Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
GitLab
MEDIUM 5.9
An issue was discovered in GitLab Enterprise Edition 8.3 through 12.0.2. The color codes decoder was vulnerable to a resource depletion attack if spe…
GitLab
HIGH 7.5
An issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows Information Exposure through an Error Message.
GitLab
HIGH 7.5
An issue was discovered in GitLab Community and Enterprise Edition before 12.0.3. One of the parsers used by Gilab CI was vulnerable to a resource ex…
GitLab
MEDIUM 6.1
An issue was discovered in GitLab Community and Enterprise Edition 8.9 through 11.11. Wiki Pages contained a lack of input validation which resulted …
GitLab
MEDIUM 5.4
An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute JavaScript code on notes by impo…
GitLab
MEDIUM 5.3
An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. When specific encoded characters were added to comments, the…
GitLab
CRITICAL 9.8
An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple features contained Server-Side Request Forgery (SSRF)…
GitLab
HIGH 7.5
An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. The protected branches feature contained a access control issue…
GitLab
MEDIUM 6.1
An issue was discovered in GitLab Enterprise Edition 11.7 through 11.11. The epic details page contained a lack of input validation and output encodi…
GitLab
CRITICAL 9.8
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provid…
GitLab
HIGH 8.8
An issue was discovered in GitLab Community and Enterprise Edition 11.11. A specially crafted payload would allow an authenticated malicious user to …
GitLab
MEDIUM 6.5
An issue was discovered in GitLab Community and Enