062Z","updated":"2025-02-12T21:00:39.234Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00508,"kevAdded":null},{"id":"CVE-2025-0376","published":"2025-02-12T15:02:22.215Z","updated":"2025-02-13T14:14:09.377Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2025-1212","published":"2025-02-12T15:02:07.113Z","updated":"2025-02-12T21:07:44.561Z","title":"Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2025-1042","published":"2025-02-12T15:02:02.171Z","updated":"2025-02-12T15:12:26.513Z","title":"Files or Directories Accessible to External Parties in GitLab","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00432,"kevAdded":null},{"id":"CVE-2024-10383","published":"2025-02-07T14:12:41.757Z","updated":"2025-02-12T15:17:24.562Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab VSCode Fork","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab VSCode Fork","kev":false,"epss":0.00285,"kevAdded":null},{"id":"CVE-2025-1072","published":"2025-02-07T04:05:20.188Z","updated":"2025-02-07T15:58:01.767Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00537,"kevAdded":null},{"id":"CVE-2024-2878","published":"2025-02-05T12:21:10.806Z","updated":"2025-02-05T20:11:02.837Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.19726,"kevAdded":null},{"id":"CVE-2024-3976","published":"2025-02-05T12:02:27.929Z","updated":"2025-02-05T20:12:12.955Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00624,"kevAdded":null},{"id":"CVE-2024-5528","published":"2025-02-05T10:31:06.106Z","updated":"2025-02-05T20:13:11.436Z","title":"Incomplete Comparison with Missing Factors in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0041,"kevAdded":null},{"id":"CVE-2024-9631","published":"2025-02-05T10:30:51.252Z","updated":"2025-02-05T19:26:24.166Z","title":"Inefficient Algorithmic Complexity in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00729,"kevAdded":null},{"id":"CVE-2024-6356","published":"2025-02-05T10:02:22.677Z","updated":"2025-02-05T14:29:45.373Z","title":"Incorrect User Management in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00194,"kevAdded":null},{"id":"CVE-2024-1539","published":"2025-02-05T09:46:46.182Z","updated":"2025-02-05T14:30:37.885Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00377,"kevAdded":null},{"id":"CVE-2023-6386","published":"2025-02-05T09:31:10.106Z","updated":"2025-02-05T14:45:32.989Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00533,"kevAdded":null},{"id":"CVE-2023-6195","published":"2025-01-30T23:45:10.780Z","updated":"2025-02-18T18:59:19.527Z","title":"Server-Side Request Forgery (SSRF) in GitLab","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00319,"kevAdded":null},{"id":"CVE-2024-1211","published":"2025-01-30T23:45:00.772Z","updated":"2025-01-31T20:51:47.207Z","title":"Cross-Site Request Forgery (CSRF) in GitLab","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2025-0781","published":"2025-01-28T16:34:21.881Z","updated":"2025-02-12T20:01:11.702Z","title":"Incorrect Authorization in SimGear","severity":"HIGH","score":8.6,"vendor":"FlightGear","product":"SimGear","kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2025-0290","published":"2025-01-28T08:45:09.560Z","updated":"2025-01-28T14:41:52.667Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00387,"kevAdded":null},{"id":"CVE-2024-11931","published":"2025-01-24T03:02:16.074Z","updated":"2025-02-05T20:14:21.196Z","title":"Insufficient Granularity of Access Control in GitLab","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2025-0314","published":"2025-01-24T02:30:44.273Z","updated":"2025-02-12T20:41:30.754Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2024-13041","published":"2025-01-09T06:33:13.241Z","updated":"2025-01-09T15:29:59.641Z","title":"Incorrect User Management in GitLab","severity":"MEDIUM","score":4.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2024-6324","published":"2025-01-09T06:02:46.213Z","updated":"2025-01-09T15:32:34.143Z","title":"Inefficient Algorithmic Complexity in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00714,"kevAdded":null},{"id":"CVE-2024-12431","published":"2025-01-08T20:30:42.896Z","updated":"2025-02-12T17:12:59.442Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2025-0194","published":"2025-01-08T20:02:01.498Z","updated":"2025-01-09T06:35:12.315Z","title":"Insertion of Sensitive Information into Externally-Accessible File or Directory in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00495,"kevAdded":null},{"id":"CVE-2023-5117","published":"2024-12-25T14:46:47.927Z","updated":"2024-12-26T18:10:54.988Z","title":"Exposure of Sensitive Information Due to Incompatible Policies in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00319,"kevAdded":null},{"id":"CVE-2024-8116","published":"2024-12-16T04:31:08.730Z","updated":"2024-12-16T16:44:50.250Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2024-8650","published":"2024-12-16T04:30:58.662Z","updated":"2024-12-16T16:45:13.671Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00477,"kevAdded":null},{"id":"CVE-2024-8179","published":"2024-12-12T12:03:04.799Z","updated":"2024-12-12T15:44:09.211Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00332,"kevAdded":null},{"id":"CVE-2024-8233","published":"2024-12-12T12:02:59.800Z","updated":"2024-12-12T15:44:14.399Z","title":"Inefficient Algorithmic Complexity in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0076,"kevAdded":null},{"id":"CVE-2024-8647","published":"2024-12-12T12:02:54.888Z","updated":"2024-12-12T15:44:19.905Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2024-9367","published":"2024-12-12T12:02:44.837Z","updated":"2024-12-12T15:44:25.438Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00495,"kevAdded":null},{"id":"CVE-2024-9387","published":"2024-12-12T12:02:39.825Z","updated":"2024-12-17T04:56:10.278Z","title":"URL Redirection to Untrusted Site ('Open Redirect') in GitLab","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2024-10043","published":"2024-12-12T12:02:29.814Z","updated":"2024-12-12T15:44:38.834Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2024-11274","published":"2024-12-12T12:02:20.019Z","updated":"2024-12-12T15:44:45.428Z","title":"URL Redirection to Untrusted Site ('Open Redirect') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2024-12570","published":"2024-12-12T11:30:44.818Z","updated":"2024-12-17T04:56:08.962Z","title":"Privilege Context Switching Error in GitLab","severity":"MEDIUM","score":6.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00514,"kevAdded":null},{"id":"CVE-2024-12292","published":"2024-12-12T11:30:39.823Z","updated":"2024-12-12T15:44:52.213Z","title":"Insertion of Sensitive Information into Log File in GitLab","severity":"MEDIUM","score":4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2024-12326","published":"2024-12-06T20:50:51.062Z","updated":"2024-12-30T14:51:38.301Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau","severity":"MEDIUM","score":6.1,"vendor":"Jirafeau project","product":"Jirafeau","kev":false,"epss":0.00242,"kevAdded":null},{"id":"CVE-2024-12107","published":"2024-12-04T10:54:51.452Z","updated":"2024-12-04T14:40:33.859Z","title":"Double Free in µD3TN","severity":"HIGH","score":7.5,"vendor":"D3TN GmbH","product":"µD3TN","kev":false,"epss":0.00522,"kevAdded":null},{"id":"CVE-2024-10240","published":"2024-11-26T19:22:52.689Z","updated":"2024-11-26T20:26:23.503Z","title":"Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00558,"kevAdded":null},{"id":"CVE-2024-11828","published":"2024-11-26T18:41:19.280Z","updated":"2024-11-26T19:53:40.674Z","title":"Inefficient Algorithmic Complexity in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00607,"kevAdded":null},{"id":"CVE-2024-11669","published":"2024-11-26T18:41:09.488Z","updated":"2024-11-30T04:55:54.926Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00511,"kevAdded":null},{"id":"CVE-2024-8114","published":"2024-11-26T18:31:10.674Z","updated":"2024-11-30T04:55:53.512Z","title":"Missing Authorization in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00669,"kevAdded":null},{"id":"CVE-2024-8177","published":"2024-11-26T18:31:05.665Z","updated":"2024-11-26T18:41:50.602Z","title":"Inefficient Algorithmic Complexity in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00567,"kevAdded":null},{"id":"CVE-2024-8237","published":"2024-11-26T18:31:00.676Z","updated":"2024-11-26T18:42:11.715Z","title":"Inefficient Algorithmic Complexity in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00607,"kevAdded":null},{"id":"CVE-2024-11668","published":"2024-11-26T18:30:45.846Z","updated":"2024-11-26T18:42:38.028Z","title":"Insufficient Session Expiration in GitLab","severity":"MEDIUM","score":4.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00339,"kevAdded":null},{"id":"CVE-2024-11596","published":"2024-11-21T09:30:59.843Z","updated":"2026-03-27T13:56:57.056Z","title":"Buffer Over-read in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2024-11595","published":"2024-11-21T09:30:54.899Z","updated":"2026-03-27T13:56:56.978Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2024-9633","published":"2024-11-14T13:30:57.385Z","updated":"2024-12-06T10:34:30.828Z","title":"Incorrect Ownership Assignment in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00456,"kevAdded":null},{"id":"CVE-2024-7404","published":"2024-11-14T13:02:23.587Z","updated":"2024-11-14T15:08:01.260Z","title":"Improper Restriction of Rendered UI Layers or Frames in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00558,"kevAdded":null},{"id":"CVE-2024-8648","published":"2024-11-14T13:02:08.724Z","updated":"2024-11-14T19:29:00.227Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":6.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2024-8180","published":"2024-11-14T11:02:16.331Z","updated":"2024-11-14T19:33:35.064Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2024-9693","published":"2024-11-14T11:02:01.506Z","updated":"2024-11-15T04:55:40.277Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00551,"kevAdded":null},{"id":"CVE-2024-10455","published":"2024-10-28T13:30:37.619Z","updated":"2024-10-28T13:47:59.719Z","title":"Reachable Assertion in µD3TN","severity":"HIGH","score":7.5,"vendor":"D3TN","product":"µD3TN","kev":false,"epss":0.00444,"kevAdded":null},{"id":"CVE-2024-6826","published":"2024-10-24T09:30:58.183Z","updated":"2024-10-24T12:56:42.887Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00523,"kevAdded":null},{"id":"CVE-2024-8312","published":"2024-10-24T09:30:43.270Z","updated":"2024-10-24T12:57:20.551Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00489,"kevAdded":null},{"id":"CVE-2024-8970","published":"2024-10-11T12:30:37.109Z","updated":"2024-10-11T13:37:54.711Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00676,"kevAdded":null},{"id":"CVE-2024-5005","published":"2024-10-11T11:30:57.104Z","updated":"2024-10-11T13:41:55.311Z","title":"Incorrect Provision of Specified Functionality in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2024-9164","published":"2024-10-11T11:30:42.233Z","updated":"2024-10-11T13:42:39.983Z","title":"Missing Authentication for Critical Function in GitLab","severity":"CRITICAL","score":9.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01038,"kevAdded":null},{"id":"CVE-2024-6530","published":"2024-10-10T12:02:10.807Z","updated":"2024-10-10T13:32:29.455Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.02189,"kevAdded":null},{"id":"CVE-2024-8977","published":"2024-10-10T10:02:10.914Z","updated":"2024-10-10T13:53:37.484Z","title":"Server-Side Request Forgery (SSRF) in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00552,"kevAdded":null},{"id":"CVE-2024-9596","published":"2024-10-10T10:02:01.165Z","updated":"2024-10-10T13:55:09.715Z","title":"Inclusion of Sensitive Information in Source Code in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2024-9623","published":"2024-10-10T09:30:38.315Z","updated":"2024-10-10T12:52:37.951Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2024-9781","published":"2024-10-10T06:30:54.729Z","updated":"2026-03-27T13:56:57.826Z","title":"Improper Handling of Missing Values in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2024-9780","published":"2024-10-10T06:30:49.710Z","updated":"2026-03-27T13:56:57.753Z","title":"Missing Initialization of a Variable in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2023-3441","published":"2024-10-01T09:47:16.444Z","updated":"2024-10-01T13:28:02.702Z","title":"Exposure of Sensitive Information Due to Incompatible Policies in GitLab","severity":"MEDIUM","score":6.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00554,"kevAdded":null},{"id":"CVE-2024-4099","published":"2024-09-26T23:02:15.810Z","updated":"2024-09-27T15:48:49.456Z","title":"Improper Encoding or Escaping of Output in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00295,"kevAdded":null},{"id":"CVE-2024-8974","published":"2024-09-26T23:02:00.153Z","updated":"2024-09-27T15:46:48.041Z","title":"Incorrect Provision of Specified Functionality in GitLab","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00292,"kevAdded":null},{"id":"CVE-2024-4278","published":"2024-09-26T06:30:59.796Z","updated":"2024-09-26T17:26:34.539Z","title":"Incorrect Synchronization in GitLab","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2024-4283","published":"2024-09-16T21:34:08.579Z","updated":"2024-09-18T13:07:40.681Z","title":"URL Redirection to Untrusted Site ('Open Redirect') in GitLab","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00375,"kevAdded":null},{"id":"CVE-2024-6685","published":"2024-09-16T21:33:58.732Z","updated":"2024-09-17T15:25:59.042Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2024-8311","published":"2024-09-12T18:27:24.446Z","updated":"2024-09-13T14:17:38.422Z","title":"Improper Protection of Alternate Path in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0061,"kevAdded":null},{"id":"CVE-2024-4472","published":"2024-09-12T18:26:38.059Z","updated":"2024-09-13T14:17:33.408Z","title":"Insertion of Sensitive Information into Log File in GitLab","severity":"MEDIUM","score":4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00218,"kevAdded":null},{"id":"CVE-2024-6678","published":"2024-09-12T18:26:33.060Z","updated":"2024-09-13T14:17:37.029Z","title":"Authentication Bypass by Spoofing in GitLab","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01989,"kevAdded":null},{"id":"CVE-2024-8641","published":"2024-09-12T18:26:18.243Z","updated":"2024-09-13T14:10:32.415Z","title":"Privilege Context Switching Error in GitLab","severity":"MEDIUM","score":6.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00579,"kevAdded":null},{"id":"CVE-2024-8631","published":"2024-09-12T17:11:03.832Z","updated":"2024-09-13T14:17:39.020Z","title":"Privilege Defined With Unsafe Actions in GitLab","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00526,"kevAdded":null},{"id":"CVE-2024-8754","published":"2024-09-12T17:02:00.988Z","updated":"2024-09-17T19:36:51.833Z","title":"External Control of Critical State Data in GitLab","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00432,"kevAdded":null},{"id":"CVE-2024-8635","published":"2024-09-12T17:01:51.084Z","updated":"2024-09-13T14:17:39.564Z","title":"Server-Side Request Forgery (SSRF) in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00555,"kevAdded":null},{"id":"CVE-2024-2743","published":"2024-09-12T16:57:23.260Z","updated":"2024-09-13T14:17:32.500Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2024-4612","published":"2024-09-12T16:57:08.255Z","updated":"2024-09-13T14:17:34.021Z","title":"URL Redirection to Untrusted Site ('Open Redirect') in GitLab","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2024-4660","published":"2024-09-12T16:57:03.244Z","updated":"2024-09-13T14:17:34.642Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00608,"kevAdded":null},{"id":"CVE-2024-5435","published":"2024-09-12T16:56:58.445Z","updated":"2024-09-13T14:17:35.209Z","title":"Generation of Error Message Containing Sensitive Information in GitLab","severity":"MEDIUM","score":4.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2024-6446","published":"2024-09-12T16:56:53.258Z","updated":"2024-09-13T14:17:36.471Z","title":"Business Logic Errors in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00409,"kevAdded":null},{"id":"CVE-2024-6389","published":"2024-09-12T16:56:48.267Z","updated":"2024-09-13T14:17:35.852Z","title":"Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2024-8124","published":"2024-09-12T16:56:33.253Z","updated":"2024-09-17T11:26:33.391Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.40245,"kevAdded":null},{"id":"CVE-2024-8640","published":"2024-09-12T16:56:23.356Z","updated":"2024-09-13T14:13:28.966Z","title":"Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00993,"kevAdded":null},{"id":"CVE-2024-8645","published":"2024-09-10T10:02:16.798Z","updated":"2026-03-27T13:56:57.666Z","title":"Access of Uninitialized Pointer in Wireshark","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2024-8250","published":"2024-08-28T23:30:36.975Z","updated":"2026-03-27T13:56:57.567Z","title":"Expired Pointer Dereference in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2024-3127","published":"2024-08-22T15:31:07.481Z","updated":"2024-08-29T15:04:57.250Z","title":"Improper Access Control in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2024-6502","published":"2024-08-22T15:30:52.480Z","updated":"2024-08-29T15:05:00.518Z","title":"Incorrect Provision of Specified Functionality in GitLab","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0043,"kevAdded":null},{"id":"CVE-2024-7110","published":"2024-08-22T15:30:47.474Z","updated":"2024-09-17T15:35:37.142Z","title":"Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2024-8041","published":"2024-08-22T15:30:37.643Z","updated":"2024-08-29T15:05:01.304Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2024-2800","published":"2024-08-08T10:31:37.860Z","updated":"2024-08-30T13:24:42.805Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00705,"kevAdded":null},{"id":"CVE-2024-3035","published":"2024-08-08T10:31:32.879Z","updated":"2024-09-17T15:29:42.165Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00355,"kevAdded":null},{"id":"CVE-2024-3114","published":"2024-08-08T10:31:22.868Z","updated":"2024-08-30T13:24:42.884Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2024-3958","published":"2024-08-08T10:31:17.868Z","updated":"2024-09-17T15:31:43.886Z","title":"Improper Control of Generation of Code ('Code Injection') in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2024-4207","published":"2024-08-08T10:31:12.873Z","updated":"2024-08-29T15:04:57.844Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2024-5423","published":"2024-08-08T10:31:02.871Z","updated":"2024-08-29T15:04:59.365Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2024-7554","published":"2024-08-08T10:30:47.869Z","updated":"2024-08-29T15:05:01.135Z","title":"Exposure of Sensitive Information to an Unauthorized Actor in GitLab","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00407,"kevAdded":null},{"id":"CVE-2024-7610","published":"2024-08-08T10:30:43.133Z","updated":"2024-08-29T15:05:01.225Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00452,"kevAdded":null},{"id":"CVE-2024-4210","published":"2024-08-08T10:02:29.806Z","updated":"2024-08-29T15:04:57.922Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00503,"kevAdded":null},{"id":"CVE-2024-4784","published":"2024-08-08T10:02:19.809Z","updated":"2024-08-29T15:04:58.457Z","title":"Authentication Bypass by Primary Weakness in GitLab","severity":"MEDIUM","score":4.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00293,"kevAdded":null},{"id":"CVE-2024-6329","published":"2024-08-08T10:02:09.817Z","updated":"2024-08-29T15:05:00.349Z","title":"Improper Encoding or Escaping of Output in GitLab","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2024-7057","published":"2024-07-25T00:30:55.513Z","updated":"2024-08-29T15:05:00.782Z","title":"Improper Access Control in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2024-7047","published":"2024-07-25T00:30:40.657Z","updated":"2024-08-29T15:05:00.689Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2024-0231","published":"2024-07-24T22:08:20.025Z","updated":"2024-08-29T15:04:54.292Z","title":"Improper Control of Resource Identifiers ('Resource Injection') in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2024-5067","published":"2024-07-24T22:08:05.034Z","updated":"2024-08-29T15:04:59.039Z","title":"Exposure of Sensitive Information to an Unauthorized Actor in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2024-7060","published":"2024-07-24T22:07:50.018Z","updated":"2024-09-17T16:58:29.528Z","title":"Exposure of Sensitive Information to an Unauthorized Actor in GitLab","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00305,"kevAdded":null},{"id":"CVE-2024-7091","published":"2024-07-24T22:07:45.260Z","updated":"2024-08-29T15:05:00.966Z","title":"Exposure of Sensitive Information to an Unauthorized Actor in GitLab","severity":"MEDIUM","score":4.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2024-6595","published":"2024-07-17T01:30:43.332Z","updated":"2024-09-17T15:32:29.174Z","title":"Uncontrolled Search Path Element in GitLab","severity":"LOW","score":3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00509,"kevAdded":null},{"id":"CVE-2024-2880","published":"2024-07-11T06:57:24.360Z","updated":"2024-09-17T17:00:19.878Z","title":"Improper Access Control in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2024-5257","published":"2024-07-11T06:57:09.372Z","updated":"2024-08-29T15:04:59.125Z","title":"Improper Access Control in GitLab","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0042,"kevAdded":null},{"id":"CVE-2024-5470","published":"2024-07-11T06:57:04.361Z","updated":"2024-08-29T15:04:59.607Z","title":"Improper Access Control in GitLab","severity":"LOW","score":3.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00331,"kevAdded":null},{"id":"CVE-2024-6385","published":"2024-07-11T06:56:54.515Z","updated":"2024-09-18T13:11:50.553Z","title":"Improper Access Control in GitLab","severity":"CRITICAL","score":9.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.07156,"kevAdded":null},{"id":"CVE-2024-2177","published":"2024-07-09T13:30:57.825Z","updated":"2024-09-17T16:00:34.552Z","title":"Improper Restriction of Rendered UI Layers or Frames in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00651,"kevAdded":null},{"id":"CVE-2024-1493","published":"2024-06-26T23:31:55.434Z","updated":"2024-08-30T13:24:42.450Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0049,"kevAdded":null},{"id":"CVE-2024-1816","published":"2024-06-26T23:31:50.436Z","updated":"2024-08-29T15:04:55.560Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2024-2191","published":"2024-06-26T23:31:45.431Z","updated":"2024-09-17T16:01:03.749Z","title":"Improper Access Control in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00432,"kevAdded":null},{"id":"CVE-2024-3115","published":"2024-06-26T23:31:35.425Z","updated":"2024-08-30T13:24:42.967Z","title":"Exposure of Sensitive Information to an Unauthorized Actor in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00337,"kevAdded":null},{"id":"CVE-2024-3959","published":"2024-06-26T23:31:25.425Z","updated":"2024-08-29T15:04:57.412Z","title":"Improper Authorization in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00496,"kevAdded":null},{"id":"CVE-2024-4011","published":"2024-06-26T23:31:20.436Z","updated":"2025-01-09T21:38:32.388Z","title":"Improper Access Control in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2024-4557","published":"2024-06-26T23:31:10.425Z","updated":"2024-08-29T15:04:58.095Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00533,"kevAdded":null},{"id":"CVE-2024-4901","published":"2024-06-26T23:31:05.422Z","updated":"2024-09-17T17:02:23.803Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.3347,"kevAdded":null},{"id":"CVE-2024-5655","published":"2024-06-26T23:30:55.421Z","updated":"2024-09-17T15:33:21.131Z","title":"Improper Access Control in GitLab","severity":"CRITICAL","score":9.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.07468,"kevAdded":null},{"id":"CVE-2024-5430","published":"2024-06-26T23:30:50.436Z","updated":"2024-08-29T15:04:59.442Z","title":"Improper Access Control in GitLab","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2024-6323","published":"2024-06-26T23:30:40.557Z","updated":"2024-09-17T17:03:09.769Z","title":"Improper Isolation or Compartmentalization in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00521,"kevAdded":null},{"id":"CVE-2024-6299","published":"2024-06-25T13:02:25.979Z","updated":"2024-08-29T15:04:59.770Z","title":"Use of a Key Past its Expiration Date in Conduit","severity":"MEDIUM","score":4.8,"vendor":"The Conduit Contributors","product":"Conduit","kev":false,"epss":0.00161,"kevAdded":null},{"id":"CVE-2024-6301","published":"2024-06-25T13:02:20.904Z","updated":"2024-08-29T15:04:59.937Z","title":"Origin Validation Error in Conduit","severity":"MEDIUM","score":5.3,"vendor":"The Conduit Contributors","product":"Conduit","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2024-6302","published":"2024-06-25T13:02:10.915Z","updated":"2024-09-17T18:00:30.094Z","title":"Improper Handling of Insufficient Permissions or Privileges  in Conduit","severity":"HIGH","score":8.1,"vendor":"The Conduit Contributors","product":"Conduit","kev":false,"epss":0.00284,"kevAdded":null},{"id":"CVE-2024-6303","published":"2024-06-25T13:02:05.982Z","updated":"2024-08-29T15:05:00.177Z","title":"Missing Authorization in Conduit","severity":"CRITICAL","score":9.9,"vendor":"The Conduit Contributors","product":"Conduit","kev":false,"epss":0.00433,"kevAdded":null},{"id":"CVE-2024-6300","published":"2024-06-25T13:02:01.082Z","updated":"2024-08-29T15:04:59.860Z","title":"Incomplete Cleanup in Conduit","severity":"LOW","score":3.7,"vendor":"The Conduit Contributors","product":"Conduit","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2024-5469","published":"2024-06-14T04:04:49.726Z","updated":"2025-01-09T21:40:26.611Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2024-1736","published":"2024-06-12T23:02:21.879Z","updated":"2024-09-18T13:10:48.392Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00575,"kevAdded":null},{"id":"CVE-2024-1495","published":"2024-06-12T23:02:16.842Z","updated":"2024-08-30T13:24:42.541Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00575,"kevAdded":null},{"id":"CVE-2024-1963","published":"2024-06-12T23:02:11.841Z","updated":"2024-08-30T13:24:42.721Z","title":"Uncontrolled Resource Consumption in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00575,"kevAdded":null},{"id":"CVE-2024-4201","published":"2024-06-12T23:01:56.967Z","updated":"2024-08-29T15:04:57.749Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00483,"kevAdded":null},{"id":"CVE-2024-5318","published":"2024-05-24T12:44:25.720Z","updated":"2024-10-03T06:23:19.497Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00369,"kevAdded":null},{"id":"CVE-2023-6502","published":"2024-05-23T11:02:31.779Z","updated":"2024-10-03T06:23:16.789Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00505,"kevAdded":null},{"id":"CVE-2023-7045","published":"2024-05-23T11:02:26.796Z","updated":"2024-09-18T13:11:01.842Z","title":"Cross-Site Request Forgery (CSRF) in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00286,"kevAdded":null},{"id":"CVE-2024-1947","published":"2024-05-23T11:02:21.780Z","updated":"2024-10-03T06:23:18.622Z","title":"Improper Handling of Highly Compressed Data (Data Amplification) in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0048,"kevAdded":null},{"id":"CVE-2024-5258","published":"2024-05-23T11:02:06.904Z","updated":"2024-08-29T15:04:59.201Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00277,"kevAdded":null},{"id":"CVE-2024-2874","published":"2024-05-23T07:02:35.610Z","updated":"2024-10-03T06:23:19.176Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00632,"kevAdded":null},{"id":"CVE-2024-4835","published":"2024-05-23T06:30:50.384Z","updated":"2024-09-17T15:33:50.607Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00802,"kevAdded":null},{"id":"CVE-2024-4855","published":"2024-05-14T00:03:17.488Z","updated":"2026-03-27T13:56:57.471Z","title":"Use After Free in editcap","severity":"LOW","score":3.6,"vendor":"Wireshark Foundation","product":"editcap","kev":false,"epss":0.00404,"kevAdded":null},{"id":"CVE-2024-4854","published":"2024-05-14T00:03:12.486Z","updated":"2026-03-27T13:56:57.389Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":6.4,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00811,"kevAdded":null},{"id":"CVE-2024-4853","published":"2024-05-14T00:03:07.500Z","updated":"2026-03-27T13:56:57.246Z","title":"Mismatched Memory Management Routines in editcap","severity":"LOW","score":3.6,"vendor":"Wireshark Foundation","product":"editcap","kev":false,"epss":0.00416,"kevAdded":null},{"id":"CVE-2023-6682","published":"2024-05-09T01:42:44.606Z","updated":"2024-10-03T06:23:17.063Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00752,"kevAdded":null},{"id":"CVE-2023-6688","published":"2024-05-09T01:38:46.718Z","updated":"2024-10-03T06:23:17.156Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00752,"kevAdded":null},{"id":"CVE-2024-2454","published":"2024-05-09T01:38:36.737Z","updated":"2024-10-03T06:23:18.723Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.33301,"kevAdded":null},{"id":"CVE-2024-2651","published":"2024-05-09T01:38:31.730Z","updated":"2024-10-03T06:23:18.818Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.33301,"kevAdded":null},{"id":"CVE-2024-4539","published":"2024-05-09T01:38:21.737Z","updated":"2024-10-03T06:23:19.371Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00774,"kevAdded":null},{"id":"CVE-2024-4597","published":"2024-05-09T01:38:11.850Z","updated":"2024-08-29T15:04:58.230Z","title":"Cross-Site Request Forgery (CSRF) in GitLab","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2024-4024","published":"2024-04-25T13:30:46.597Z","updated":"2026-06-02T04:14:54.728Z","title":"Authentication Bypass by Assumed-Immutable Data in GitLab","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.14903,"kevAdded":null},{"id":"CVE-2024-4006","published":"2024-04-25T13:30:36.721Z","updated":"2026-06-02T04:14:49.738Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00468,"kevAdded":null},{"id":"CVE-2024-1347","published":"2024-04-25T11:02:25.923Z","updated":"2025-11-20T04:11:59.475Z","title":"Authentication Bypass by Spoofing in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2024-2434","published":"2024-04-25T11:02:15.928Z","updated":"2025-11-20T04:12:14.487Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.23178,"kevAdded":null},{"id":"CVE-2024-2829","published":"2024-04-25T11:02:06.060Z","updated":"2025-11-20T04:12:19.477Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.25965,"kevAdded":null},{"id":"CVE-2023-6489","published":"2024-04-12T00:53:41.230Z","updated":"2026-08-14T04:14:23.653Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00606,"kevAdded":null},{"id":"CVE-2023-6678","published":"2024-04-12T00:53:31.239Z","updated":"2025-11-20T04:11:33.276Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00586,"kevAdded":null},{"id":"CVE-2024-2279","published":"2024-04-12T00:53:21.240Z","updated":"2026-05-02T04:05:37.944Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0058,"kevAdded":null},{"id":"CVE-2024-3092","published":"2024-04-12T00:53:11.346Z","updated":"2026-05-31T04:05:33.433Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00512,"kevAdded":null},{"id":"CVE-2023-6371","published":"2024-03-28T07:18:03.820Z","updated":"2026-05-08T04:06:58.687Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0049,"kevAdded":null},{"id":"CVE-2024-2818","published":"2024-03-28T07:17:48.930Z","updated":"2024-10-03T06:23:18.989Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00953,"kevAdded":null},{"id":"CVE-2024-2955","published":"2024-03-26T20:02:08.419Z","updated":"2026-04-08T04:08:36.178Z","title":"Mismatched Memory Management Routines in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01403,"kevAdded":null},{"id":"CVE-2023-6175","published":"2024-03-26T07:30:49.763Z","updated":"2026-03-27T13:56:56.309Z","title":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.03456,"kevAdded":null},{"id":"CVE-2024-0199","published":"2024-03-07T00:39:50.159Z","updated":"2025-04-16T15:53:24.694Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00706,"kevAdded":null},{"id":"CVE-2024-1299","published":"2024-03-07T00:39:45.501Z","updated":"2024-10-03T06:23:18.349Z","title":"Privilege Chaining in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00659,"kevAdded":null},{"id":"CVE-2023-4895","published":"2024-02-22T00:02:43.649Z","updated":"2025-11-20T04:10:03.293Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2023-6477","published":"2024-02-21T23:31:09.811Z","updated":"2026-05-15T04:05:17.852Z","title":"Incorrect Privilege Assignment in GitLab","severity":"MEDIUM","score":6.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2024-0410","published":"2024-02-21T23:30:59.792Z","updated":"2026-08-14T04:14:48.061Z","title":"Improper Enforcement of Behavioral Workflow in GitLab","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2024-1451","published":"2024-02-21T23:30:49.790Z","updated":"2026-05-23T04:05:17.051Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.51467,"kevAdded":null},{"id":"CVE-2024-1525","published":"2024-02-21T23:30:44.816Z","updated":"2026-10-11T04:18:10.109Z","title":"Authentication Bypass Using an Alternate Path or Channel in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00449,"kevAdded":null},{"id":"CVE-2024-0861","published":"2024-02-21T23:30:39.942Z","updated":"2026-05-01T04:05:36.289Z","title":"Direct Request ('Forced Browsing') in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00404,"kevAdded":null},{"id":"CVE-2023-3509","published":"2024-02-21T22:57:15.488Z","updated":"2026-08-14T04:11:24.820Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2024-1250","published":"2024-02-12T20:47:44.401Z","updated":"2026-06-02T04:14:39.731Z","title":"Privilege Chaining in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2023-6564","published":"2024-02-08T11:30:52.438Z","updated":"2024-10-03T06:23:16.888Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0038,"kevAdded":null},{"id":"CVE-2023-6736","published":"2024-02-07T22:02:30.947Z","updated":"2026-04-24T04:07:14.453Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00643,"kevAdded":null},{"id":"CVE-2023-6840","published":"2024-02-07T22:02:20.934Z","updated":"2026-04-24T04:07:19.586Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":6.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00558,"kevAdded":null},{"id":"CVE-2024-1066","published":"2024-02-07T22:02:11.043Z","updated":"2026-06-02T04:14:34.755Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00631,"kevAdded":null},{"id":"CVE-2024-1064","published":"2024-02-03T09:02:20.539Z","updated":"2024-08-29T15:04:54.738Z","title":"Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4","severity":"HIGH","score":7.5,"vendor":"Arcadia Technology, LLC","product":"Crafty Controller","kev":false,"epss":0.00808,"kevAdded":null},{"id":"CVE-2023-5612","published":"2024-01-26T02:02:39.783Z","updated":"2026-08-14T04:13:38.890Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.04867,"kevAdded":null},{"id":"CVE-2023-6159","published":"2024-01-26T02:02:29.909Z","updated":"2026-08-14T04:14:08.481Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00987,"kevAdded":null},{"id":"CVE-2023-5933","published":"2024-01-26T01:02:58.931Z","updated":"2026-04-25T04:05:38.198Z","title":"Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in GitLab","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00677,"kevAdded":null},{"id":"CVE-2024-0456","published":"2024-01-26T01:02:43.953Z","updated":"2026-06-15T22:59:52.879Z","title":"Direct Request ('Forced Browsing') in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00488,"kevAdded":null},{"id":"CVE-2024-0402","published":"2024-01-26T01:02:39.052Z","updated":"2026-06-03T04:08:40.742Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.03783,"kevAdded":null},{"id":"CVE-2023-2030","published":"2024-01-12T13:57:06.694Z","updated":"2025-11-20T04:06:38.255Z","title":"Improper Verification of Cryptographic Signature in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00387,"kevAdded":null},{"id":"CVE-2023-4812","published":"2024-01-12T13:56:56.701Z","updated":"2026-05-01T04:05:16.393Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":7.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2023-5356","published":"2024-01-12T13:56:51.714Z","updated":"2026-04-28T04:05:15.311Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00829,"kevAdded":null},{"id":"CVE-2023-7028","published":"2024-01-12T13:56:41.726Z","updated":"2026-08-15T04:10:51.207Z","title":"Weak Password Recovery Mechanism for Forgotten Password in GitLab","severity":"CRITICAL","score":10,"vendor":"GitLab","product":"GitLab","kev":true,"epss":0.94458,"kevAdded":"2024-05-01"},{"id":"CVE-2023-6955","published":"2024-01-12T13:56:31.881Z","updated":"2026-06-27T23:20:36.253Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":6.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00552,"kevAdded":null},{"id":"CVE-2024-0211","published":"2024-01-03T07:31:30.639Z","updated":"2026-03-27T13:56:56.882Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00543,"kevAdded":null},{"id":"CVE-2024-0210","published":"2024-01-03T07:31:25.644Z","updated":"2026-03-27T13:56:56.788Z","title":"Uncontrolled Recursion in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2024-0209","published":"2024-01-03T07:31:20.633Z","updated":"2026-03-27T13:56:56.675Z","title":"NULL Pointer Dereference in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00579,"kevAdded":null},{"id":"CVE-2024-0208","published":"2024-01-03T07:31:15.641Z","updated":"2026-03-27T13:56:56.561Z","title":"Improper Handling of Missing Values in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01823,"kevAdded":null},{"id":"CVE-2024-0207","published":"2024-01-03T07:31:10.632Z","updated":"2026-03-27T13:56:56.446Z","title":"Out-of-bounds Read in Wireshark","severity":"HIGH","score":7.8,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2023-3907","published":"2023-12-17T23:02:36.694Z","updated":"2026-05-31T04:05:00.429Z","title":"Improper User Management in GitLab","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00683,"kevAdded":null},{"id":"CVE-2023-3904","published":"2023-12-15T16:03:15.329Z","updated":"2026-08-14T04:11:35.083Z","title":"Improper Validation of Specified Type of Input in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00759,"kevAdded":null},{"id":"CVE-2023-5061","published":"2023-12-15T16:03:05.257Z","updated":"2026-05-02T04:05:18.070Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2023-5512","published":"2023-12-15T16:03:00.260Z","updated":"2026-04-28T04:05:20.348Z","title":"Improper Control of Generation of Code ('Code Injection') in GitLab","severity":"MEDIUM","score":4.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2023-6051","published":"2023-12-15T16:02:50.265Z","updated":"2025-11-20T04:11:13.279Z","title":"Improper Control of Generation of Code ('Code Injection') in GitLab","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00632,"kevAdded":null},{"id":"CVE-2023-6680","published":"2023-12-15T16:02:40.371Z","updated":"2026-06-06T04:06:08.671Z","title":"Improper Certificate Validation in GitLab","severity":"HIGH","score":7.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2023-3511","published":"2023-12-15T15:31:04.966Z","updated":"2025-11-20T04:08:03.264Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2023-5332","published":"2023-12-04T06:30:33.856Z","updated":"2024-10-03T06:23:16.051Z","title":"Dependency on Vulnerable Third-Party Component in GitLab","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00872,"kevAdded":null},{"id":"CVE-2023-3443","published":"2023-12-01T07:02:33.126Z","updated":"2026-08-14T04:11:11.636Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2023-3964","published":"2023-12-01T07:02:18.158Z","updated":"2026-05-06T04:05:57.591Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2023-3949","published":"2023-12-01T07:02:13.130Z","updated":"2025-11-20T04:09:03.271Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00592,"kevAdded":null},{"id":"CVE-2023-4317","published":"2023-12-01T07:02:03.130Z","updated":"2025-11-20T04:09:33.265Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00426,"kevAdded":null},{"id":"CVE-2023-4658","published":"2023-12-01T07:01:58.125Z","updated":"2026-04-26T04:06:59.596Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00467,"kevAdded":null},{"id":"CVE-2023-4912","published":"2023-12-01T07:01:48.155Z","updated":"2026-04-30T04:06:57.160Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2023-5226","published":"2023-12-01T07:01:43.131Z","updated":"2026-08-14T04:13:26.916Z","title":"Improper Control of Generation of Code ('Code Injection') in GitLab","severity":"MEDIUM","score":4.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00546,"kevAdded":null},{"id":"CVE-2023-6033","published":"2023-12-01T07:01:38.124Z","updated":"2025-11-20T04:11:08.273Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2023-5995","published":"2023-12-01T07:01:28.253Z","updated":"2025-11-20T04:11:03.258Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2023-6174","published":"2023-11-16T11:30:40.728Z","updated":"2026-03-27T13:56:56.193Z","title":"Out-of-bounds Read in Wireshark","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00746,"kevAdded":null},{"id":"CVE-2023-4379","published":"2023-11-09T21:01:10.733Z","updated":"2026-11-02T04:06:56.460Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":8.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.006,"kevAdded":null},{"id":"CVE-2023-4700","published":"2023-11-06T17:30:35.198Z","updated":"2025-11-20T04:09:53.262Z","title":"Missing Authorization in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0045,"kevAdded":null},{"id":"CVE-2023-5963","published":"2023-11-06T12:18:56.276Z","updated":"2026-10-11T04:17:03.445Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0048,"kevAdded":null},{"id":"CVE-2023-3399","published":"2023-11-06T12:08:54.970Z","updated":"2026-10-28T11:39:49.684Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00537,"kevAdded":null},{"id":"CVE-2023-3909","published":"2023-11-06T12:08:45.129Z","updated":"2025-11-20T04:08:28.265Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00725,"kevAdded":null},{"id":"CVE-2023-3246","published":"2023-11-06T12:01:43.918Z","updated":"2025-11-20T04:07:13.254Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00635,"kevAdded":null},{"id":"CVE-2023-5825","published":"2023-11-06T10:30:38.334Z","updated":"2026-04-29T04:05:16.721Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0077,"kevAdded":null},{"id":"CVE-2023-5831","published":"2023-11-06T10:30:28.442Z","updated":"2026-10-11T04:16:58.558Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00545,"kevAdded":null},{"id":"CVE-2023-5371","published":"2023-10-04T16:01:48.187Z","updated":"2026-03-27T13:56:56.112Z","title":"Memory Allocation with Excessive Size Value in Wireshark","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00513,"kevAdded":null},{"id":"CVE-2023-5106","published":"2023-10-02T11:49:56.333Z","updated":"2026-04-07T04:06:43.836Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00629,"kevAdded":null},{"id":"CVE-2023-5207","published":"2023-09-30T08:30:30.788Z","updated":"2026-08-14T04:13:21.915Z","title":"Execution with Unnecessary Privileges in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01241,"kevAdded":null},{"id":"CVE-2023-3413","published":"2023-09-29T08:30:56.742Z","updated":"2025-11-20T04:07:38.285Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00745,"kevAdded":null},{"id":"CVE-2023-3922","published":"2023-09-29T07:30:50.402Z","updated":"2026-04-25T04:05:19.195Z","title":"URL Redirection to Untrusted Site ('Open Redirect') in GitLab","severity":"LOW","score":3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2023-5198","published":"2023-09-29T07:01:42.219Z","updated":"2026-05-17T04:06:13.122Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00505,"kevAdded":null},{"id":"CVE-2023-0989","published":"2023-09-29T06:30:56.081Z","updated":"2025-11-20T04:06:08.264Z","title":"Improper Ownership Management in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00503,"kevAdded":null},{"id":"CVE-2023-2233","published":"2023-09-29T06:30:51.179Z","updated":"2025-11-20T04:06:48.254Z","title":"Missing Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00539,"kevAdded":null},{"id":"CVE-2023-3115","published":"2023-09-29T06:02:51.300Z","updated":"2025-11-20T04:06:58.296Z","title":"Incorrect User Management in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2023-3920","published":"2023-09-29T06:02:31.303Z","updated":"2026-08-14T04:11:54.961Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00453,"kevAdded":null},{"id":"CVE-2023-3917","published":"2023-09-29T06:02:26.304Z","updated":"2026-04-29T04:04:53.712Z","title":"Improper Validation of Specified Type of Input in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00927,"kevAdded":null},{"id":"CVE-2023-3914","published":"2023-09-29T06:02:21.304Z","updated":"2026-08-14T04:11:45.670Z","title":"Incorrect User Management in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00432,"kevAdded":null},{"id":"CVE-2023-3906","published":"2023-09-29T06:02:16.308Z","updated":"2026-08-14T04:11:40.087Z","title":"Improper Validation of Specified Type of Input in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00566,"kevAdded":null},{"id":"CVE-2023-3979","published":"2023-09-29T06:02:06.310Z","updated":"2026-08-14T04:12:17.660Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00475,"kevAdded":null},{"id":"CVE-2023-4532","published":"2023-09-29T06:02:01.299Z","updated":"2026-04-26T04:06:54.749Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00532,"kevAdded":null},{"id":"CVE-2023-5009","published":"2023-09-19T07:01:14.930Z","updated":"2026-10-28T11:39:50.305Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.09651,"kevAdded":null},{"id":"CVE-2023-4630","published":"2023-09-11T13:01:02.519Z","updated":"2026-10-14T04:07:12.177Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00479,"kevAdded":null},{"id":"CVE-2023-4874","published":"2023-09-09T14:30:29.741Z","updated":"2026-07-25T04:10:29.944Z","title":"Undefined Behavior for Input to API in Mutt","severity":"MEDIUM","score":4.3,"vendor":"Mutt","product":"Mutt","kev":false,"epss":0.00847,"kevAdded":null},{"id":"CVE-2023-4875","published":"2023-09-09T14:30:24.864Z","updated":"2026-07-25T04:10:34.834Z","title":"Undefined Behavior for Input to API in Mutt","severity":"LOW","score":2.2,"vendor":"Mutt","product":"Mutt","kev":false,"epss":0.00553,"kevAdded":null},{"id":"CVE-2023-3210","published":"2023-09-01T10:31:06.983Z","updated":"2025-11-20T04:07:08.262Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00812,"kevAdded":null},{"id":"CVE-2023-3950","published":"2023-09-01T10:30:46.990Z","updated":"2026-05-06T04:05:52.878Z","title":"Cleartext Storage of Sensitive Information in GitLab","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2023-4018","published":"2023-09-01T10:30:41.985Z","updated":"2026-08-14T04:12:42.488Z","title":"Direct Request ('Forced Browsing') in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2023-4378","published":"2023-09-01T10:30:31.991Z","updated":"2026-04-24T04:06:57.149Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00509,"kevAdded":null},{"id":"CVE-2023-4647","published":"2023-09-01T10:30:27.108Z","updated":"2026-06-02T04:13:14.397Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2022-4343","published":"2023-09-01T10:01:56.677Z","updated":"2025-11-20T04:05:53.441Z","title":"Exposure of Sensitive Information to an Unauthorized Actor in GitLab","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00474,"kevAdded":null},{"id":"CVE-2023-0120","published":"2023-09-01T10:01:51.685Z","updated":"2025-11-20T04:05:58.275Z","title":"Incorrect Authorization in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00415,"kevAdded":null},{"id":"CVE-2023-1279","published":"2023-09-01T10:01:41.677Z","updated":"2025-11-20T04:06:18.262Z","title":"URL Redirection to Untrusted Site in GitLab","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2023-1555","published":"2023-09-01T10:01:36.711Z","updated":"2025-11-20T04:06:28.258Z","title":"Missing Authorization in GitLab","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2023-3205","published":"2023-09-01T10:01:26.675Z","updated":"2025-11-20T04:07:03.335Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00849,"kevAdded":null},{"id":"CVE-2023-3915","published":"2023-09-01T10:01:16.853Z","updated":"2026-05-13T04:04:58.023Z","title":"Incorrect Execution-Assigned Permissions in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00682,"kevAdded":null},{"id":"CVE-2023-4522","published":"2023-08-30T07:01:19.117Z","updated":"2026-05-26T04:04:53.890Z","title":"Improper Validation of Specified Type of Input in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01153,"kevAdded":null},{"id":"CVE-2023-4513","published":"2023-08-24T06:30:50.727Z","updated":"2026-03-27T13:56:56.028Z","title":"Missing Release of Memory after Effective Lifetime in Wireshark","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00514,"kevAdded":null},{"id":"CVE-2023-4512","published":"2023-08-24T06:30:45.722Z","updated":"2026-03-27T13:56:55.920Z","title":"Uncontrolled Recursion in Wireshark","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00514,"kevAdded":null},{"id":"CVE-2023-4511","published":"2023-08-24T06:30:40.729Z","updated":"2026-03-27T13:56:55.813Z","title":"Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00463,"kevAdded":null},{"id":"CVE-2023-4012","published":"2023-08-07T17:30:33.452Z","updated":"2026-06-22T04:07:22.152Z","title":"Incomplete Internal State Distinction in ntpsec","severity":"HIGH","score":7.5,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.0045,"kevAdded":null},{"id":"CVE-2023-4002","published":"2023-08-04T00:30:28.797Z","updated":"2026-06-02T04:12:54.090Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00589,"kevAdded":null},{"id":"CVE-2023-4008","published":"2023-08-03T06:31:21.677Z","updated":"2026-06-02T04:12:58.974Z","title":"Incorrect Ownership Assignment in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00705,"kevAdded":null},{"id":"CVE-2023-3932","published":"2023-08-03T04:01:58.186Z","updated":"2026-10-28T11:39:49.756Z","title":"Incorrect User Management in GitLab","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00877,"kevAdded":null},{"id":"CVE-2023-2022","published":"2023-08-02T08:30:58.187Z","updated":"2025-11-20T04:06:33.293Z","title":"Missing Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2023-3401","published":"2023-08-02T08:30:48.302Z","updated":"2026-08-14T04:11:00.827Z","title":"Improper Control of Generation of Code ('Code Injection') in GitLab","severity":"MEDIUM","score":4.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2023-4011","published":"2023-08-02T05:30:35.128Z","updated":"2024-10-03T06:23:14.085Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00784,"kevAdded":null},{"id":"CVE-2023-3500","published":"2023-08-02T00:07:15.239Z","updated":"2025-11-20T04:07:53.323Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":4.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00529,"kevAdded":null},{"id":"CVE-2023-3900","published":"2023-08-02T00:07:05.231Z","updated":"2025-11-20T04:08:08.254Z","title":"Improper Validation of Specified Type of Input in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00918,"kevAdded":null},{"id":"CVE-2023-3993","published":"2023-08-02T00:07:00.242Z","updated":"2024-10-03T06:23:13.637Z","title":"Insertion of Sensitive Information into Log File in GitLab","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2023-3994","published":"2023-08-02T00:06:50.342Z","updated":"2026-04-27T04:06:31.406Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00958,"kevAdded":null},{"id":"CVE-2023-0632","published":"2023-08-01T23:36:30.662Z","updated":"2025-11-20T04:06:03.830Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00918,"kevAdded":null},{"id":"CVE-2023-1210","published":"2023-08-01T23:36:25.668Z","updated":"2025-11-20T04:06:13.263Z","title":"Generation of Error Message Containing Sensitive Information in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.006,"kevAdded":null},{"id":"CVE-2023-2164","published":"2023-08-01T23:36:10.665Z","updated":"2026-08-14T04:10:24.796Z","title":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.66337,"kevAdded":null},{"id":"CVE-2023-3364","published":"2023-08-01T23:36:00.662Z","updated":"2025-11-20T04:07:18.275Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.44494,"kevAdded":null},{"id":"CVE-2023-3385","published":"2023-08-01T23:35:55.776Z","updated":"2025-11-20T04:07:23.274Z","title":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab","severity":"MEDIUM","score":6.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00865,"kevAdded":null},{"id":"CVE-2023-1401","published":"2023-07-26T06:01:46.447Z","updated":"2025-11-20T04:06:23.275Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00522,"kevAdded":null},{"id":"CVE-2023-3102","published":"2023-07-21T15:30:47.974Z","updated":"2025-11-20T04:06:53.267Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2023-3484","published":"2023-07-21T13:01:03.770Z","updated":"2025-11-20T04:07:48.264Z","title":"Incorrect Authorization in GitLab","severity":"HIGH","score":8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00582,"kevAdded":null},{"id":"CVE-2023-3649","published":"2023-07-14T06:16:45.767Z","updated":"2025-11-03T21:48:52.023Z","title":"Buffer Over-read in Wireshark","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00239,"kevAdded":null},{"id":"CVE-2023-3648","published":"2023-07-14T06:16:33.827Z","updated":"2025-11-03T21:48:50.564Z","title":"Mismatched Memory Management Routines in Wireshark","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0025,"kevAdded":null},{"id":"CVE-2023-2620","published":"2023-07-13T02:11:05.008Z","updated":"2024-11-06T14:22:24.167Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2023-2576","published":"2023-07-13T02:08:59.291Z","updated":"2024-10-30T19:24:40.514Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2023-3362","published":"2023-07-13T02:08:46.856Z","updated":"2024-11-05T15:10:55.758Z","title":"Generation of Error Message Containing Sensitive Information in GitLab","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00548,"kevAdded":null},{"id":"CVE-2023-3363","published":"2023-07-13T02:08:35.069Z","updated":"2024-11-05T15:14:10.202Z","title":"Insertion of Sensitive Information into Log File in GitLab","severity":"LOW","score":3.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00185,"kevAdded":null},{"id":"CVE-2023-3444","published":"2023-07-13T02:08:20.930Z","updated":"2024-11-05T15:15:46.783Z","title":"Incorrect Authorization in GitLab","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00521,"kevAdded":null},{"id":"CVE-2023-3424","published":"2023-07-13T02:08:07.284Z","updated":"2024-10-30T19:29:27.116Z","title":"Inefficient Regular Expression Complexity in GitLab","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00905,"kevAdded":null},{"id":"CVE-2023-2200","published":"2023-07-13T02:02:34.411Z","updated":"2024-10-30T19:31:16.274Z","title":"Improper Encoding or Escaping of Output in GitLab","severity":"MEDIUM","score":4.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2023-2190","published":"2023-07-13T02:00:02.797Z","updated":"2024-10-30T19:53:19.973Z","title":"Authorization Bypass Through User-Controlled Key in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00663,"kevAdded":null},{"id":"CVE-2023-1936","published":"2023-07-11T07:58:27.746Z","updated":"2024-11-12T16:22:49.564Z","title":"Exposure of Private Personal Information to an Unauthorized Actor in GitLab","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00581,"kevAdded":null},{"id":"CVE-2023-2232","published":"2023-06-28T00:00:00.000Z","updated":"2024-11-27T18:57:25.059Z","title":"An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01611,"kevAdded":null},{"id":"CVE-2022-4143","published":"2023-06-28T00:00:00.000Z","updated":"2024-12-03T19:59:00.410Z","title":"An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that…","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0076,"kevAdded":null},{"id":"CVE-2023-2589","published":"2023-06-07T00:00:00.000Z","updated":"2025-01-07T16:25:26.100Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all…","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2023-2485","published":"2023-06-07T00:00:00.000Z","updated":"2025-01-07T15:44:24.332Z","title":"Incorrect Privilege Assignment in GitLab","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00817,"kevAdded":null},{"id":"CVE-2023-2442","published":"2023-06-07T00:00:00.000Z","updated":"2025-01-07T16:29:51.039Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A…","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.96058,"kevAdded":null},{"id":"CVE-2023-2199","published":"2023-06-07T00:00:00.000Z","updated":"2025-01-07T16:45:38.544Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.0 before 15.10.8, all versions starting from 15.11 before 15.11.7, all…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01325,"kevAdded":null},{"id":"CVE-2023-2198","published":"2023-06-07T00:00:00.000Z","updated":"2025-01-07T16:46:54.703Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01325,"kevAdded":null},{"id":"CVE-2023-2015","published":"2023-06-07T00:00:00.000Z","updated":"2025-01-07T16:48:03.485Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.8 before 15.10.8, all versions starting from 15.11 before 15.11.7, all…","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00612,"kevAdded":null},{"id":"CVE-2023-2013","published":"2023-06-07T00:00:00.000Z","updated":"2025-01-07T16:50:56.690Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 1.2 before 15.10.8, all versions starting from 15.11 before 15.11.7, all…","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0069,"kevAdded":null},{"id":"CVE-2023-2001","published":"2023-06-07T00:00:00.000Z","updated":"2025-01-07T16:54:05.061Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00585,"kevAdded":null},{"id":"CVE-2023-1825","published":"2023-06-07T00:00:00.000Z","updated":"2025-01-07T16:56:43.350Z","title":"Insertion of Sensitive Information Into Sent Data in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00538,"kevAdded":null},{"id":"CVE-2023-0508","published":"2023-06-07T00:00:00.000Z","updated":"2025-01-07T16:58:22.665Z","title":"Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in GitLab","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00757,"kevAdded":null},{"id":"CVE-2023-0121","published":"2023-06-07T00:00:00.000Z","updated":"2025-01-07T17:00:17.563Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01243,"kevAdded":null},{"id":"CVE-2023-2132","published":"2023-06-06T00:00:00.000Z","updated":"2025-01-07T21:34:45.492Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01325,"kevAdded":null},{"id":"CVE-2023-1621","published":"2023-06-06T00:00:00.000Z","updated":"2025-01-07T21:38:25.067Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starting from 15.11 before 15.11.1. A…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00872,"kevAdded":null},{"id":"CVE-2023-0921","published":"2023-06-06T00:00:00.000Z","updated":"2025-01-07T21:51:37.372Z","title":"Allocation of Resources Without Limits or Throttling in GitLab","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.84438,"kevAdded":null},{"id":"CVE-2023-2952","published":"2023-05-30T00:00:00.000Z","updated":"2025-11-03T21:47:56.615Z","title":"XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01095,"kevAdded":null},{"id":"CVE-2023-2879","published":"2023-05-26T00:00:00.000Z","updated":"2025-11-03T21:47:43.448Z","title":"GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01592,"kevAdded":null},{"id":"CVE-2023-2858","published":"2023-05-26T00:00:00.000Z","updated":"2025-11-03T21:47:41.980Z","title":"NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01787,"kevAdded":null},{"id":"CVE-2023-2857","published":"2023-05-26T00:00:00.000Z","updated":"2025-01-15T15:41:45.855Z","title":"BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00875,"kevAdded":null},{"id":"CVE-2023-2856","published":"2023-05-26T00:00:00.000Z","updated":"2025-11-03T21:47:40.525Z","title":"VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01787,"kevAdded":null},{"id":"CVE-2023-2855","published":"2023-05-26T00:00:00.000Z","updated":"2025-11-03T21:47:39.041Z","title":"Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01645,"kevAdded":null},{"id":"CVE-2023-2854","published":"2023-05-26T00:00:00.000Z","updated":"2025-01-15T15:44:03.325Z","title":"BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file","severity":"MEDIUM","score":5.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00875,"kevAdded":null},{"id":"CVE-2023-2825","published":"2023-05-26T00:00:00.000Z","updated":"2025-01-15T15:45:18.054Z","title":"An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read…","severity":"CRITICAL","score":10,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.71641,"kevAdded":null},{"id":"CVE-2023-2181","published":"2023-05-12T00:00:00.000Z","updated":"2025-01-24T15:47:03.675Z","title":"An issue has been discovered in GitLab affecting all versions before 15.9.8, 15.10.0 before 15.10.7, and 15.11.0 before 15.11.3. A malicious developer could…","severity":"MEDIUM","score":6.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00729,"kevAdded":null},{"id":"CVE-2023-2478","published":"2023-05-08T00:00:00.000Z","updated":"2025-01-29T17:16:21.653Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.9.7, all versions starting from 15.10 before 15.10.6, all…","severity":"CRITICAL","score":9.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.05042,"kevAdded":null},{"id":"CVE-2023-2182","published":"2023-05-03T00:00:00.000Z","updated":"2025-01-30T20:51:04.176Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Under…","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01039,"kevAdded":null},{"id":"CVE-2023-2069","published":"2023-05-03T00:00:00.000Z","updated":"2025-01-30T20:30:20.164Z","title":"An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions…","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00811,"kevAdded":null},{"id":"CVE-2023-1965","published":"2023-05-03T00:00:00.000Z","updated":"2025-01-29T21:40:33.282Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all…","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2023-1836","published":"2023-05-03T00:00:00.000Z","updated":"2025-01-29T21:46:34.969Z","title":"A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all versions starting from 15.10 before…","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00753,"kevAdded":null},{"id":"CVE-2023-1265","published":"2023-05-03T00:00:00.000Z","updated":"2025-01-29T21:48:35.944Z","title":"An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00781,"kevAdded":null},{"id":"CVE-2023-1204","published":"2023-05-03T00:00:00.000Z","updated":"2025-01-30T15:23:14.205Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00514,"kevAdded":null},{"id":"CVE-2023-1178","published":"2023-05-03T00:00:00.000Z","updated":"2025-02-12T16:24:29.956Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions…","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00894,"kevAdded":null},{"id":"CVE-2023-0805","published":"2023-05-03T00:00:00.000Z","updated":"2025-02-12T16:12:30.237Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all…","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00829,"kevAdded":null},{"id":"CVE-2023-0756","published":"2023-05-03T00:00:00.000Z","updated":"2025-02-12T16:08:12.043Z","title":"An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11…","severity":"MEDIUM","score":4.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01008,"kevAdded":null},{"id":"CVE-2023-0485","published":"2023-05-03T00:00:00.000Z","updated":"2025-02-12T16:07:11.683Z","title":"An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00957,"kevAdded":null},{"id":"CVE-2023-0155","published":"2023-05-03T00:00:00.000Z","updated":"2025-02-12T16:06:37.397Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was possible due to framing arbitrary…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00773,"kevAdded":null},{"id":"CVE-2022-4376","published":"2023-05-03T00:00:00.000Z","updated":"2025-02-12T16:05:51.793Z","title":"An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00762,"kevAdded":null},{"id":"CVE-2023-1994","published":"2023-04-12T00:00:00.000Z","updated":"2025-11-03T21:47:11.028Z","title":"GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01001,"kevAdded":null},{"id":"CVE-2023-1993","published":"2023-04-12T00:00:00.000Z","updated":"2025-11-03T21:47:09.557Z","title":"LISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.04095,"kevAdded":null},{"id":"CVE-2023-1992","published":"2023-04-12T00:00:00.000Z","updated":"2025-11-03T21:47:08.060Z","title":"RPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0462,"kevAdded":null},{"id":"CVE-2023-1787","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-10T20:42:19.982Z","title":"An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A search…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00752,"kevAdded":null},{"id":"CVE-2023-1733","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-10T20:48:40.695Z","title":"A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 15.8.5, 15.9 to 15.9.4 and 15.10 to…","severity":"MEDIUM","score":5.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01242,"kevAdded":null},{"id":"CVE-2023-1710","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-10T20:49:48.239Z","title":"A sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior to 15.8.5, 15.9 prior to 15.9.4 and 15.10 prior to 15.10.1…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00786,"kevAdded":null},{"id":"CVE-2023-1708","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-10T20:51:52.816Z","title":"An issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9 prior to 15.9.4, and 15.10 prior to 15.10.1 where non-printable…","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01109,"kevAdded":null},{"id":"CVE-2023-1417","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-11T15:26:30.751Z","title":"An issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00651,"kevAdded":null},{"id":"CVE-2023-1167","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-10T20:52:43.715Z","title":"Improper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00563,"kevAdded":null},{"id":"CVE-2023-1098","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-10T20:58:02.109Z","title":"An information disclosure vulnerability has been discovered in GitLab EE/CE affecting all versions starting from 11.5 before 15.8.5, all versions starting from…","severity":"MEDIUM","score":5.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00942,"kevAdded":null},{"id":"CVE-2023-1071","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-10T20:58:46.736Z","title":"An issue has been discovered in GitLab affecting all versions from 15.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00407,"kevAdded":null},{"id":"CVE-2023-0838","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-10T20:59:42.972Z","title":"An issue has been discovered in GitLab affecting versions starting from 15.1 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. A maintainer could…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00731,"kevAdded":null},{"id":"CVE-2023-0523","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-10T21:09:32.085Z","title":"An issue has been discovered in GitLab affecting all versions starting from 15.6 before 15.8.5, 15.9 before 15.9.4, and 15.10 before 15.10.1. An XSS was…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00642,"kevAdded":null},{"id":"CVE-2023-0450","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-11T15:29:29.135Z","title":"An issue has been discovered in GitLab affecting all versions starting from 8.1 to 15.8.5, and from 15.9 to 15.9.4, and from 15.10 to 15.10.1. It was possible…","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00683,"kevAdded":null},{"id":"CVE-2023-0319","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-11T16:09:27.128Z","title":"An issue has been discovered in GitLab affecting all versions starting from 13.6 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions…","severity":"MEDIUM","score":5.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00744,"kevAdded":null},{"id":"CVE-2022-3513","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-11T16:12:28.033Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions…","severity":"MEDIUM","score":6.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00743,"kevAdded":null},{"id":"CVE-2022-3375","published":"2023-04-05T00:00:00.000Z","updated":"2025-02-10T21:11:02.636Z","title":"An issue has been discovered in GitLab affecting all versions starting from 11.10 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00795,"kevAdded":null},{"id":"CVE-2023-0326","published":"2023-03-27T00:00:00.000Z","updated":"2025-02-19T19:31:29.580Z","title":"An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where Authorization headers was leaked in…","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab DAST API scanner","kev":false,"epss":0.00802,"kevAdded":null},{"id":"CVE-2023-1084","published":"2023-03-09T00:00:00.000Z","updated":"2025-02-28T21:34:19.563Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from…","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00806,"kevAdded":null},{"id":"CVE-2023-1072","published":"2023-03-09T00:00:00.000Z","updated":"2025-02-28T21:33:11.787Z","title":"An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00786,"kevAdded":null},{"id":"CVE-2023-0483","published":"2023-03-09T00:00:00.000Z","updated":"2025-02-28T21:31:41.989Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00565,"kevAdded":null},{"id":"CVE-2023-0223","published":"2023-03-09T00:00:00.000Z","updated":"2025-02-28T21:29:52.818Z","title":"An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00786,"kevAdded":null},{"id":"CVE-2023-0050","published":"2023-03-09T00:00:00.000Z","updated":"2025-02-28T21:28:39.137Z","title":"An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions…","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.9242,"kevAdded":null},{"id":"CVE-2022-4462","published":"2023-03-09T00:00:00.000Z","updated":"2025-02-28T21:27:23.832Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions…","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00661,"kevAdded":null},{"id":"CVE-2022-4331","published":"2023-03-09T00:00:00.000Z","updated":"2025-02-28T17:25:16.373Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions…","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00744,"kevAdded":null},{"id":"CVE-2022-4317","published":"2023-03-09T00:00:00.000Z","updated":"2025-02-28T17:26:25.536Z","title":"An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sends custom request headers in redirects.","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"DAST","kev":false,"epss":0.00541,"kevAdded":null},{"id":"CVE-2022-4289","published":"2023-03-09T00:00:00.000Z","updated":"2024-08-03T01:34:50.021Z","title":"An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before 15.8.4, and version 15.9 before 15.9.2.…","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0069,"kevAdded":null},{"id":"CVE-2022-3767","published":"2023-03-09T00:00:00.000Z","updated":"2025-02-28T17:28:45.941Z","title":"Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless…","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"DAST","kev":false,"epss":0.00752,"kevAdded":null},{"id":"CVE-2022-3758","published":"2023-03-09T00:00:00.000Z","updated":"2025-02-28T17:30:48.778Z","title":"An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00577,"kevAdded":null},{"id":"CVE-2022-3381","published":"2023-03-09T00:00:00.000Z","updated":"2025-02-28T17:31:41.075Z","title":"An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15.9 prior to 15.9.2. A crafted URL could…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0061,"kevAdded":null},{"id":"CVE-2022-4315","published":"2023-03-08T00:00:00.000Z","updated":"2025-03-04T15:58:11.641Z","title":"An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which sends custom request headers with every…","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00805,"kevAdded":null},{"id":"CVE-2022-4007","published":"2023-03-08T00:00:00.000Z","updated":"2025-03-12T19:52:24.294Z","title":"A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to 15.9.2 A…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0055,"kevAdded":null},{"id":"CVE-2023-1161","published":"2023-03-06T00:00:00.000Z","updated":"2025-11-03T21:47:05.085Z","title":"ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2022-4645","published":"2023-03-03T00:00:00.000Z","updated":"2025-04-04T20:37:39.327Z","title":"LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users…","severity":"MEDIUM","score":6.8,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2023-0804","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T14:47:39.466Z","title":"LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For…","severity":"MEDIUM","score":6.8,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2023-0803","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T18:55:10.527Z","title":"LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For…","severity":"MEDIUM","score":6.8,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2023-0802","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T18:59:50.408Z","title":"LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For…","severity":"MEDIUM","score":6.8,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2023-0801","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T19:00:43.776Z","title":"LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers…","severity":"MEDIUM","score":6.8,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2023-0800","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T19:01:06.503Z","title":"LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For…","severity":"MEDIUM","score":6.8,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2023-0799","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T19:02:37.513Z","title":"LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For…","severity":"MEDIUM","score":6.8,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2023-0798","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T19:02:57.304Z","title":"LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For…","severity":"MEDIUM","score":6.8,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2023-0797","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T19:03:22.116Z","title":"LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers…","severity":"MEDIUM","score":6.8,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2023-0796","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T19:11:13.462Z","title":"LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For…","severity":"MEDIUM","score":6.8,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2023-0795","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T19:12:39.089Z","title":"LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For…","severity":"MEDIUM","score":6.8,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2023-0518","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T19:13:59.735Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01216,"kevAdded":null},{"id":"CVE-2022-4138","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T19:13:19.474Z","title":"A Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions before 15.6.7, all versions starting from 15.7 before 15.7.6, and…","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00445,"kevAdded":null},{"id":"CVE-2022-3759","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T18:38:24.181Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15.6.7, all versions starting from 15.7 before 15.7.6, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01216,"kevAdded":null},{"id":"CVE-2022-3411","published":"2023-02-13T00:00:00.000Z","updated":"2025-03-21T18:39:31.969Z","title":"A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.8 before 15.8.1 allows an authenticated…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01247,"kevAdded":null},{"id":"CVE-2022-4206","published":"2023-02-01T00:00:00.000Z","updated":"2025-03-27T14:43:30.972Z","title":"A sensitive information leak issue has been discovered in all versions of DAST API scanner from 1.6.50 prior to 2.0.102, exposing the Authorization header in…","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"DAST API scanner","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2022-4335","published":"2023-01-27T00:00:00.000Z","updated":"2025-03-28T14:39:12.458Z","title":"A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which allows an attacker…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0075,"kevAdded":null},{"id":"CVE-2022-4255","published":"2023-01-27T00:00:00.000Z","updated":"2025-03-27T20:17:04.693Z","title":"An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2022-4205","published":"2023-01-27T00:00:00.000Z","updated":"2025-03-27T20:21:18.593Z","title":"In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash.","severity":"MEDIUM","score":6.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00603,"kevAdded":null},{"id":"CVE-2022-4201","published":"2023-01-27T00:00:00.000Z","updated":"2025-03-27T20:20:58.630Z","title":"A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to connect to local…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00546,"kevAdded":null},{"id":"CVE-2023-0417","published":"2023-01-24T00:00:00.000Z","updated":"2025-11-03T21:46:58.960Z","title":"Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0089,"kevAdded":null},{"id":"CVE-2023-0416","published":"2023-01-24T00:00:00.000Z","updated":"2025-11-03T21:46:57.494Z","title":"GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0089,"kevAdded":null},{"id":"CVE-2023-0415","published":"2023-01-24T00:00:00.000Z","updated":"2025-11-03T21:46:56.010Z","title":"iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0089,"kevAdded":null},{"id":"CVE-2023-0414","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:13:53.483Z","title":"Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00846,"kevAdded":null},{"id":"CVE-2023-0413","published":"2023-01-24T00:00:00.000Z","updated":"2025-11-03T21:46:54.535Z","title":"Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0089,"kevAdded":null},{"id":"CVE-2023-0412","published":"2023-01-24T00:00:00.000Z","updated":"2025-11-03T21:46:53.070Z","title":"TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0084,"kevAdded":null},{"id":"CVE-2023-0411","published":"2023-01-24T00:00:00.000Z","updated":"2025-11-03T21:46:51.602Z","title":"Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00928,"kevAdded":null},{"id":"CVE-2022-4092","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-01T17:36:33.623Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to create a malicious README page due to…","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01314,"kevAdded":null},{"id":"CVE-2022-4054","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:15:52.961Z","title":"An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00715,"kevAdded":null},{"id":"CVE-2022-3902","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:00:25.550Z","title":"An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00733,"kevAdded":null},{"id":"CVE-2022-3820","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:02:18.005Z","title":"An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. GitLab was not performing correct…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00733,"kevAdded":null},{"id":"CVE-2022-3740","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:03:23.934Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. A group…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0115,"kevAdded":null},{"id":"CVE-2022-3572","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:03:52.887Z","title":"A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions from 13.5 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to…","severity":"CRITICAL","score":9.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01022,"kevAdded":null},{"id":"CVE-2022-3482","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:04:21.592Z","title":"An improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allowed an…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01054,"kevAdded":null},{"id":"CVE-2022-3478","published":"2023-01-24T00:00:00.000Z","updated":"2025-04-02T15:05:04.648Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0104,"kevAdded":null},{"id":"CVE-2022-2907","published":"2023-01-17T00:00:00.000Z","updated":"2025-04-04T17:43:37.905Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15.1.6, all versions starting from 15.2 before 15.2.4, all…","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00931,"kevAdded":null},{"id":"CVE-2022-2251","published":"2023-01-17T00:00:00.000Z","updated":"2025-04-08T18:20:55.756Z","title":"Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user who…","severity":"MEDIUM","score":4.8,"vendor":"GitLab","product":"GitLab Runner","kev":false,"epss":0.01177,"kevAdded":null},{"id":"CVE-2023-0042","published":"2023-01-12T00:00:00.000Z","updated":"2025-04-08T13:41:06.344Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2. GitLab…","severity":"MEDIUM","score":6.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2022-4365","published":"2023-01-12T00:00:00.000Z","updated":"2025-04-08T13:51:16.139Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 15.5.7, all versions starting from 15.6 before 15.6.4, all…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00731,"kevAdded":null},{"id":"CVE-2022-4345","published":"2023-01-12T00:00:00.000Z","updated":"2025-11-03T21:46:39.577Z","title":"Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet…","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00694,"kevAdded":null},{"id":"CVE-2022-4342","published":"2023-01-12T00:00:00.000Z","updated":"2025-04-08T16:44:33.383Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15.5.7, all versions starting from 15.6 before 15.6.4, all…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00751,"kevAdded":null},{"id":"CVE-2022-4167","published":"2023-01-12T00:00:00.000Z","updated":"2025-04-08T16:28:42.595Z","title":"Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2 allows group…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00556,"kevAdded":null},{"id":"CVE-2022-4131","published":"2023-01-12T00:00:00.000Z","updated":"2025-04-08T16:27:37.240Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15.5.7, all versions starting from 15.6 before 15.6.4, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00865,"kevAdded":null},{"id":"CVE-2022-4037","published":"2023-01-12T00:00:00.000Z","updated":"2025-04-08T16:22:03.062Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from…","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00656,"kevAdded":null},{"id":"CVE-2022-3870","published":"2023-01-12T00:00:00.000Z","updated":"2025-04-09T13:14:42.655Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00725,"kevAdded":null},{"id":"CVE-2022-3613","published":"2023-01-12T00:00:00.000Z","updated":"2025-04-08T15:06:58.671Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from…","severity":"MEDIUM","score":5.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01009,"kevAdded":null},{"id":"CVE-2022-3573","published":"2023-01-12T00:00:00.000Z","updated":"2025-04-08T15:15:38.863Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions starting from 15.6 before 15.6.4, all…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00606,"kevAdded":null},{"id":"CVE-2022-3514","published":"2023-01-12T00:00:00.000Z","updated":"2025-04-08T15:55:39.078Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starting from 15.6 before 15.6.4, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00872,"kevAdded":null},{"id":"CVE-2022-4344","published":"2023-01-11T00:00:00.000Z","updated":"2025-11-03T21:46:38.099Z","title":"Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injection or crafted…","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.00585,"kevAdded":null},{"id":"CVE-2022-3724","published":"2022-12-09T00:00:00.000Z","updated":"2025-04-22T19:27:54.111Z","title":"Crash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file on Windows","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.02545,"kevAdded":null},{"id":"CVE-2022-3819","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T19:20:42.132Z","title":"An improper authorization issue in GitLab CE/EE affecting all versions from 15.0 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00471,"kevAdded":null},{"id":"CVE-2022-3818","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T19:21:26.144Z","title":"An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0074,"kevAdded":null},{"id":"CVE-2022-3793","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T19:22:11.846Z","title":"An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00643,"kevAdded":null},{"id":"CVE-2022-3726","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T19:23:10.307Z","title":"Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2…","severity":"MEDIUM","score":4.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00849,"kevAdded":null},{"id":"CVE-2022-3706","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T19:23:59.790Z","title":"Improper authorization in GitLab CE/EE affecting all versions from 7.14 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user retrying…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00566,"kevAdded":null},{"id":"CVE-2022-3486","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T19:28:07.599Z","title":"An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2, allows an…","severity":"MEDIUM","score":4.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00806,"kevAdded":null},{"id":"CVE-2022-3483","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T19:28:48.167Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions starting from 15.4 before 15.4.4, all…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00724,"kevAdded":null},{"id":"CVE-2022-3413","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T15:53:13.899Z","title":"Incorrect authorization during display of Audit Events in GitLab EE affecting all versions from 14.5 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2022-3285","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T19:24:39.816Z","title":"Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00835,"kevAdded":null},{"id":"CVE-2022-3280","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T19:25:23.142Z","title":"An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to trick…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00577,"kevAdded":null},{"id":"CVE-2022-3265","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T19:26:11.438Z","title":"A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. It was…","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.86982,"kevAdded":null},{"id":"CVE-2022-2761","published":"2022-11-09T00:00:00.000Z","updated":"2025-05-01T19:35:56.179Z","title":"An information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00733,"kevAdded":null},{"id":"CVE-2022-2904","published":"2022-11-02T00:00:00.000Z","updated":"2025-05-02T18:47:03.811Z","title":"A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.5, all versions starting from 15.3…","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00824,"kevAdded":null},{"id":"CVE-2022-3018","published":"2022-10-28T00:00:00.000Z","updated":"2025-05-07T14:36:20.373Z","title":"An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 15.3 before 15.3.4,…","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00811,"kevAdded":null},{"id":"CVE-2022-2882","published":"2022-10-28T00:00:00.000Z","updated":"2025-05-07T15:09:31.479Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before 15.3.4, all…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00856,"kevAdded":null},{"id":"CVE-2022-2826","published":"2022-10-28T00:00:00.000Z","updated":"2025-05-07T15:26:45.559Z","title":"An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions…","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01076,"kevAdded":null},{"id":"CVE-2022-3725","published":"2022-10-27T00:00:00.000Z","updated":"2025-05-09T19:14:30.824Z","title":"Crash in the OPUS protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01072,"kevAdded":null},{"id":"CVE-2022-3639","published":"2022-10-21T00:00:00.000Z","updated":"2025-05-07T14:53:08.897Z","title":"A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2 before 15.2.4, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01105,"kevAdded":null},{"id":"CVE-2022-3627","published":"2022-10-21T00:00:00.000Z","updated":"2025-05-07T14:57:16.043Z","title":"LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.01367,"kevAdded":null},{"id":"CVE-2022-3626","published":"2022-10-21T00:00:00.000Z","updated":"2025-05-07T15:07:46.052Z","title":"LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.01251,"kevAdded":null},{"id":"CVE-2022-3599","published":"2022-10-21T00:00:00.000Z","updated":"2025-05-07T20:34:32.205Z","title":"LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.01266,"kevAdded":null},{"id":"CVE-2022-3598","published":"2022-10-21T00:00:00.000Z","updated":"2025-05-07T20:33:53.528Z","title":"LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.01262,"kevAdded":null},{"id":"CVE-2022-3597","published":"2022-10-21T00:00:00.000Z","updated":"2025-05-07T20:49:05.971Z","title":"LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.01266,"kevAdded":null},{"id":"CVE-2022-3570","published":"2022-10-21T00:00:00.000Z","updated":"2025-05-07T19:57:07.975Z","title":"Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via…","severity":"HIGH","score":7.7,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00526,"kevAdded":null},{"id":"CVE-2022-3540","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T13:56:30.468Z","title":"An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of auto-completion input allows an authenticated attacker to…","severity":"MEDIUM","score":6.5,"vendor":"The hunter2 Contributors","product":"hunter2","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2022-3351","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-14T20:23:01.453Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 13.7 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00851,"kevAdded":null},{"id":"CVE-2022-3331","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-14T20:19:13.396Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0082,"kevAdded":null},{"id":"CVE-2022-3330","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-14T20:17:58.974Z","title":"It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3 prior to…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00662,"kevAdded":null},{"id":"CVE-2022-3325","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T15:37:11.798Z","title":"Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 before 15.3.4, all…","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00513,"kevAdded":null},{"id":"CVE-2022-3293","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T15:39:25.307Z","title":"Email addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00689,"kevAdded":null},{"id":"CVE-2022-3291","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T15:42:30.176Z","title":"Serialization of sensitive data in GitLab EE affecting all versions from 14.9 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 can leak…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00899,"kevAdded":null},{"id":"CVE-2022-3288","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T15:43:38.380Z","title":"A branch/tag name confusion in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an attacker to…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00827,"kevAdded":null},{"id":"CVE-2022-3286","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T15:45:08.979Z","title":"Lack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows a group member…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00531,"kevAdded":null},{"id":"CVE-2022-3283","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T15:46:08.723Z","title":"A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01747,"kevAdded":null},{"id":"CVE-2022-3279","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T15:50:02.812Z","title":"An unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 allows an…","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01208,"kevAdded":null},{"id":"CVE-2022-3067","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T16:05:44.923Z","title":"An issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions starting from 14.4 before 15.2.5, all versions starting from…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01067,"kevAdded":null},{"id":"CVE-2022-3066","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T16:18:33.204Z","title":"An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00708,"kevAdded":null},{"id":"CVE-2022-3060","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T16:19:52.449Z","title":"Improper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all versions from 12.7 allows an authenticated attacker to generate…","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01344,"kevAdded":null},{"id":"CVE-2022-3031","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T16:20:42.728Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from…","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00734,"kevAdded":null},{"id":"CVE-2022-3030","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T16:21:50.323Z","title":"An improper access control issue in GitLab CE/EE affecting all versions starting before 15.1.6, all versions from 15.2 before 15.2.4, all versions from 15.3…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00867,"kevAdded":null},{"id":"CVE-2022-2992","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-14T14:27:30.020Z","title":"A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve…","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.86194,"kevAdded":null},{"id":"CVE-2022-2931","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T16:25:28.130Z","title":"A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01568,"kevAdded":null},{"id":"CVE-2022-2908","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T19:10:54.397Z","title":"A potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 before 15.2.3, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01191,"kevAdded":null},{"id":"CVE-2022-2884","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-14T14:24:19.300Z","title":"A vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2.3, 15.3 to 15.3 to 15.3.1 allows an an authenticated user to…","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.7618,"kevAdded":null},{"id":"CVE-2022-2865","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-14T13:57:18.072Z","title":"A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, 15.2 to 15.2.4 and 15.3 prior to 15.3.2. It was possible…","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.009,"kevAdded":null},{"id":"CVE-2022-2630","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T19:13:05.848Z","title":"An improper access control issue in GitLab CE/EE affecting all versions starting from 15.2 before 15.2.4, all versions from 15.3 before 15.3.2 allows…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00905,"kevAdded":null},{"id":"CVE-2022-2592","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T19:16:27.656Z","title":"A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior to 15.1.6, 15.2 prior to 15.2.4 and 15.3 prior to 15.3.2…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01542,"kevAdded":null},{"id":"CVE-2022-2533","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T19:32:13.138Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00939,"kevAdded":null},{"id":"CVE-2022-2527","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T19:34:35.460Z","title":"An issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions starting from 14.9 before 15.1.6, all versions starting from 15.2…","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01152,"kevAdded":null},{"id":"CVE-2022-2455","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T19:41:20.560Z","title":"A business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 before 15.1.6, all versions starting from 15.2 before…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01471,"kevAdded":null},{"id":"CVE-2022-2428","published":"2022-10-17T00:00:00.000Z","updated":"2025-05-13T19:48:23.382Z","title":"A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to…","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01026,"kevAdded":null},{"id":"CVE-2022-3190","published":"2022-09-13T00:00:00.000Z","updated":"2025-11-03T21:46:20.009Z","title":"Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via packet injection or…","severity":"MEDIUM","score":6.3,"vendor":"SharkFest Foundation","product":"Wireshark","kev":false,"epss":0.0227,"kevAdded":null},{"id":"CVE-2022-2953","published":"2022-08-29T00:00:00.000Z","updated":"2024-08-03T00:53:00.658Z","title":"LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.00575,"kevAdded":null},{"id":"CVE-2022-2095","published":"2022-08-05T15:12:59.000Z","updated":"2024-08-03T00:24:44.172Z","title":"An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1 before 15.1.4, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01068,"kevAdded":null},{"id":"CVE-2022-2459","published":"2022-08-05T15:12:45.000Z","updated":"2024-08-03T00:39:07.815Z","title":"An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from 15.2…","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00849,"kevAdded":null},{"id":"CVE-2022-2500","published":"2022-08-05T15:12:34.000Z","updated":"2024-08-03T00:39:07.807Z","title":"A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored…","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00756,"kevAdded":null},{"id":"CVE-2022-2501","published":"2022-08-05T15:12:09.000Z","updated":"2024-08-03T00:39:07.844Z","title":"An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an…","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01041,"kevAdded":null},{"id":"CVE-2022-2534","published":"2022-08-05T15:11:53.000Z","updated":"2024-08-03T00:39:08.000Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1 before 15.1.4, all…","severity":"LOW","score":2.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00667,"kevAdded":null},{"id":"CVE-2022-2303","published":"2022-08-05T15:11:39.000Z","updated":"2024-08-03T00:32:09.595Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00792,"kevAdded":null},{"id":"CVE-2022-2326","published":"2022-08-05T15:11:26.000Z","updated":"2024-08-03T00:32:09.623Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from…","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00864,"kevAdded":null},{"id":"CVE-2022-2307","published":"2022-08-05T15:11:12.000Z","updated":"2024-08-03T00:32:09.596Z","title":"A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00558,"kevAdded":null},{"id":"CVE-2022-2498","published":"2022-08-05T15:10:57.000Z","updated":"2024-08-03T00:39:07.874Z","title":"An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 triggered new…","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0087,"kevAdded":null},{"id":"CVE-2022-2456","published":"2022-08-05T15:10:42.000Z","updated":"2024-08-03T00:39:07.782Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions starting from…","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00971,"kevAdded":null},{"id":"CVE-2022-2417","published":"2022-08-05T15:10:27.000Z","updated":"2024-08-03T00:39:06.949Z","title":"Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 allows an…","severity":"MEDIUM","score":6.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2022-2539","published":"2022-08-05T15:09:58.000Z","updated":"2024-08-03T00:39:08.068Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1, allowed…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0086,"kevAdded":null},{"id":"CVE-2022-2512","published":"2022-08-05T15:09:47.000Z","updated":"2024-08-03T00:39:07.942Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1 before 15.1.4, all…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00906,"kevAdded":null},{"id":"CVE-2022-2499","published":"2022-08-05T15:09:33.000Z","updated":"2024-08-03T00:39:07.654Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00899,"kevAdded":null},{"id":"CVE-2022-2497","published":"2022-08-05T15:09:19.000Z","updated":"2024-08-03T00:39:07.794Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1 before 15.1.4, all…","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01232,"kevAdded":null},{"id":"CVE-2022-2531","published":"2022-08-05T15:09:05.000Z","updated":"2024-08-03T00:39:08.030Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before 15.1.4, all versions…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01382,"kevAdded":null},{"id":"CVE-2022-1948","published":"2022-07-28T14:46:01.000Z","updated":"2024-08-03T00:24:42.604Z","title":"An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions allowed an…","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01077,"kevAdded":null},{"id":"CVE-2022-2469","published":"2022-07-19T15:53:56.000Z","updated":"2024-08-03T00:39:07.671Z","title":"GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client","severity":"LOW","score":3.8,"vendor":"GNU","product":"GNU SASL","kev":false,"epss":0.01572,"kevAdded":null},{"id":"CVE-2022-0167","published":"2022-07-01T17:02:23.000Z","updated":"2024-08-02T23:18:41.986Z","title":"An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00756,"kevAdded":null},{"id":"CVE-2022-1954","published":"2022-07-01T17:01:14.000Z","updated":"2024-08-03T00:24:43.630Z","title":"A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01051,"kevAdded":null},{"id":"CVE-2022-1963","published":"2022-07-01T17:00:05.000Z","updated":"2024-08-03T00:24:43.676Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01402,"kevAdded":null},{"id":"CVE-2022-2270","published":"2022-07-01T16:31:47.000Z","updated":"2024-08-03T00:32:09.374Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all versions…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00873,"kevAdded":null},{"id":"CVE-2022-2229","published":"2022-07-01T16:30:45.000Z","updated":"2024-08-03T00:32:09.479Z","title":"An improper authorization issue in GitLab CE/EE affecting all versions from 13.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01336,"kevAdded":null},{"id":"CVE-2022-2228","published":"2022-07-01T16:08:11.000Z","updated":"2024-08-03T00:32:09.424Z","title":"Information exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker with the…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0078,"kevAdded":null},{"id":"CVE-2022-1999","published":"2022-07-01T16:06:59.000Z","updated":"2024-08-03T00:24:43.699Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1. Under certain…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00668,"kevAdded":null},{"id":"CVE-2022-1981","published":"2022-07-01T16:05:41.000Z","updated":"2024-08-03T00:24:44.102Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 12.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1. In…","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00801,"kevAdded":null},{"id":"CVE-2022-1983","published":"2022-07-01T15:56:23.000Z","updated":"2024-08-03T00:24:43.972Z","title":"Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allowed an attacker…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00673,"kevAdded":null},{"id":"CVE-2022-2230","published":"2022-07-01T15:55:13.000Z","updated":"2024-08-03T00:32:09.532Z","title":"A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from 14.4 prior to 14.10.5, 15.0 prior to…","severity":"HIGH","score":8.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.58219,"kevAdded":null},{"id":"CVE-2022-2227","published":"2022-07-01T15:53:58.000Z","updated":"2024-08-03T00:32:09.371Z","title":"Improper access control in the runner jobs API in GitLab CE/EE affecting all versions prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows a…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00795,"kevAdded":null},{"id":"CVE-2022-2243","published":"2022-07-01T15:52:32.000Z","updated":"2024-08-03T00:32:09.539Z","title":"An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows…","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00794,"kevAdded":null},{"id":"CVE-2022-2235","published":"2022-07-01T15:51:14.000Z","updated":"2024-08-03T00:32:09.564Z","title":"Insufficient sanitization in GitLab EE's external issue tracker affecting all versions from 14.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to…","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00918,"kevAdded":null},{"id":"CVE-2022-2185","published":"2022-07-01T15:50:03.000Z","updated":"2024-08-03T00:32:08.558Z","title":"A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 where…","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.7665,"kevAdded":null},{"id":"CVE-2022-2281","published":"2022-07-01T15:48:46.000Z","updated":"2024-08-03T00:32:09.342Z","title":"An information disclosure vulnerability in GitLab EE affecting all versions from 12.5 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows…","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00933,"kevAdded":null},{"id":"CVE-2022-2244","published":"2022-07-01T15:04:24.000Z","updated":"2024-08-03T00:32:09.492Z","title":"An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1,…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00867,"kevAdded":null},{"id":"CVE-2022-2250","published":"2022-07-01T15:03:14.000Z","updated":"2024-08-03T00:32:09.428Z","title":"An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an…","severity":"MEDIUM","score":4.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01651,"kevAdded":null},{"id":"CVE-2022-2058","published":"2022-06-30T00:00:00.000Z","updated":"2024-08-03T00:24:44.171Z","title":"Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.01322,"kevAdded":null},{"id":"CVE-2022-2057","published":"2022-06-30T00:00:00.000Z","updated":"2024-08-03T00:24:44.313Z","title":"Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.0127,"kevAdded":null},{"id":"CVE-2022-2056","published":"2022-06-30T00:00:00.000Z","updated":"2024-08-03T00:24:44.219Z","title":"Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.0127,"kevAdded":null},{"id":"CVE-2022-1680","published":"2022-06-06T17:05:16.000Z","updated":"2024-08-03T00:10:03.843Z","title":"An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 before 14.9.5, all versions starting from 14.10 before…","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.15899,"kevAdded":null},{"id":"CVE-2022-1783","published":"2022-06-06T17:00:32.000Z","updated":"2024-08-03T00:16:59.907Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 14.9.5, all versions starting from 14.10 before 14.10.4, all…","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01037,"kevAdded":null},{"id":"CVE-2022-1944","published":"2022-06-06T16:58:35.000Z","updated":"2024-08-03T00:24:42.991Z","title":"When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prior to 14.9.5, 14.10…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00572,"kevAdded":null},{"id":"CVE-2022-1821","published":"2022-06-06T16:56:35.000Z","updated":"2024-08-03T00:17:00.595Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 14.9.5, all versions starting from 14.10 before 14.10.4, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00945,"kevAdded":null},{"id":"CVE-2022-1936","published":"2022-06-06T16:54:22.000Z","updated":"2024-08-03T00:24:42.557Z","title":"Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00712,"kevAdded":null},{"id":"CVE-2022-1940","published":"2022-06-06T16:52:22.000Z","updated":"2024-08-03T00:24:42.587Z","title":"A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to 14.9.5, 14.10 prior to 14.10.4, and…","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.06288,"kevAdded":null},{"id":"CVE-2022-1935","published":"2022-06-06T16:50:27.000Z","updated":"2024-08-03T00:24:42.627Z","title":"Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00712,"kevAdded":null},{"id":"CVE-2021-39947","published":"2022-06-06T16:48:14.000Z","updated":"2024-08-04T02:20:34.198Z","title":"In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descriptor 0 for…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab Runner","kev":false,"epss":0.0087,"kevAdded":null},{"id":"CVE-2022-1423","published":"2022-05-19T17:12:32.000Z","updated":"2024-08-03T00:03:06.294Z","title":"Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before…","severity":"HIGH","score":7.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01504,"kevAdded":null},{"id":"CVE-2022-1413","published":"2022-05-19T17:11:12.000Z","updated":"2024-08-03T00:03:06.276Z","title":"Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00949,"kevAdded":null},{"id":"CVE-2022-1416","published":"2022-05-19T17:10:07.000Z","updated":"2024-08-03T00:03:06.264Z","title":"Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00756,"kevAdded":null},{"id":"CVE-2022-1124","published":"2022-05-11T14:50:29.000Z","updated":"2024-08-02T23:55:24.360Z","title":"An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00871,"kevAdded":null},{"id":"CVE-2022-1510","published":"2022-05-11T14:48:22.000Z","updated":"2024-08-03T00:03:06.350Z","title":"An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01961,"kevAdded":null},{"id":"CVE-2022-1460","published":"2022-05-11T14:45:11.000Z","updated":"2024-08-03T00:03:06.291Z","title":"An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions…","severity":"MEDIUM","score":6.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01195,"kevAdded":null},{"id":"CVE-2022-1406","published":"2022-05-11T14:42:27.000Z","updated":"2024-08-03T00:03:06.362Z","title":"Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0 allows a…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01159,"kevAdded":null},{"id":"CVE-2022-1428","published":"2022-05-11T14:40:27.000Z","updated":"2024-08-03T00:03:06.260Z","title":"An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00655,"kevAdded":null},{"id":"CVE-2022-1426","published":"2022-05-11T14:35:42.000Z","updated":"2024-08-03T00:03:06.238Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions…","severity":"LOW","score":2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00905,"kevAdded":null},{"id":"CVE-2022-1352","published":"2022-05-11T14:30:02.000Z","updated":"2024-08-03T00:03:05.823Z","title":"Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8.6, 14.9 prior to 14.9.4, and 14.10…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01326,"kevAdded":null},{"id":"CVE-2022-1433","published":"2022-05-11T14:27:44.000Z","updated":"2024-08-03T00:03:06.378Z","title":"An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions…","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00864,"kevAdded":null},{"id":"CVE-2022-1545","published":"2022-05-11T14:25:17.000Z","updated":"2024-08-03T00:10:02.897Z","title":"It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions from 13.2 prior to 14.8.6, 14.9 prior to…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00867,"kevAdded":null},{"id":"CVE-2022-1623","published":"2022-05-11T00:00:00.000Z","updated":"2024-08-03T00:10:03.766Z","title":"LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file.…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.01251,"kevAdded":null},{"id":"CVE-2022-1622","published":"2022-05-11T00:00:00.000Z","updated":"2024-08-03T00:10:03.771Z","title":"LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file.…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.01733,"kevAdded":null},{"id":"CVE-2022-1417","published":"2022-05-10T20:30:36.000Z","updated":"2024-08-03T00:03:06.201Z","title":"Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01012,"kevAdded":null},{"id":"CVE-2022-1431","published":"2022-05-10T20:27:54.000Z","updated":"2024-08-03T00:03:06.272Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01477,"kevAdded":null},{"id":"CVE-2022-0477","published":"2022-04-25T16:35:06.000Z","updated":"2024-08-02T23:32:45.789Z","title":"An issue has been discovered in GitLab affecting all versions starting from 11.9 before 14.5.4, all versions starting from 14.6.0 before 14.6.4, all versions…","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00946,"kevAdded":null},{"id":"CVE-2022-1328","published":"2022-04-14T00:00:00.000Z","updated":"2024-08-03T00:03:05.707Z","title":"Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line","severity":"MEDIUM","score":4.3,"vendor":"Mutt","product":"Mutt","kev":false,"epss":0.01711,"kevAdded":null},{"id":"CVE-2022-1157","published":"2022-04-11T19:38:26.000Z","updated":"2024-08-02T23:55:24.358Z","title":"Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 of GitLab CE/EE causes…","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00645,"kevAdded":null},{"id":"CVE-2022-1193","published":"2022-04-11T19:38:25.000Z","updated":"2024-08-02T23:55:24.436Z","title":"Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows a malicious actor to obtain…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01082,"kevAdded":null},{"id":"CVE-2022-1190","published":"2022-04-04T19:46:15.000Z","updated":"2024-08-02T23:55:24.448Z","title":"Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to exploit a…","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.87946,"kevAdded":null},{"id":"CVE-2022-1175","published":"2022-04-04T19:46:15.000Z","updated":"2024-08-02T23:55:24.361Z","title":"Improper neutralization of user input in GitLab CE/EE versions 14.4 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from…","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.82003,"kevAdded":null},{"id":"CVE-2022-1162","published":"2022-04-04T19:46:14.000Z","updated":"2024-08-02T23:55:24.375Z","title":"A hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP, SAML) in GitLab CE/EE versions 14.7 prior to 14.7.7, 14.8…","severity":"CRITICAL","score":9.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.75637,"kevAdded":null},{"id":"CVE-2022-1148","published":"2022-04-04T19:46:13.000Z","updated":"2024-08-02T23:55:24.266Z","title":"Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11.5 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0117,"kevAdded":null},{"id":"CVE-2022-1121","published":"2022-04-04T19:46:11.000Z","updated":"2024-08-02T23:55:23.783Z","title":"A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab Pages","kev":false,"epss":0.01083,"kevAdded":null},{"id":"CVE-2022-1111","published":"2022-04-04T19:46:10.000Z","updated":"2024-08-02T23:55:24.171Z","title":"A business logic error in Project Import in GitLab CE/EE versions 14.9 prior to 14.9.2, 14.8 prior to 14.8.5, and 14.0 prior to 14.7.7 under certain conditions…","severity":"LOW","score":2.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00633,"kevAdded":null},{"id":"CVE-2022-1185","published":"2022-04-04T19:46:09.000Z","updated":"2024-08-02T23:55:24.257Z","title":"A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7, 14.8.0 to 14.8.5, and 14.9.0 to 14.9.2 allows an attacker to…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01328,"kevAdded":null},{"id":"CVE-2022-1120","published":"2022-04-04T19:46:08.000Z","updated":"2024-08-02T23:55:23.714Z","title":"Missing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 exposed sensitive…","severity":"MEDIUM","score":4.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01151,"kevAdded":null},{"id":"CVE-2022-1174","published":"2022-04-04T19:46:06.000Z","updated":"2024-08-02T23:55:24.266Z","title":"A potential DoS vulnerability was discovered in Gitlab CE/EE versions 13.7 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.015,"kevAdded":null},{"id":"CVE-2022-1188","published":"2022-04-04T19:46:05.000Z","updated":"2024-08-02T23:55:24.446Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions starting from 14.8 before 14.8.5, all…","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01384,"kevAdded":null},{"id":"CVE-2022-1105","published":"2022-04-04T19:46:04.000Z","updated":"2024-08-02T23:55:22.835Z","title":"An improper access control vulnerability in GitLab CE/EE affecting all versions from 13.11 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00758,"kevAdded":null},{"id":"CVE-2022-1099","published":"2022-04-04T19:46:03.000Z","updated":"2024-08-02T23:55:24.230Z","title":"Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00896,"kevAdded":null},{"id":"CVE-2022-1100","published":"2022-04-04T19:46:02.000Z","updated":"2024-08-02T23:55:23.609Z","title":"A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and 14.9.0 prior to…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01033,"kevAdded":null},{"id":"CVE-2022-1189","published":"2022-04-04T19:46:00.000Z","updated":"2024-08-02T23:55:24.233Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.2 before 14.7.7, all versions starting from 14.8 before 14.8.5, all…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00808,"kevAdded":null},{"id":"CVE-2022-0740","published":"2022-04-04T19:45:59.000Z","updated":"2024-08-02T23:40:03.563Z","title":"Incorrect authorization in the Asana integration's branch restriction feature in all versions of GitLab CE/EE starting from version 7.8.0 before 14.7.7, all…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00984,"kevAdded":null},{"id":"CVE-2022-0741","published":"2022-04-01T22:17:40.000Z","updated":"2024-08-02T23:40:03.552Z","title":"Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables via specially…","severity":"MEDIUM","score":5.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01477,"kevAdded":null},{"id":"CVE-2022-0425","published":"2022-04-01T22:17:39.000Z","updated":"2024-08-02T23:25:40.638Z","title":"A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00609,"kevAdded":null},{"id":"CVE-2021-39908","published":"2022-04-01T22:17:38.000Z","updated":"2024-08-04T02:20:33.693Z","title":"In all versions of GitLab CE/EE starting from 0.8.0 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0127,"kevAdded":null},{"id":"CVE-2022-0373","published":"2022-04-01T22:17:37.000Z","updated":"2024-08-02T23:25:40.164Z","title":"Improper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7.1 allows project non-members to retrieve the service desk…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00948,"kevAdded":null},{"id":"CVE-2022-0390","published":"2022-04-01T22:17:36.000Z","updated":"2024-08-02T23:25:40.347Z","title":"Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1 allowed for project non-members to retrieve issue details…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00913,"kevAdded":null},{"id":"CVE-2022-0489","published":"2022-04-01T22:17:35.000Z","updated":"2024-08-02T23:32:45.611Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01481,"kevAdded":null},{"id":"CVE-2021-4191","published":"2022-03-28T18:53:12.000Z","updated":"2024-08-03T17:16:04.293Z","title":"An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.80004,"kevAdded":null},{"id":"CVE-2022-0283","published":"2022-03-28T18:53:11.000Z","updated":"2024-08-02T23:25:40.269Z","title":"An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab integration with Jira that a could…","severity":"MEDIUM","score":4.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00769,"kevAdded":null},{"id":"CVE-2022-0136","published":"2022-03-28T18:53:10.000Z","updated":"2024-08-02T23:18:41.630Z","title":"A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulnerable to a blind SSRF attack through the…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00965,"kevAdded":null},{"id":"CVE-2021-39876","published":"2022-03-28T18:53:09.000Z","updated":"2024-08-04T02:20:33.669Z","title":"In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00935,"kevAdded":null},{"id":"CVE-2022-0488","published":"2022-03-28T18:53:08.000Z","updated":"2024-08-02T23:32:45.231Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0071,"kevAdded":null},{"id":"CVE-2022-0344","published":"2022-03-28T18:53:07.000Z","updated":"2024-08-02T23:25:40.256Z","title":"An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01091,"kevAdded":null},{"id":"CVE-2022-0249","published":"2022-03-28T18:53:07.000Z","updated":"2024-08-02T23:18:42.887Z","title":"A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since requests to shared address space were not…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01275,"kevAdded":null},{"id":"CVE-2022-0123","published":"2022-03-28T18:53:06.000Z","updated":"2024-08-02T23:18:41.713Z","title":"An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL…","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00438,"kevAdded":null},{"id":"CVE-2022-0427","published":"2022-03-28T18:53:05.000Z","updated":"2024-08-02T23:25:40.340Z","title":"Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP…","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00828,"kevAdded":null},{"id":"CVE-2022-0738","published":"2022-03-28T18:53:04.000Z","updated":"2024-08-02T23:40:03.539Z","title":"An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions…","severity":"MEDIUM","score":4.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00864,"kevAdded":null},{"id":"CVE-2022-0751","published":"2022-03-28T18:53:03.000Z","updated":"2024-08-02T23:40:03.589Z","title":"Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01441,"kevAdded":null},{"id":"CVE-2022-0371","published":"2022-03-28T18:53:01.000Z","updated":"2024-08-02T23:25:40.560Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions starting from 14.6 before 14.6.4, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00822,"kevAdded":null},{"id":"CVE-2022-0549","published":"2022-03-28T18:53:00.000Z","updated":"2024-08-02T23:32:46.433Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0092,"kevAdded":null},{"id":"CVE-2022-0735","published":"2022-03-28T18:52:59.000Z","updated":"2024-08-02T23:40:03.557Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all…","severity":"CRITICAL","score":10,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.13227,"kevAdded":null},{"id":"CVE-2022-1056","published":"2022-03-28T00:00:00.000Z","updated":"2024-08-02T23:47:43.287Z","title":"Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.01088,"kevAdded":null},{"id":"CVE-2022-0924","published":"2022-03-11T00:00:00.000Z","updated":"2024-08-02T23:47:42.854Z","title":"Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.0133,"kevAdded":null},{"id":"CVE-2022-0909","published":"2022-03-11T00:00:00.000Z","updated":"2024-08-02T23:47:42.113Z","title":"Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.0133,"kevAdded":null},{"id":"CVE-2022-0908","published":"2022-03-11T00:00:00.000Z","updated":"2024-08-02T23:47:42.818Z","title":"Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to…","severity":"HIGH","score":7.7,"vendor":"TIFF Software Distribution","product":"libtiff","kev":false,"epss":0.0125,"kevAdded":null},{"id":"CVE-2022-0907","published":"2022-03-11T00:00:00.000Z","updated":"2024-08-02T23:47:42.626Z","title":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.0127,"kevAdded":null},{"id":"CVE-2022-0891","published":"2022-03-09T00:00:00.000Z","updated":"2024-08-02T23:47:42.151Z","title":"A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory…","severity":"MEDIUM","score":6.1,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.01542,"kevAdded":null},{"id":"CVE-2022-0865","published":"2022-03-07T00:00:00.000Z","updated":"2024-08-02T23:40:04.554Z","title":"Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.01478,"kevAdded":null},{"id":"CVE-2022-0585","published":"2022-02-18T00:00:00.000Z","updated":"2025-11-03T21:45:42.677Z","title":"Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":4.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.02391,"kevAdded":null},{"id":"CVE-2022-0586","published":"2022-02-14T00:00:00.000Z","updated":"2025-11-03T21:45:44.184Z","title":"Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.02003,"kevAdded":null},{"id":"CVE-2022-0583","published":"2022-02-14T00:00:00.000Z","updated":"2025-11-03T21:45:41.191Z","title":"Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01789,"kevAdded":null},{"id":"CVE-2022-0582","published":"2022-02-14T00:00:00.000Z","updated":"2025-11-03T21:45:39.721Z","title":"Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted…","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01992,"kevAdded":null},{"id":"CVE-2022-0581","published":"2022-02-14T00:00:00.000Z","updated":"2025-11-03T21:45:37.934Z","title":"Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01789,"kevAdded":null},{"id":"CVE-2022-0562","published":"2022-02-11T00:00:00.000Z","updated":"2024-08-02T23:32:46.296Z","title":"Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.0125,"kevAdded":null},{"id":"CVE-2022-0561","published":"2022-02-11T00:00:00.000Z","updated":"2024-08-02T23:32:46.253Z","title":"Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead…","severity":"MEDIUM","score":5.5,"vendor":"libtiff","product":"libtiff","kev":false,"epss":0.0125,"kevAdded":null},{"id":"CVE-2021-39943","published":"2022-02-09T22:05:14.000Z","updated":"2024-08-04T02:20:34.212Z","title":"An authorization logic error in the External Status Check API in GitLab EE affecting all versions starting from 14.1 before 14.3.6, all versions starting from…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00869,"kevAdded":null},{"id":"CVE-2021-39892","published":"2022-01-18T16:52:13.000Z","updated":"2024-08-04T02:20:33.593Z","title":"In all versions of GitLab CE/EE since version 12.0, a lower privileged user can import users from projects that they don't have a maintainer role on and…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01228,"kevAdded":null},{"id":"CVE-2021-39942","published":"2022-01-18T16:52:12.000Z","updated":"2024-08-04T02:20:34.141Z","title":"A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01409,"kevAdded":null},{"id":"CVE-2021-39946","published":"2022-01-18T16:52:11.000Z","updated":"2024-08-04T02:20:34.213Z","title":"Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing…","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01042,"kevAdded":null},{"id":"CVE-2022-0090","published":"2022-01-18T16:52:09.000Z","updated":"2024-08-02T23:18:41.713Z","title":"An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab is configured in a way…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01306,"kevAdded":null},{"id":"CVE-2022-0093","published":"2022-01-18T16:52:07.000Z","updated":"2024-08-02T23:18:41.539Z","title":"An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00911,"kevAdded":null},{"id":"CVE-2022-0125","published":"2022-01-18T16:52:06.000Z","updated":"2024-08-02T23:18:41.803Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.0 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00923,"kevAdded":null},{"id":"CVE-2022-0154","published":"2022-01-18T16:52:04.000Z","updated":"2024-08-02T23:18:41.740Z","title":"An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00552,"kevAdded":null},{"id":"CVE-2022-0124","published":"2022-01-18T16:52:03.000Z","updated":"2024-08-02T23:18:41.675Z","title":"An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. Gitlab's Slack integration is…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00974,"kevAdded":null},{"id":"CVE-2022-0244","published":"2022-01-18T16:52:00.000Z","updated":"2024-08-02T23:18:42.896Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible by importing a group was due to…","severity":"HIGH","score":8.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01659,"kevAdded":null},{"id":"CVE-2022-0151","published":"2022-01-18T16:51:58.000Z","updated":"2024-08-02T23:18:41.720Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01121,"kevAdded":null},{"id":"CVE-2022-0152","published":"2022-01-18T16:51:56.000Z","updated":"2024-08-02T23:18:42.056Z","title":"An issue has been discovered in GitLab affecting all versions starting from 13.10 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0111,"kevAdded":null},{"id":"CVE-2021-39927","published":"2022-01-18T16:51:55.000Z","updated":"2024-08-04T02:20:34.234Z","title":"Server side request forgery protections in GitLab CE/EE versions between 8.4 and 14.4.4, between 14.5.0 and 14.5.2, and between 14.6.0 and 14.6.1 would fail to…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00573,"kevAdded":null},{"id":"CVE-2022-0172","published":"2022-01-18T16:51:53.000Z","updated":"2024-08-02T23:18:41.998Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00765,"kevAdded":null},{"id":"CVE-2021-4190","published":"2021-12-30T00:00:00.000Z","updated":"2025-11-03T21:45:24.052Z","title":"Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.03332,"kevAdded":null},{"id":"CVE-2021-4186","published":"2021-12-30T00:00:00.000Z","updated":"2025-11-03T21:45:19.809Z","title":"Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file","severity":"MEDIUM","score":6.3,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.02306,"kevAdded":null},{"id":"CVE-2021-4185","published":"2021-12-30T00:00:00.000Z","updated":"2025-11-03T21:45:18.240Z","title":"Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.04056,"kevAdded":null},{"id":"CVE-2021-4184","published":"2021-12-30T00:00:00.000Z","updated":"2025-11-03T21:45:16.761Z","title":"Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.04056,"kevAdded":null},{"id":"CVE-2021-4183","published":"2021-12-30T00:00:00.000Z","updated":"2024-08-03T17:16:04.246Z","title":"Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file","severity":"MEDIUM","score":5.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01528,"kevAdded":null},{"id":"CVE-2021-4182","published":"2021-12-30T00:00:00.000Z","updated":"2025-11-03T21:45:15.278Z","title":"Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.03447,"kevAdded":null},{"id":"CVE-2021-4181","published":"2021-12-30T00:00:00.000Z","updated":"2025-11-03T21:45:13.801Z","title":"Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.04056,"kevAdded":null},{"id":"CVE-2021-39939","published":"2021-12-13T15:48:02.000Z","updated":"2024-08-04T02:20:34.025Z","title":"An uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions starting from 13.7 before 14.3.6, all versions starting from 14.4…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab Runner","kev":false,"epss":0.00937,"kevAdded":null},{"id":"CVE-2021-39930","published":"2021-12-13T15:48:02.000Z","updated":"2024-08-04T02:20:34.134Z","title":"Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attacker to access a…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00833,"kevAdded":null},{"id":"CVE-2021-39941","published":"2021-12-13T15:48:00.000Z","updated":"2024-08-04T02:20:34.131Z","title":"An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed non-project members to see the…","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01221,"kevAdded":null},{"id":"CVE-2021-39935","published":"2021-12-13T15:47:59.000Z","updated":"2026-02-03T17:20:23.263Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":true,"epss":0.3614,"kevAdded":"2026-02-03"},{"id":"CVE-2021-39932","published":"2021-12-13T15:47:58.000Z","updated":"2024-08-04T02:20:34.203Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00889,"kevAdded":null},{"id":"CVE-2021-39917","published":"2021-12-13T15:47:58.000Z","updated":"2024-08-04T02:20:34.188Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01372,"kevAdded":null},{"id":"CVE-2021-39934","published":"2021-12-13T15:47:57.000Z","updated":"2024-08-04T02:20:34.187Z","title":"Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions starting 12.10 before 14.3.6, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00974,"kevAdded":null},{"id":"CVE-2021-39916","published":"2021-12-13T15:47:56.000Z","updated":"2024-08-04T02:20:33.776Z","title":"Lack of an access control check in the External Status Check feature allowed any authenticated user to retrieve the configuration of any External Status Check…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00833,"kevAdded":null},{"id":"CVE-2021-39919","published":"2021-12-13T15:47:55.000Z","updated":"2024-08-04T02:20:34.231Z","title":"In all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before…","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2021-39915","published":"2021-12-13T15:47:54.000Z","updated":"2024-08-04T02:20:33.854Z","title":"Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6, all versions starting from 14.4 before…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01171,"kevAdded":null},{"id":"CVE-2021-39933","published":"2021-12-13T15:47:53.000Z","updated":"2024-08-04T02:20:34.065Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01467,"kevAdded":null},{"id":"CVE-2021-39938","published":"2021-12-13T15:47:52.000Z","updated":"2024-08-04T02:20:34.129Z","title":"A vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00922,"kevAdded":null},{"id":"CVE-2021-39937","published":"2021-12-13T15:47:51.000Z","updated":"2024-08-04T02:20:34.096Z","title":"A collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting…","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00809,"kevAdded":null},{"id":"CVE-2021-39936","published":"2021-12-13T15:47:50.000Z","updated":"2024-08-04T02:20:34.197Z","title":"Improper access control in GitLab CE/EE affecting all versions starting from 10.7 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01059,"kevAdded":null},{"id":"CVE-2021-39931","published":"2021-12-13T15:47:50.000Z","updated":"2024-08-04T02:20:34.167Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00887,"kevAdded":null},{"id":"CVE-2021-39945","published":"2021-12-13T15:47:49.000Z","updated":"2024-08-04T02:20:34.109Z","title":"Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00938,"kevAdded":null},{"id":"CVE-2021-39944","published":"2021-12-13T15:47:48.000Z","updated":"2024-08-04T02:20:34.148Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…","severity":"HIGH","score":7.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00946,"kevAdded":null},{"id":"CVE-2021-39940","published":"2021-12-13T15:47:47.000Z","updated":"2024-08-04T02:20:34.190Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0157,"kevAdded":null},{"id":"CVE-2021-39918","published":"2021-12-13T15:47:46.000Z","updated":"2024-08-04T02:20:34.144Z","title":"Incorrect Authorization in GitLab EE affecting all versions starting from 11.1 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00762,"kevAdded":null},{"id":"CVE-2021-39910","published":"2021-12-13T15:47:46.000Z","updated":"2024-08-04T02:20:33.691Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14.3.6, all versions starting from 14.4 before 14.4.4, all…","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00987,"kevAdded":null},{"id":"CVE-2021-22170","published":"2021-12-06T17:35:58.000Z","updated":"2024-08-03T18:37:18.131Z","title":"Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content","severity":"MEDIUM","score":6.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00554,"kevAdded":null},{"id":"CVE-2021-39890","published":"2021-12-06T17:34:34.000Z","updated":"2024-08-04T02:20:33.754Z","title":"It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 and above.","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01103,"kevAdded":null},{"id":"CVE-2021-39923","published":"2021-11-19T16:31:03.000Z","updated":"2024-08-04T02:20:34.190Z","title":"Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0161,"kevAdded":null},{"id":"CVE-2021-39929","published":"2021-11-19T00:00:00.000Z","updated":"2024-08-04T02:20:34.245Z","title":"Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted…","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0381,"kevAdded":null},{"id":"CVE-2021-39926","published":"2021-11-19T00:00:00.000Z","updated":"2024-08-04T02:20:34.099Z","title":"Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.07957,"kevAdded":null},{"id":"CVE-2021-39925","published":"2021-11-19T00:00:00.000Z","updated":"2024-08-04T02:20:34.143Z","title":"Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture…","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.08139,"kevAdded":null},{"id":"CVE-2021-39924","published":"2021-11-19T00:00:00.000Z","updated":"2024-08-04T02:20:34.134Z","title":"Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.05294,"kevAdded":null},{"id":"CVE-2021-39922","published":"2021-11-19T00:00:00.000Z","updated":"2024-08-04T02:20:34.154Z","title":"Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.05563,"kevAdded":null},{"id":"CVE-2021-39921","published":"2021-11-19T00:00:00.000Z","updated":"2024-08-04T02:20:34.143Z","title":"NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture…","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.03373,"kevAdded":null},{"id":"CVE-2021-39928","published":"2021-11-18T00:00:00.000Z","updated":"2024-08-04T02:20:34.034Z","title":"NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted…","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0591,"kevAdded":null},{"id":"CVE-2021-39920","published":"2021-11-18T00:00:00.000Z","updated":"2024-08-04T02:20:34.127Z","title":"NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.03289,"kevAdded":null},{"id":"CVE-2021-39898","published":"2021-11-04T23:21:32.000Z","updated":"2024-08-04T02:20:33.663Z","title":"In all versions of GitLab CE/EE since version 10.6, a project export leaks the external webhook token value which may allow access to the project which it was…","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01287,"kevAdded":null},{"id":"CVE-2021-39905","published":"2021-11-04T23:17:10.000Z","updated":"2024-08-04T02:20:33.677Z","title":"An information disclosure vulnerability in the GitLab CE/EE API since version 8.9.6 allows a user to see basic information on private groups that a public…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00975,"kevAdded":null},{"id":"CVE-2021-39911","published":"2021-11-04T23:16:02.000Z","updated":"2024-08-04T02:20:33.804Z","title":"An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all…","severity":"LOW","score":1.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00787,"kevAdded":null},{"id":"CVE-2021-39907","published":"2021-11-04T23:14:42.000Z","updated":"2024-08-04T02:20:33.681Z","title":"A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01484,"kevAdded":null},{"id":"CVE-2021-39904","published":"2021-11-04T23:13:11.000Z","updated":"2024-08-04T02:20:33.680Z","title":"An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6, all versions starting from 14.3…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00826,"kevAdded":null},{"id":"CVE-2021-39895","published":"2021-11-04T23:11:51.000Z","updated":"2024-08-04T02:20:33.884Z","title":"In all versions of GitLab CE/EE since version 8.0, an attacker can set the pipeline schedules to be active in a project export so when an unsuspecting owner…","severity":"MEDIUM","score":6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01016,"kevAdded":null},{"id":"CVE-2021-22260","published":"2021-11-04T23:10:38.000Z","updated":"2024-08-03T18:37:18.503Z","title":"A stored Cross-Site Scripting vulnerability in the DataDog integration in all versions of GitLab CE/EE starting from 13.7 before 14.0.9, all versions starting…","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00942,"kevAdded":null},{"id":"CVE-2021-39901","published":"2021-11-04T23:09:28.000Z","updated":"2024-08-04T02:20:33.701Z","title":"In all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token of that group by visiting a specific endpoint.","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00943,"kevAdded":null},{"id":"CVE-2021-39913","published":"2021-11-04T23:08:15.000Z","updated":"2024-08-04T02:20:33.764Z","title":"Accidental logging of system root password in the migration log in all versions of GitLab CE/EE before 14.2.6, all versions starting from 14.3 before 14.3.4,…","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00291,"kevAdded":null},{"id":"CVE-2021-39897","published":"2021-11-04T23:07:04.000Z","updated":"2024-08-04T02:20:33.759Z","title":"Improper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherited access to a project from a parent group to still have…","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01199,"kevAdded":null},{"id":"CVE-2021-39912","published":"2021-11-04T23:05:49.000Z","updated":"2024-08-04T02:20:33.680Z","title":"A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images was possible to trigger memory…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01484,"kevAdded":null},{"id":"CVE-2021-39906","published":"2021-11-04T23:04:36.000Z","updated":"2024-08-04T02:20:33.690Z","title":"Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf.","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.60729,"kevAdded":null},{"id":"CVE-2021-39909","published":"2021-11-04T23:03:27.000Z","updated":"2024-08-04T02:20:33.725Z","title":"Lack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab EE starting from 11.3 before 14.2.6, all versions starting…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00613,"kevAdded":null},{"id":"CVE-2021-39903","published":"2021-11-04T22:42:01.000Z","updated":"2024-08-04T02:20:33.686Z","title":"In all versions of GitLab CE/EE since version 13.0, a privileged user, through an API call, can change the visibility level of a group or a project to a…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0141,"kevAdded":null},{"id":"CVE-2021-39902","published":"2021-11-04T22:40:34.000Z","updated":"2024-08-04T02:20:33.778Z","title":"Incorrect Authorization in GitLab CE/EE 13.4 or above allows a user with guest membership in a project to modify the severity of an incident.","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00788,"kevAdded":null},{"id":"CVE-2021-39914","published":"2021-11-04T22:39:17.000Z","updated":"2024-08-04T02:20:33.786Z","title":"A regular expression denial of service issue in GitLab versions 8.13 to 14.2.5, 14.3.0 to 14.3.3 and 14.4.0 could cause excessive usage of resources when a…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01199,"kevAdded":null},{"id":"CVE-2021-22263","published":"2021-10-11T16:47:47.000Z","updated":"2024-08-03T18:37:18.536Z","title":"An issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01095,"kevAdded":null},{"id":"CVE-2021-39880","published":"2021-10-05T14:01:43.000Z","updated":"2024-08-04T02:20:33.608Z","title":"A Denial Of Service vulnerability in the apollo_upload_server Ruby gem in GitLab CE/EE all versions starting from 11.9 before 14.0.9, all versions starting…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.02066,"kevAdded":null},{"id":"CVE-2021-22261","published":"2021-10-05T13:59:40.000Z","updated":"2024-08-03T18:37:18.487Z","title":"A stored Cross-Site Scripting vulnerability in the Jira integration in all GitLab versions starting from 13.9 before 14.0.9, all versions starting from 14.1…","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00982,"kevAdded":null},{"id":"CVE-2021-22258","published":"2021-10-05T13:49:33.000Z","updated":"2024-08-03T18:37:18.484Z","title":"The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01002,"kevAdded":null},{"id":"CVE-2021-22262","published":"2021-10-05T13:48:15.000Z","updated":"2024-08-03T18:37:18.492Z","title":"Missing access control in all GitLab versions starting from 13.12 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00729,"kevAdded":null},{"id":"CVE-2021-22257","published":"2021-10-05T13:46:53.000Z","updated":"2024-08-03T18:37:18.503Z","title":"An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00938,"kevAdded":null},{"id":"CVE-2021-22264","published":"2021-10-05T13:45:31.000Z","updated":"2024-08-03T18:37:18.500Z","title":"An issue has been discovered in GitLab affecting all versions starting from 13.8 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions…","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01007,"kevAdded":null},{"id":"CVE-2021-39889","published":"2021-10-05T13:43:07.000Z","updated":"2024-08-04T02:20:33.622Z","title":"In all versions of GitLab EE since version 14.1, due to an insecure direct object reference vulnerability, an endpoint may reveal the protected branch name to…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00833,"kevAdded":null},{"id":"CVE-2021-39870","published":"2021-10-05T13:41:53.000Z","updated":"2024-08-04T02:20:33.659Z","title":"In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by an attacker making a…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00957,"kevAdded":null},{"id":"CVE-2021-39881","published":"2021-10-05T13:40:33.000Z","updated":"2024-08-04T02:20:33.652Z","title":"In all versions of GitLab CE/EE since version 7.7, the application may let a malicious user create an OAuth client application with arbitrary scope names which…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00875,"kevAdded":null},{"id":"CVE-2021-39886","published":"2021-10-05T13:39:17.000Z","updated":"2024-08-04T02:20:33.642Z","title":"Permissions rules were not applied while issues were moved between projects of the same group in GitLab versions starting with 10.6 and up to 14.1.7 allowing…","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00563,"kevAdded":null},{"id":"CVE-2021-39891","published":"2021-10-05T13:38:07.000Z","updated":"2024-08-04T02:20:33.670Z","title":"In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation…","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01003,"kevAdded":null},{"id":"CVE-2021-39866","published":"2021-10-05T12:35:39.000Z","updated":"2024-08-04T02:20:33.617Z","title":"A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens.","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00983,"kevAdded":null},{"id":"CVE-2021-39872","published":"2021-10-05T12:34:28.000Z","updated":"2024-08-04T02:20:33.624Z","title":"In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still access GitLab through…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00989,"kevAdded":null},{"id":"CVE-2021-39894","published":"2021-10-05T12:33:05.000Z","updated":"2024-08-04T02:20:33.670Z","title":"In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00613,"kevAdded":null},{"id":"CVE-2021-39869","published":"2021-10-05T12:30:52.000Z","updated":"2024-08-04T02:20:33.663Z","title":"In all versions of GitLab CE/EE since version 8.9, project exports may expose trigger tokens configured on that project.","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01268,"kevAdded":null},{"id":"CVE-2021-39867","published":"2021-10-05T12:29:39.000Z","updated":"2024-08-04T02:20:33.672Z","title":"In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by an attacker to trigger Server Side…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00893,"kevAdded":null},{"id":"CVE-2021-39875","published":"2021-10-05T12:28:28.000Z","updated":"2024-08-04T02:20:33.568Z","title":"In all versions of GitLab CE/EE since version 13.6, it is possible to see pending invitations of any public group or public project by visiting an API endpoint.","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01171,"kevAdded":null},{"id":"CVE-2021-39884","published":"2021-10-05T12:27:21.000Z","updated":"2024-08-04T02:20:33.652Z","title":"In all versions of GitLab EE since version 8.13, an endpoint discloses names of private groups that have access to a project to low privileged users that are…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01123,"kevAdded":null},{"id":"CVE-2021-39882","published":"2021-10-05T12:22:05.000Z","updated":"2024-08-04T02:20:33.633Z","title":"In all versions of GitLab CE/EE, provided a user ID, anonymous users can use a few endpoints to retrieve information about any GitLab user.","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00579,"kevAdded":null},{"id":"CVE-2021-39888","published":"2021-10-05T12:20:58.000Z","updated":"2024-08-04T02:20:33.655Z","title":"In all versions of GitLab EE starting from 13.10 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions starting from 14.3 before…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01165,"kevAdded":null},{"id":"CVE-2021-39893","published":"2021-10-05T12:18:22.000Z","updated":"2024-08-04T02:20:33.763Z","title":"A potential DOS vulnerability was discovered in GitLab starting with version 9.1 that allowed parsing files without authorisation.","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01265,"kevAdded":null},{"id":"CVE-2021-39878","published":"2021-10-05T12:17:08.000Z","updated":"2024-08-04T02:20:33.708Z","title":"A stored Reflected Cross-Site Scripting vulnerability in the Jira integration in GitLab version 13.0 up to 14.3.1 allowed an attacker to execute arbitrary…","severity":"MEDIUM","score":5.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00805,"kevAdded":null},{"id":"CVE-2021-39887","published":"2021-10-05T11:12:11.000Z","updated":"2024-08-04T02:20:33.689Z","title":"A stored Cross-Site Scripting vulnerability in the GitLab Flavored Markdown in GitLab CE/EE version 8.4 and above allowed an attacker to execute arbitrary…","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00864,"kevAdded":null},{"id":"CVE-2021-39868","published":"2021-10-04T16:55:29.000Z","updated":"2024-08-04T02:20:33.614Z","title":"In all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious user may create a project with unlimited repository size by…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00895,"kevAdded":null},{"id":"CVE-2021-22259","published":"2021-10-04T16:51:58.000Z","updated":"2024-08-03T18:37:18.508Z","title":"A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API.","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01029,"kevAdded":null},{"id":"CVE-2021-39874","published":"2021-10-04T16:50:47.000Z","updated":"2024-08-04T02:20:33.620Z","title":"In all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored when using git commands.","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01048,"kevAdded":null},{"id":"CVE-2021-39883","published":"2021-10-04T16:49:32.000Z","updated":"2024-08-04T02:20:33.672Z","title":"Improper authorization checks in all versions of GitLab EE starting from 13.11 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00772,"kevAdded":null},{"id":"CVE-2021-39871","published":"2021-10-04T16:48:11.000Z","updated":"2024-08-04T02:20:33.665Z","title":"In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0093,"kevAdded":null},{"id":"CVE-2021-39899","published":"2021-10-04T16:47:01.000Z","updated":"2024-08-04T02:20:33.678Z","title":"In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function.…","severity":"LOW","score":2.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00257,"kevAdded":null},{"id":"CVE-2021-39900","published":"2021-10-04T16:45:45.000Z","updated":"2024-08-04T02:20:33.699Z","title":"Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary…","severity":"LOW","score":2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00626,"kevAdded":null},{"id":"CVE-2021-39896","published":"2021-10-04T16:44:28.000Z","updated":"2024-08-04T02:20:33.774Z","title":"In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the…","severity":"LOW","score":3.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00618,"kevAdded":null},{"id":"CVE-2021-39873","published":"2021-10-04T16:43:24.000Z","updated":"2024-08-04T02:20:33.651Z","title":"In all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be leveraged by attackers to trick users into visiting a malicious…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01046,"kevAdded":null},{"id":"CVE-2021-39879","published":"2021-10-04T16:42:11.000Z","updated":"2024-08-04T02:20:33.644Z","title":"Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable two-factor…","severity":"LOW","score":2.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2021-39877","published":"2021-10-04T16:41:04.000Z","updated":"2024-08-04T02:20:33.679Z","title":"A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with a specially crafted…","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01042,"kevAdded":null},{"id":"CVE-2021-39885","published":"2021-10-04T16:33:54.000Z","updated":"2024-08-04T02:20:33.578Z","title":"A Stored XSS in merge request creation page in all versions of Gitlab EE starting from 13.7 before 14.1.7, all versions starting from 14.2 before 14.2.5, and…","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01134,"kevAdded":null},{"id":"CVE-2021-22239","published":"2021-09-09T14:41:34.000Z","updated":"2024-08-03T18:37:18.281Z","title":"An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later.","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00592,"kevAdded":null},{"id":"CVE-2021-22236","published":"2021-08-25T18:39:18.000Z","updated":"2024-08-03T18:37:18.092Z","title":"Due to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an incorrect OAuth client application. This vulnerability is present…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00865,"kevAdded":null},{"id":"CVE-2021-22242","published":"2021-08-25T18:38:24.000Z","updated":"2024-08-03T18:37:18.232Z","title":"Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit a stored cross-site scripting…","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.63555,"kevAdded":null},{"id":"CVE-2021-22237","published":"2021-08-25T18:37:19.000Z","updated":"2024-08-03T18:37:18.434Z","title":"Under specialized conditions, GitLab may allow a user with an impersonation token to perform Git actions even if impersonation is disabled. This vulnerability…","severity":"MEDIUM","score":6.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00844,"kevAdded":null},{"id":"CVE-2021-22243","published":"2021-08-25T18:36:06.000Z","updated":"2024-08-03T18:37:18.309Z","title":"Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address to gain…","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00505,"kevAdded":null},{"id":"CVE-2021-22244","published":"2021-08-25T18:34:06.000Z","updated":"2024-08-03T18:37:18.393Z","title":"Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01006,"kevAdded":null},{"id":"CVE-2021-22247","published":"2021-08-25T18:32:59.000Z","updated":"2024-08-03T18:37:18.175Z","title":"Improper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in private projects to view CI/CD analytics","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00933,"kevAdded":null},{"id":"CVE-2021-22245","published":"2021-08-25T18:31:57.000Z","updated":"2024-08-03T18:37:18.243Z","title":"Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01366,"kevAdded":null},{"id":"CVE-2021-22256","published":"2021-08-25T18:30:43.000Z","updated":"2024-08-03T18:37:18.477Z","title":"Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to create issues for Sentry errors and track their status","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00729,"kevAdded":null},{"id":"CVE-2021-22250","published":"2021-08-25T18:28:30.000Z","updated":"2024-08-03T18:37:18.267Z","title":"Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation tokens that administrators created for…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0083,"kevAdded":null},{"id":"CVE-2021-22249","published":"2021-08-23T19:53:20.000Z","updated":"2024-08-03T18:37:18.281Z","title":"A verbose error message in GitLab EE affecting all versions since 12.2 could disclose the private email address of a user invited to a group","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00974,"kevAdded":null},{"id":"CVE-2021-22248","published":"2021-08-23T19:42:07.000Z","updated":"2024-08-03T18:37:18.266Z","title":"Improper authorization on the pipelines page in GitLab CE/EE affecting all versions since 13.12 allowed unauthorized users to view some pipeline information…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01051,"kevAdded":null},{"id":"CVE-2021-22251","published":"2021-08-23T19:38:04.000Z","updated":"2024-08-03T18:37:18.163Z","title":"Improper validation of invited users' email address in GitLab EE affecting all versions since 12.2 allowed projects to add members with email address domain…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00819,"kevAdded":null},{"id":"CVE-2021-22252","published":"2021-08-23T19:36:39.000Z","updated":"2024-08-03T18:37:18.277Z","title":"A confusion between tag and branch names in GitLab CE/EE affecting all versions since 13.7 allowed a Developer to access protected CI variables which should…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01126,"kevAdded":null},{"id":"CVE-2021-22253","published":"2021-08-23T19:34:47.000Z","updated":"2024-08-03T18:37:18.258Z","title":"Improper authorization in GitLab EE affecting all versions since 13.4 allowed a user who previously had the necessary access to trigger deployments to…","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00987,"kevAdded":null},{"id":"CVE-2021-22255","published":"2021-08-20T17:53:33.000Z","updated":"2024-08-03T18:37:18.499Z","title":"SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting…","severity":"HIGH","score":7.7,"vendor":"Baserow B.V.","product":"Baserow","kev":false,"epss":0.01288,"kevAdded":null},{"id":"CVE-2021-22238","published":"2021-08-20T17:39:54.000Z","updated":"2024-08-03T18:37:18.293Z","title":"An issue has been discovered in GitLab affecting all versions starting with 13.3. GitLab was vulnerable to a stored XSS by using the design feature in issues.","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.71787,"kevAdded":null},{"id":"CVE-2021-22246","published":"2021-08-20T17:38:43.000Z","updated":"2024-08-03T18:37:18.252Z","title":"A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abused to perform denial of service attacks.","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01335,"kevAdded":null},{"id":"CVE-2021-22254","published":"2021-08-20T17:37:29.000Z","updated":"2024-08-03T18:37:18.539Z","title":"Under very specific conditions a user could be impersonated using Gitlab shell. This vulnerability affects GitLab CE/EE 13.1 and later through 14.1.2, 14.0.7…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0087,"kevAdded":null},{"id":"CVE-2021-22234","published":"2021-08-05T20:30:25.000Z","updated":"2024-08-03T18:37:18.427Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 before 13.12.8, and…","severity":"CRITICAL","score":9.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01006,"kevAdded":null},{"id":"CVE-2021-22241","published":"2021-08-05T19:28:23.000Z","updated":"2024-08-03T18:37:18.367Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0. It was possible to exploit a stored cross-site-scripting via a…","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00991,"kevAdded":null},{"id":"CVE-2021-22240","published":"2021-08-05T19:25:09.000Z","updated":"2024-08-03T18:37:18.341Z","title":"Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled","severity":"MEDIUM","score":4.2,"vendor":"GitLab","product":"GitLab EE","kev":false,"epss":0.00662,"kevAdded":null},{"id":"CVE-2021-22235","published":"2021-07-20T00:00:00.000Z","updated":"2024-08-03T18:37:18.219Z","title":"Crash in DNP dissector in Wireshark 3.4.0 to 3.4.6 and 3.2.0 to 3.2.14 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"The Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0343,"kevAdded":null},{"id":"CVE-2021-22233","published":"2021-07-07T13:22:15.000Z","updated":"2024-08-03T18:37:18.418Z","title":"An information disclosure vulnerability in GitLab EE versions 13.10 and later allowed a user to read project details","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00812,"kevAdded":null},{"id":"CVE-2021-22224","published":"2021-07-07T11:26:37.000Z","updated":"2024-08-03T18:37:18.269Z","title":"A cross-site request forgery vulnerability in the GraphQL API in GitLab since version 13.12 and before versions 13.12.6 and 14.0.2 allowed an attacker to call…","severity":"HIGH","score":7.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01023,"kevAdded":null},{"id":"CVE-2021-22225","published":"2021-07-07T11:19:53.000Z","updated":"2024-08-03T18:37:17.432Z","title":"Insufficient input sanitization in markdown in GitLab version 13.11 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a…","severity":"MEDIUM","score":4.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00555,"kevAdded":null},{"id":"CVE-2021-22230","published":"2021-07-07T10:47:31.000Z","updated":"2024-08-03T18:37:18.220Z","title":"Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability affects GitLab CE/EE 9.3 and later…","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01033,"kevAdded":null},{"id":"CVE-2021-22227","published":"2021-07-07T10:40:54.000Z","updated":"2024-08-03T18:37:18.316Z","title":"A reflected cross-site script vulnerability in GitLab before versions 13.11.6, 13.12.6 and 14.0.2 allowed an attacker to send a malicious link to a victim and…","severity":"MEDIUM","score":6.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00946,"kevAdded":null},{"id":"CVE-2021-22231","published":"2021-07-07T10:28:23.000Z","updated":"2024-08-03T18:37:18.497Z","title":"A denial of service in user's profile page is found starting with GitLab CE/EE 8.0 that allows attacker to reject access to their profile page via using a…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00998,"kevAdded":null},{"id":"CVE-2021-22223","published":"2021-07-06T21:50:25.000Z","updated":"2024-08-03T18:37:18.268Z","title":"Client-Side code injection through Feature Flag name in GitLab CE/EE starting with 11.9 allows a specially crafted feature flag name to PUT requests on behalf…","severity":"MEDIUM","score":6.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01018,"kevAdded":null},{"id":"CVE-2021-22228","published":"2021-07-06T21:34:10.000Z","updated":"2024-08-03T18:37:18.219Z","title":"An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01714,"kevAdded":null},{"id":"CVE-2021-22226","published":"2021-07-06T20:56:53.000Z","updated":"2024-08-03T18:37:17.937Z","title":"Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since version 13.9","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00922,"kevAdded":null},{"id":"CVE-2021-22232","published":"2021-07-06T20:43:43.000Z","updated":"2024-08-03T18:37:18.237Z","title":"HTML injection was possible via the full name field before versions 13.11.6, 13.12.6, and 14.0.2 in GitLab CE","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00747,"kevAdded":null},{"id":"CVE-2021-22229","published":"2021-07-06T20:30:47.000Z","updated":"2024-08-03T18:37:17.875Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.8. Under a special condition it was possible to access data of an internal…","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01084,"kevAdded":null},{"id":"CVE-2021-22181","published":"2021-06-11T15:43:20.000Z","updated":"2024-08-03T18:37:17.999Z","title":"A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relationship and exhaust…","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01101,"kevAdded":null},{"id":"CVE-2021-22175","published":"2021-06-11T15:30:12.000Z","updated":"2026-10-01T18:12:57.574Z","title":"When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5…","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":true,"epss":0.53372,"kevAdded":"2026-02-18"},{"id":"CVE-2021-22216","published":"2021-06-08T19:19:25.000Z","updated":"2024-08-03T18:37:18.260Z","title":"A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01029,"kevAdded":null},{"id":"CVE-2021-22220","published":"2021-06-08T19:05:00.000Z","updated":"2024-08-03T18:37:18.105Z","title":"An issue has been discovered in GitLab affecting all versions starting with 13.10. GitLab was vulnerable to a stored XSS in blob viewer of notebooks.","severity":"MEDIUM","score":6.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00799,"kevAdded":null},{"id":"CVE-2021-22221","published":"2021-06-08T18:52:20.000Z","updated":"2024-08-03T18:37:18.251Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before 13.11.5, all…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00821,"kevAdded":null},{"id":"CVE-2021-22219","published":"2021-06-08T18:38:17.000Z","updated":"2024-08-03T18:37:17.702Z","title":"All versions of GitLab CE/EE starting from 9.5 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before…","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00947,"kevAdded":null},{"id":"CVE-2021-22217","published":"2021-06-08T18:25:29.000Z","updated":"2024-08-03T18:37:17.638Z","title":"A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01974,"kevAdded":null},{"id":"CVE-2021-22213","published":"2021-06-08T18:03:58.000Z","updated":"2024-08-03T18:37:18.348Z","title":"A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the…","severity":"HIGH","score":8.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01789,"kevAdded":null},{"id":"CVE-2021-22215","published":"2021-06-08T15:13:29.000Z","updated":"2024-08-03T18:37:18.303Z","title":"An information disclosure vulnerability in GitLab EE versions 13.11 and later allowed a project owner to leak information about the members' on-call rotations…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2021-22218","published":"2021-06-08T15:04:57.000Z","updated":"2024-08-03T18:37:17.682Z","title":"All versions of GitLab CE/EE starting from 12.8 before 13.10.5, all versions starting from 13.11 before 13.11.5, and all versions starting from 13.12 before…","severity":"LOW","score":2.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00463,"kevAdded":null},{"id":"CVE-2021-22214","published":"2021-06-08T14:59:37.000Z","updated":"2024-08-03T18:37:18.229Z","title":"When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting…","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.27806,"kevAdded":null},{"id":"CVE-2021-22212","published":"2021-06-08T12:07:02.000Z","updated":"2024-08-03T18:37:18.446Z","title":"ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '#' characters. ntpd then either pads, shortens the…","severity":"MEDIUM","score":4,"vendor":"NTPsec","product":"ntpsec","kev":false,"epss":0.00522,"kevAdded":null},{"id":"CVE-2021-22222","published":"2021-06-07T12:01:14.000Z","updated":"2024-08-03T18:37:18.527Z","title":"Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file","severity":"HIGH","score":7.5,"vendor":"The Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.01914,"kevAdded":null},{"id":"CVE-2021-22209","published":"2021-05-06T13:37:47.000Z","updated":"2024-08-03T18:37:18.262Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8. GitLab was not properly validating authorisation tokens which resulted…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00934,"kevAdded":null},{"id":"CVE-2021-22208","published":"2021-05-06T13:35:17.000Z","updated":"2024-08-03T18:37:18.290Z","title":"An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0081,"kevAdded":null},{"id":"CVE-2021-22206","published":"2021-05-06T13:25:10.000Z","updated":"2024-08-03T18:37:18.443Z","title":"An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed that allows other maintainers to be able…","severity":"MEDIUM","score":6.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01035,"kevAdded":null},{"id":"CVE-2021-22210","published":"2021-05-06T13:19:32.000Z","updated":"2024-08-03T18:37:17.924Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2. When querying the repository branches through API, GitLab was ignoring…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01246,"kevAdded":null},{"id":"CVE-2021-22211","published":"2021-05-05T22:03:25.000Z","updated":"2024-08-03T18:37:18.409Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7. GitLab Dependency Proxy, under certain circumstances, can impersonate a…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00562,"kevAdded":null},{"id":"CVE-2021-22205","published":"2021-04-23T17:39:36.000Z","updated":"2026-08-06T03:55:21.716Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a…","severity":"CRITICAL","score":10,"vendor":"GitLab","product":"GitLab","kev":true,"epss":0.99731,"kevAdded":"2021-11-03"},{"id":"CVE-2021-22207","published":"2021-04-23T17:32:51.000Z","updated":"2024-08-03T18:37:18.330Z","title":"Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted…","severity":"MEDIUM","score":5.5,"vendor":"The Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.02023,"kevAdded":null},{"id":"CVE-2021-22204","published":"2021-04-23T17:22:15.000Z","updated":"2025-10-21T23:25:48.455Z","title":"Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image","severity":"MEDIUM","score":6.8,"vendor":"ExifTool","product":"ExifTool","kev":true,"epss":0.99981,"kevAdded":"2021-11-17"},{"id":"CVE-2021-22199","published":"2021-04-22T21:56:00.000Z","updated":"2024-08-03T18:37:18.257Z","title":"An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used.","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0092,"kevAdded":null},{"id":"CVE-2021-22190","published":"2021-04-12T14:31:04.000Z","updated":"2024-08-03T18:37:18.205Z","title":"A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token","severity":"HIGH","score":8.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01636,"kevAdded":null},{"id":"CVE-2021-22202","published":"2021-04-02T16:25:43.000Z","updated":"2024-08-03T18:37:18.190Z","title":"An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks…","severity":"LOW","score":2.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00479,"kevAdded":null},{"id":"CVE-2021-22200","published":"2021-04-02T16:22:37.000Z","updated":"2024-08-03T18:37:18.276Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal…","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01003,"kevAdded":null},{"id":"CVE-2021-22197","published":"2021-04-02T16:21:24.000Z","updated":"2024-08-03T18:37:17.487Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00845,"kevAdded":null},{"id":"CVE-2021-22198","published":"2021-04-02T16:20:10.000Z","updated":"2024-08-03T18:37:17.882Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident metric images of…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01077,"kevAdded":null},{"id":"CVE-2021-22201","published":"2021-04-02T16:17:40.000Z","updated":"2024-08-03T18:37:18.224Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server.","severity":"CRITICAL","score":9.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.03073,"kevAdded":null},{"id":"CVE-2021-22203","published":"2021-04-02T16:16:15.000Z","updated":"2024-08-03T18:37:17.326Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 before 13.9.5, and all…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01399,"kevAdded":null},{"id":"CVE-2021-22196","published":"2021-04-02T16:14:37.000Z","updated":"2024-08-03T18:37:17.698Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a stored cross-site-scripting in merge…","severity":"MEDIUM","score":6.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00939,"kevAdded":null},{"id":"CVE-2021-22195","published":"2021-04-01T17:36:21.000Z","updated":"2024-08-03T18:37:18.301Z","title":"Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system","severity":"HIGH","score":8.6,"vendor":"GitLab","product":"gitlab-vscode-extension","kev":false,"epss":0.01139,"kevAdded":null},{"id":"CVE-2021-22177","published":"2021-04-01T14:19:07.000Z","updated":"2024-08-03T18:37:17.998Z","title":"Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01206,"kevAdded":null},{"id":"CVE-2021-22184","published":"2021-03-26T19:11:39.000Z","updated":"2024-08-03T18:37:18.076Z","title":"An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't…","severity":"MEDIUM","score":6.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2021-22180","published":"2021-03-26T19:09:59.000Z","updated":"2024-08-03T18:37:17.452Z","title":"An issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access control allows unauthorized users to access details on…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00848,"kevAdded":null},{"id":"CVE-2021-22194","published":"2021-03-26T19:08:16.000Z","updated":"2024-08-03T18:37:18.118Z","title":"In all versions of GitLab, marshalled session keys were being stored in Redis.","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2021-22172","published":"2021-03-26T19:06:48.000Z","updated":"2024-08-03T18:37:17.263Z","title":"Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01031,"kevAdded":null},{"id":"CVE-2021-22169","published":"2021-03-24T17:03:04.000Z","updated":"2024-08-03T18:37:18.113Z","title":"An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages.","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00831,"kevAdded":null},{"id":"CVE-2021-22178","published":"2021-03-24T16:59:51.000Z","updated":"2024-08-03T18:37:17.932Z","title":"An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack through the Prometheus integration.","severity":"MEDIUM","score":5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01124,"kevAdded":null},{"id":"CVE-2021-22193","published":"2021-03-24T16:57:47.000Z","updated":"2024-08-03T18:37:18.311Z","title":"An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able to validate the use of a specific name…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00991,"kevAdded":null},{"id":"CVE-2021-22179","published":"2021-03-24T16:48:30.000Z","updated":"2024-08-03T18:37:17.689Z","title":"A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature.","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00946,"kevAdded":null},{"id":"CVE-2021-22176","published":"2021-03-24T16:46:05.000Z","updated":"2024-08-03T18:37:17.155Z","title":"An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01001,"kevAdded":null},{"id":"CVE-2021-22186","published":"2021-03-24T16:42:06.000Z","updated":"2024-08-03T18:37:17.915Z","title":"An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00861,"kevAdded":null},{"id":"CVE-2021-22185","published":"2021-03-24T16:39:21.000Z","updated":"2024-08-03T18:37:18.297Z","title":"Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00807,"kevAdded":null},{"id":"CVE-2021-22192","published":"2021-03-24T16:36:47.000Z","updated":"2024-08-03T18:37:17.341Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on…","severity":"CRITICAL","score":9.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.13108,"kevAdded":null},{"id":"CVE-2021-22191","published":"2021-03-15T17:48:04.000Z","updated":"2024-08-03T18:37:18.230Z","title":"Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file.","severity":"MEDIUM","score":6.3,"vendor":"The Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.03655,"kevAdded":null},{"id":"CVE-2021-22183","published":"2021-03-04T14:56:28.000Z","updated":"2024-08-03T18:37:18.244Z","title":"An issue has been discovered in GitLab affecting all versions starting with 11.8. GitLab was vulnerable to a stored XSS in the epics page, which could be…","severity":"MEDIUM","score":4.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00838,"kevAdded":null},{"id":"CVE-2021-22189","published":"2021-03-04T14:54:34.000Z","updated":"2024-08-03T18:37:18.364Z","title":"Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that…","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00655,"kevAdded":null},{"id":"CVE-2021-22182","published":"2021-03-03T17:57:50.000Z","updated":"2024-08-03T18:37:17.169Z","title":"An issue has been discovered in GitLab affecting all versions starting with 13.7. GitLab was vulnerable to a stored XSS in merge request.","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01,"kevAdded":null},{"id":"CVE-2021-22188","published":"2021-03-03T17:56:21.000Z","updated":"2024-08-03T18:37:18.206Z","title":"An issue has been discovered in GitLab affecting all versions starting with 13.0. Confidential issue titles in Gitlab were readable by an unauthorised user via…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0147,"kevAdded":null},{"id":"CVE-2021-22187","published":"2021-03-02T18:15:16.000Z","updated":"2024-08-03T18:37:18.277Z","title":"An issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 13.6.7. A potential resource exhaustion issue that allowed running or…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01038,"kevAdded":null},{"id":"CVE-2021-22173","published":"2021-02-17T14:26:20.000Z","updated":"2024-08-03T18:37:17.473Z","title":"Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file","severity":"LOW","score":3.7,"vendor":"The Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.02411,"kevAdded":null},{"id":"CVE-2021-22174","published":"2021-02-17T14:24:34.000Z","updated":"2024-08-03T18:37:17.907Z","title":"Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file","severity":"LOW","score":3.7,"vendor":"The Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.02747,"kevAdded":null},{"id":"CVE-2020-26414","published":"2021-01-15T15:15:18.000Z","updated":"2024-08-04T15:56:04.447Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.4. The regex used for package names is written in a way that makes execution…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01595,"kevAdded":null},{"id":"CVE-2021-22166","published":"2021-01-15T15:13:51.000Z","updated":"2024-08-03T18:37:17.189Z","title":"An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01394,"kevAdded":null},{"id":"CVE-2021-22167","published":"2021-01-15T15:12:17.000Z","updated":"2024-08-03T18:37:18.547Z","title":"An issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect headers in specific project page allows attacker to have a…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0178,"kevAdded":null},{"id":"CVE-2021-22171","published":"2021-01-15T15:10:39.000Z","updated":"2024-08-03T18:37:18.342Z","title":"Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a victim's API token if they click on a…","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01348,"kevAdded":null},{"id":"CVE-2021-22168","published":"2021-01-15T15:05:18.000Z","updated":"2024-08-03T18:37:17.218Z","title":"A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8.","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01013,"kevAdded":null},{"id":"CVE-2020-26422","published":"2020-12-21T17:15:13.000Z","updated":"2024-08-04T15:56:04.417Z","title":"Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file","severity":"LOW","score":3.7,"vendor":"The Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.04725,"kevAdded":null},{"id":"CVE-2020-26418","published":"2020-12-11T17:27:05.000Z","updated":"2024-08-04T15:56:04.643Z","title":"Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.","severity":"LOW","score":3.1,"vendor":"The Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.03001,"kevAdded":null},{"id":"CVE-2020-26421","published":"2020-12-11T17:25:09.000Z","updated":"2024-08-04T15:56:04.704Z","title":"Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or…","severity":"MEDIUM","score":4.2,"vendor":"The Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.0255,"kevAdded":null},{"id":"CVE-2020-26420","published":"2020-12-11T17:20:55.000Z","updated":"2024-08-04T15:56:04.825Z","title":"Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.","severity":"LOW","score":3.1,"vendor":"The Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.02749,"kevAdded":null},{"id":"CVE-2020-26419","published":"2020-12-11T17:17:07.000Z","updated":"2024-08-04T15:56:04.280Z","title":"Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.","severity":"LOW","score":3.1,"vendor":"The Wireshark Foundation","product":"Wireshark","kev":false,"epss":0.02933,"kevAdded":null},{"id":"CVE-2020-26411","published":"2020-12-11T04:09:00.000Z","updated":"2024-08-04T15:56:03.962Z","title":"A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2).…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01216,"kevAdded":null},{"id":"CVE-2020-26408","published":"2020-12-11T04:01:26.000Z","updated":"2024-08-04T15:56:04.394Z","title":"A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.01031,"kevAdded":null},{"id":"CVE-2020-13357","published":"2020-12-11T03:55:55.000Z","updated":"2024-08-04T12:18:17.628Z","title":"An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized user to access the user…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.00764,"kevAdded":null},{"id":"CVE-2020-26412","published":"2020-12-11T03:51:02.000Z","updated":"2024-08-04T15:56:04.357Z","title":"Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2.","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab EE","kev":false,"epss":0.01015,"kevAdded":null},{"id":"CVE-2020-26413","published":"2020-12-11T03:47:34.000Z","updated":"2024-08-04T15:56:04.703Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 13.6.2. Information disclosure via GraphQL results in user email…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.34931,"kevAdded":null},{"id":"CVE-2020-26417","published":"2020-12-11T03:37:36.000Z","updated":"2024-08-04T15:56:04.584Z","title":"Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.01437,"kevAdded":null},{"id":"CVE-2020-26416","published":"2020-12-11T03:34:03.000Z","updated":"2024-08-04T15:56:04.341Z","title":"Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions…","severity":"MEDIUM","score":4,"vendor":"GitLab","product":"GitLab EE","kev":false,"epss":0.00332,"kevAdded":null},{"id":"CVE-2020-26415","published":"2020-12-11T03:29:26.000Z","updated":"2024-08-04T15:56:04.810Z","title":"Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This affects GitLab…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00825,"kevAdded":null},{"id":"CVE-2020-26409","published":"2020-12-11T01:17:28.000Z","updated":"2024-08-04T15:56:04.626Z","title":"A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that allows an attacker to trigger uncontrolled resource by…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.0126,"kevAdded":null},{"id":"CVE-2020-26407","published":"2020-12-10T05:16:24.000Z","updated":"2024-08-04T15:56:04.267Z","title":"A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to perform cross-site…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"Gitlab CE/EE","kev":false,"epss":0.00845,"kevAdded":null},{"id":"CVE-2020-13359","published":"2020-11-18T23:57:34.000Z","updated":"2024-08-04T12:18:17.623Z","title":"The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the…","severity":"HIGH","score":7.6,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.00765,"kevAdded":null},{"id":"CVE-2020-13356","published":"2020-11-18T23:35:05.000Z","updated":"2024-08-04T12:18:17.540Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially crafted request could bypass Multipart protection and read…","severity":"HIGH","score":8.2,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.01785,"kevAdded":null},{"id":"CVE-2020-13355","published":"2020-11-18T23:30:25.000Z","updated":"2024-08-04T12:18:17.457Z","title":"An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path traversal is found in LFS Upload that allows attacker to…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.01681,"kevAdded":null},{"id":"CVE-2020-26405","published":"2020-11-17T18:26:50.000Z","updated":"2024-08-04T15:56:04.586Z","title":"Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitrary locations.…","severity":"HIGH","score":7.1,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.01451,"kevAdded":null},{"id":"CVE-2020-13349","published":"2020-11-17T18:22:32.000Z","updated":"2024-08-04T12:18:17.565Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab EE","kev":false,"epss":0.00911,"kevAdded":null},{"id":"CVE-2020-13348","published":"2020-11-17T18:11:51.000Z","updated":"2024-08-04T12:18:17.574Z","title":"An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could be bypassed by targeting a branch…","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab EE","kev":false,"epss":0.00799,"kevAdded":null},{"id":"CVE-2020-13350","published":"2020-11-17T17:55:43.000Z","updated":"2024-08-04T12:18:17.575Z","title":"CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.00813,"kevAdded":null},{"id":"CVE-2020-13351","published":"2020-11-17T17:52:28.000Z","updated":"2024-08-04T12:18:17.580Z","title":"Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable names and values for scheduled pipelines on…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.01361,"kevAdded":null},{"id":"CVE-2020-13354","published":"2020-11-17T00:43:55.000Z","updated":"2024-08-04T12:18:17.583Z","title":"A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name check could cause exponential number of…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.01433,"kevAdded":null},{"id":"CVE-2020-13352","published":"2020-11-17T00:36:27.000Z","updated":"2024-08-04T12:18:17.655Z","title":"Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to public group. Affected versions are:…","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab CE/EE","kev":false,"epss":0.01224,"kevAdded":null},{"id":"CVE-2020-13353","published":"2020-11-17T00:26:35.000Z","updated":"2024-08-04T12:18:17.588Z","title":"When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above.","severity":"LOW","score":2.5,"vendor":"GitLab","product":"Gitaly","kev":false,"epss":0.00277,"kevAdded":null},{"id":"CVE-2020-13358","published":"2020-11-17T00:20:25.000Z","updated":"2024-08-04T12:18:17.461Z","title":"A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access to private projects. Affected versions…","severity":"MEDIUM","score":4.7,"vendor":"GitLab","product":"Gitlab CE/EE","kev":false,"epss":0.00355,"kevAdded":null},{"id":"CVE-2020-26406","published":"2020-11-17T00:13:19.000Z","updated":"2024-08-04T15:56:04.397Z","title":"Certain SAST CiConfiguration information could be viewed by unauthorized users in GitLab EE starting with 13.3. This information was exposed through GraphQL to…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab EE","kev":false,"epss":0.01439,"kevAdded":null},{"id":"CVE-2020-13327","published":"2020-10-22T20:05:58.000Z","updated":"2024-08-04T12:18:17.093Z","title":"An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all…","severity":"MEDIUM","score":6,"vendor":"GitLab","product":"GitLab Runner","kev":false,"epss":0.00715,"kevAdded":null},{"id":"CVE-2020-13341","published":"2020-10-12T13:20:07.000Z","updated":"2024-08-04T12:18:17.524Z","title":"An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Insufficient permission check allows attacker with developer…","severity":"MEDIUM","score":4.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01183,"kevAdded":null},{"id":"CVE-2020-13339","published":"2020-10-08T13:51:33.000Z","updated":"2024-08-04T12:18:17.524Z","title":"An issue has been discovered in GitLab affecting all versions before 13.2.10, 13.3.7 and 13.4.2: XSS in SVG File Preview. Overall impact is limited due to the…","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00955,"kevAdded":null},{"id":"CVE-2020-13340","published":"2020-10-08T13:46:33.000Z","updated":"2024-08-04T12:18:17.588Z","title":"An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2: Stored XSS in CI Job Log","severity":"HIGH","score":8.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.66748,"kevAdded":null},{"id":"CVE-2020-13344","published":"2020-10-08T13:43:02.000Z","updated":"2024-08-04T12:18:17.452Z","title":"An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows…","severity":"MEDIUM","score":5.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2020-13342","published":"2020-10-07T15:57:08.000Z","updated":"2024-08-04T12:18:17.451Z","title":"An issue has been discovered in GitLab affecting versions prior to 13.2.10, 13.3.7 and 13.4.2: Lack of Rate Limiting at Re-Sending Confirmation Email","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00881,"kevAdded":null},{"id":"CVE-2020-13346","published":"2020-10-07T13:21:28.000Z","updated":"2024-08-04T12:18:17.541Z","title":"Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01335,"kevAdded":null},{"id":"CVE-2020-13334","published":"2020-10-07T13:18:20.000Z","updated":"2024-08-04T12:18:18.242Z","title":"In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/group to change the confidentiality…","severity":"MEDIUM","score":5.9,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0153,"kevAdded":null},{"id":"CVE-2020-13347","published":"2020-10-07T13:14:16.000Z","updated":"2024-08-04T12:18:17.532Z","title":"A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows…","severity":"CRITICAL","score":9.1,"vendor":"GitLab","product":"GitLab Runner","kev":false,"epss":0.02282,"kevAdded":null},{"id":"CVE-2020-13335","published":"2020-10-07T13:03:23.000Z","updated":"2024-08-04T12:18:17.616Z","title":"Improper group membership validation when deleting a user account in GitLab >=7.12 allows a user to delete own account without deleting/transferring their…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00802,"kevAdded":null},{"id":"CVE-2020-13333","published":"2020-10-06T18:30:03.000Z","updated":"2024-08-04T12:18:17.569Z","title":"A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a link from a release had a regex check…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.02112,"kevAdded":null},{"id":"CVE-2020-13345","published":"2020-10-06T18:26:15.000Z","updated":"2024-08-04T12:18:17.684Z","title":"An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00889,"kevAdded":null},{"id":"CVE-2020-13343","published":"2020-10-06T18:24:10.000Z","updated":"2024-08-04T12:18:17.542Z","title":"An issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized Users Can View Custom Project Template","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01505,"kevAdded":null},{"id":"CVE-2020-13338","published":"2020-10-02T19:20:06.000Z","updated":"2024-08-04T12:18:17.515Z","title":"An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. A stored cross-site scripting vulnerability was discovered when…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.007,"kevAdded":null},{"id":"CVE-2020-13337","published":"2020-10-02T19:15:50.000Z","updated":"2024-08-04T12:18:17.783Z","title":"An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name.","severity":"HIGH","score":7.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00752,"kevAdded":null},{"id":"CVE-2020-13336","published":"2020-09-30T20:56:45.000Z","updated":"2024-08-04T12:18:17.577Z","title":"An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. GitLab was vulnerable to a stored XSS by in the error tracking feature.","severity":"MEDIUM","score":4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00599,"kevAdded":null},{"id":"CVE-2020-13326","published":"2020-09-29T18:45:49.000Z","updated":"2024-08-04T12:18:17.045Z","title":"A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github project import could be bypassed.","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00694,"kevAdded":null},{"id":"CVE-2020-13321","published":"2020-09-29T18:40:43.000Z","updated":"2024-08-04T12:18:17.095Z","title":"A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to be added.","severity":"HIGH","score":8.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01418,"kevAdded":null},{"id":"CVE-2020-13324","published":"2020-09-29T18:36:34.000Z","updated":"2024-08-04T12:18:17.015Z","title":"A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API.","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0101,"kevAdded":null},{"id":"CVE-2020-13325","published":"2020-09-29T18:33:33.000Z","updated":"2024-08-04T12:18:17.028Z","title":"A vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting the characters properly, potentially…","severity":"HIGH","score":7.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00925,"kevAdded":null},{"id":"CVE-2020-13323","published":"2020-09-29T18:29:37.000Z","updated":"2024-08-04T12:18:17.065Z","title":"A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos","severity":"HIGH","score":7.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01102,"kevAdded":null},{"id":"CVE-2020-13331","published":"2020-09-29T17:47:52.000Z","updated":"2024-08-04T12:18:17.097Z","title":"An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the Wiki pasges.","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00682,"kevAdded":null},{"id":"CVE-2020-13330","published":"2020-09-29T17:41:40.000Z","updated":"2024-08-04T12:18:17.101Z","title":"An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS in import the Bitbucket project feature.","severity":"MEDIUM","score":4.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2020-13329","published":"2020-09-29T16:11:44.000Z","updated":"2024-08-04T12:18:17.541Z","title":"An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the blob view feature.","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00602,"kevAdded":null},{"id":"CVE-2020-13328","published":"2020-09-29T16:09:37.000Z","updated":"2024-08-04T12:18:17.584Z","title":"An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to a stored XSS by using the PyPi files…","severity":"MEDIUM","score":4.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00583,"kevAdded":null},{"id":"CVE-2020-13320","published":"2020-09-29T16:07:52.000Z","updated":"2024-08-04T12:18:17.019Z","title":"An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard.","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01195,"kevAdded":null},{"id":"CVE-2020-13322","published":"2020-09-29T16:01:12.000Z","updated":"2024-08-04T12:18:17.099Z","title":"A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy…","severity":"HIGH","score":7.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0115,"kevAdded":null},{"id":"CVE-2020-13319","published":"2020-09-29T15:58:06.000Z","updated":"2024-08-04T12:18:17.073Z","title":"An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue.","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0078,"kevAdded":null},{"id":"CVE-2020-13296","published":"2020-09-29T15:54:15.000Z","updated":"2024-08-04T12:11:19.552Z","title":"An issue has been discovered in GitLab affecting versions >=10.7 <13.0.14, >=13.1.0 <13.1.8, >=13.2.0 <13.2.6. Improper Access Control for Deploy Tokens","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.016,"kevAdded":null},{"id":"CVE-2020-13307","published":"2020-09-15T12:34:43.000Z","updated":"2024-08-04T12:18:16.643Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not revoking current user sessions when 2 factor authentication…","severity":"LOW","score":3.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01009,"kevAdded":null},{"id":"CVE-2020-13308","published":"2020-09-15T12:30:33.000Z","updated":"2024-08-04T12:18:17.035Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from…","severity":"LOW","score":2.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01597,"kevAdded":null},{"id":"CVE-2020-13303","published":"2020-09-15T12:27:32.000Z","updated":"2024-08-04T12:18:17.068Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Due to improper verification of permissions, an unauthorized user can…","severity":"HIGH","score":7.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01347,"kevAdded":null},{"id":"CVE-2020-13298","published":"2020-09-14T21:44:42.000Z","updated":"2024-08-04T12:11:19.559Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality was not properly validating the…","severity":"HIGH","score":7.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01242,"kevAdded":null},{"id":"CVE-2020-13305","published":"2020-09-14T21:42:54.000Z","updated":"2024-08-04T12:18:17.023Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not invalidating project invitation link upon removing a user…","severity":"LOW","score":3.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00959,"kevAdded":null},{"id":"CVE-2020-13309","published":"2020-09-14T21:36:54.000Z","updated":"2024-08-04T12:18:17.002Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SSRF attack through the repository…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01265,"kevAdded":null},{"id":"CVE-2020-13310","published":"2020-09-14T21:33:50.000Z","updated":"2024-08-04T12:18:17.028Z","title":"A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01652,"kevAdded":null},{"id":"CVE-2020-13315","published":"2020-09-14T21:32:16.000Z","updated":"2024-08-04T12:18:17.032Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The profile activity page was not restricting the amount of results one…","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.02078,"kevAdded":null},{"id":"CVE-2020-13306","published":"2020-09-14T21:28:16.000Z","updated":"2024-08-04T12:18:17.022Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service…","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01828,"kevAdded":null},{"id":"CVE-2020-13301","published":"2020-09-14T21:26:35.000Z","updated":"2024-08-04T12:11:19.527Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a stored XSS on the standalone vulnerability page.","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01183,"kevAdded":null},{"id":"CVE-2020-13302","published":"2020-09-14T21:23:24.000Z","updated":"2024-08-04T12:18:16.653Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Under certain conditions GitLab was not properly revoking user sessions…","severity":"LOW","score":3.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01132,"kevAdded":null},{"id":"CVE-2020-13297","published":"2020-09-14T21:22:03.000Z","updated":"2024-08-04T12:11:19.550Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. When 2 factor authentication was enabled for groups, a malicious user…","severity":"LOW","score":3.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01029,"kevAdded":null},{"id":"CVE-2020-13304","published":"2020-09-14T21:19:55.000Z","updated":"2024-08-04T12:18:16.662Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Same 2 factor Authentication secret code was generated which resulted an…","severity":"LOW","score":3.8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01617,"kevAdded":null},{"id":"CVE-2020-13314","published":"2020-09-14T19:50:28.000Z","updated":"2024-08-04T12:18:17.069Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Omniauth endpoint allowed a malicious user to submit content to be…","severity":"LOW","score":3.7,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01505,"kevAdded":null},{"id":"CVE-2020-13311","published":"2020-09-14T19:47:00.000Z","updated":"2024-08-04T12:18:16.661Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was vulnerable to a parser attack that prohibits anyone from…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01511,"kevAdded":null},{"id":"CVE-2020-13312","published":"2020-09-14T19:44:41.000Z","updated":"2024-08-04T12:18:17.549Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab OAuth endpoint was vulnerable to brute-force attacks through a…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00852,"kevAdded":null},{"id":"CVE-2020-13313","published":"2020-09-14T19:40:20.000Z","updated":"2024-08-04T12:18:17.034Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. An unauthorized project maintainer could edit the subgroup badges due to…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00981,"kevAdded":null},{"id":"CVE-2020-13317","published":"2020-09-14T19:36:25.000Z","updated":"2024-08-04T12:18:17.064Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8, and 13.3.4. An insufficient check in the GraphQL api allowed a maintainer to delete a…","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01434,"kevAdded":null},{"id":"CVE-2020-13318","published":"2020-09-14T18:50:47.000Z","updated":"2024-08-04T12:18:17.071Z","title":"A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume…","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00985,"kevAdded":null},{"id":"CVE-2020-13284","published":"2020-09-14T18:48:36.000Z","updated":"2024-08-04T12:11:19.437Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. API Authorization Using Outdated CI Job Token","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01095,"kevAdded":null},{"id":"CVE-2020-13289","published":"2020-09-14T18:45:54.000Z","updated":"2024-08-04T12:11:19.459Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00687,"kevAdded":null},{"id":"CVE-2020-13287","published":"2020-09-14T18:43:44.000Z","updated":"2024-08-04T12:11:19.555Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Project reporters and above could see confidential EPIC attached to…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01399,"kevAdded":null},{"id":"CVE-2020-13316","published":"2020-09-14T18:41:53.000Z","updated":"2024-08-04T12:18:17.096Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not validating a Deploy-Token and allowed a disabled repository…","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01435,"kevAdded":null},{"id":"CVE-2020-13299","published":"2020-09-14T18:36:52.000Z","updated":"2024-08-04T12:11:19.604Z","title":"A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The revocation feature was not revoking all session tokens and one could…","severity":"HIGH","score":8.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01225,"kevAdded":null},{"id":"CVE-2020-13300","published":"2020-09-14T18:34:29.000Z","updated":"2024-08-04T12:11:19.601Z","title":"GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow.","severity":"HIGH","score":8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01257,"kevAdded":null},{"id":"CVE-2020-13286","published":"2020-08-13T13:30:55.000Z","updated":"2024-08-04T12:11:19.556Z","title":"For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery.","severity":"MEDIUM","score":6.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00869,"kevAdded":null},{"id":"CVE-2020-13281","published":"2020-08-13T13:22:23.000Z","updated":"2024-08-04T12:11:19.554Z","title":"For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01327,"kevAdded":null},{"id":"CVE-2020-13280","published":"2020-08-13T12:49:19.000Z","updated":"2024-08-04T12:11:19.553Z","title":"For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message.","severity":"MEDIUM","score":6.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0105,"kevAdded":null},{"id":"CVE-2020-13285","published":"2020-08-13T12:45:07.000Z","updated":"2024-08-04T12:11:19.514Z","title":"For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference number tooltip.","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01014,"kevAdded":null},{"id":"CVE-2020-13283","published":"2020-08-13T12:38:29.000Z","updated":"2024-08-04T12:11:19.430Z","title":"For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title.","severity":"HIGH","score":7.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00846,"kevAdded":null},{"id":"CVE-2020-13282","published":"2020-08-13T12:33:52.000Z","updated":"2024-08-04T12:11:19.525Z","title":"For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroup leading to…","severity":"LOW","score":3.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00797,"kevAdded":null},{"id":"CVE-2020-13290","published":"2020-08-12T14:24:24.000Z","updated":"2024-08-04T12:11:19.547Z","title":"In GitLab before 13.0.12, 13.1.6, and 13.2.3, improper access control was used on the Applications page","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01112,"kevAdded":null},{"id":"CVE-2020-13291","published":"2020-08-12T14:15:00.000Z","updated":"2024-08-04T12:11:19.532Z","title":"In GitLab before 13.2.3, project sharing could temporarily allow too permissive access.","severity":"HIGH","score":8.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00956,"kevAdded":null},{"id":"CVE-2020-13288","published":"2020-08-12T14:06:41.000Z","updated":"2024-08-04T12:11:19.550Z","title":"In GitLab before 13.0.12, 13.1.6, and 13.2.3, a stored XSS vulnerability exists in the CI/CD Jobs page","severity":"MEDIUM","score":5.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.04045,"kevAdded":null},{"id":"CVE-2020-13278","published":"2020-08-12T14:01:44.000Z","updated":"2024-08-04T12:11:19.473Z","title":"Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System < 6.5.1 allows remote attackers to execute arbitrary web…","severity":"MEDIUM","score":6.1,"vendor":"RosarioSIS","product":"RosarioSIS","kev":false,"epss":0.0143,"kevAdded":null},{"id":"CVE-2020-13292","published":"2020-08-10T13:33:23.000Z","updated":"2024-08-04T12:11:19.453Z","title":"In GitLab before 13.0.12, 13.1.6 and 13.2.3, it is possible to bypass E-mail verification which is required for OAuth Flow.","severity":"CRITICAL","score":9.6,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00996,"kevAdded":null},{"id":"CVE-2020-13295","published":"2020-08-10T13:32:12.000Z","updated":"2024-08-04T12:11:19.550Z","title":"For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.","severity":"MEDIUM","score":5.4,"vendor":"GitLab","product":"GitLab Runner","kev":false,"epss":0.01169,"kevAdded":null},{"id":"CVE-2020-13294","published":"2020-08-10T13:30:12.000Z","updated":"2024-08-04T12:11:19.494Z","title":"In GitLab before 13.0.12, 13.1.6 and 13.2.3, access grants were not revoked when a user revoked access to an application.","severity":"MEDIUM","score":4.2,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01221,"kevAdded":null},{"id":"CVE-2020-13293","published":"2020-08-10T13:28:58.000Z","updated":"2024-08-04T12:11:19.491Z","title":"In GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override an existing hash.","severity":"MEDIUM","score":6.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01041,"kevAdded":null},{"id":"CVE-2020-13279","published":"2020-06-22T15:11:56.000Z","updated":"2024-08-04T12:11:19.515Z","title":"Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system","severity":"HIGH","score":8.6,"vendor":"GitLab","product":"gitlab-vscode-extension","kev":false,"epss":0.01201,"kevAdded":null},{"id":"CVE-2020-13263","published":"2020-06-19T22:15:37.000Z","updated":"2024-08-04T12:11:19.416Z","title":"An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01017,"kevAdded":null},{"id":"CVE-2020-13264","published":"2020-06-19T22:13:52.000Z","updated":"2024-08-04T12:11:19.466Z","title":"Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01268,"kevAdded":null},{"id":"CVE-2020-13261","published":"2020-06-19T22:11:59.000Z","updated":"2024-08-04T12:11:19.551Z","title":"Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00877,"kevAdded":null},{"id":"CVE-2020-13262","published":"2020-06-19T21:59:20.000Z","updated":"2024-08-04T12:11:19.462Z","title":"Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on…","severity":"MEDIUM","score":6.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00871,"kevAdded":null},{"id":"CVE-2020-13275","published":"2020-06-19T21:55:32.000Z","updated":"2024-08-04T12:11:19.491Z","title":"A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1","severity":"HIGH","score":8,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01043,"kevAdded":null},{"id":"CVE-2020-13274","published":"2020-06-19T21:53:45.000Z","updated":"2024-08-04T12:11:19.491Z","title":"A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLab versions through…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01149,"kevAdded":null},{"id":"CVE-2020-13273","published":"2020-06-19T21:51:37.000Z","updated":"2024-08-04T12:11:19.428Z","title":"A Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0 and later through 13.0.1","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01187,"kevAdded":null},{"id":"CVE-2020-13265","published":"2020-06-19T21:42:04.000Z","updated":"2024-08-04T12:11:19.478Z","title":"User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass email verification","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00857,"kevAdded":null},{"id":"CVE-2020-13272","published":"2020-06-19T21:40:04.000Z","updated":"2024-08-04T12:11:19.447Z","title":"OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flow","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00579,"kevAdded":null},{"id":"CVE-2020-13276","published":"2020-06-19T21:37:54.000Z","updated":"2024-08-04T12:11:19.431Z","title":"User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 13.0.1","severity":"HIGH","score":7.4,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00674,"kevAdded":null},{"id":"CVE-2020-13277","published":"2020-06-19T17:20:01.000Z","updated":"2024-08-04T12:11:19.490Z","title":"An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5","severity":"MEDIUM","score":6.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01848,"kevAdded":null},{"id":"CVE-2020-13269","published":"2020-06-10T14:38:12.000Z","updated":"2024-08-04T12:11:19.487Z","title":"A Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code on the Static Site Editor in GitLab CE/EE 12.10 and later…","severity":"MEDIUM","score":6.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0175,"kevAdded":null},{"id":"CVE-2020-13270","published":"2020-06-10T14:35:07.000Z","updated":"2024-08-04T12:11:19.468Z","title":"Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted…","severity":"HIGH","score":7.5,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01374,"kevAdded":null},{"id":"CVE-2020-13268","published":"2020-06-10T14:32:13.000Z","updated":"2024-08-04T12:11:19.488Z","title":"A specially crafted request could be used to confirm the existence of files hosted on object storage services, without disclosing their contents. This…","severity":"MEDIUM","score":5.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01071,"kevAdded":null},{"id":"CVE-2020-13267","published":"2020-06-10T14:29:12.000Z","updated":"2024-08-04T12:11:19.470Z","title":"A Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads on the Metrics Dashboard in GitLab CE/EE 12.8 and later through 13.0.1","severity":"MEDIUM","score":6.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.0175,"kevAdded":null},{"id":"CVE-2020-13271","published":"2020-06-10T14:25:15.000Z","updated":"2024-08-04T12:11:19.411Z","title":"A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through…","severity":"MEDIUM","score":6.1,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.01562,"kevAdded":null},{"id":"CVE-2020-13266","published":"2020-06-09T15:34:39.000Z","updated":"2024-08-04T12:11:19.473Z","title":"Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permissions of other users' deploy keys…","severity":"MEDIUM","score":4.3,"vendor":"GitLab","product":"GitLab","kev":false,"epss":0.00554,"kevAdded":null}]}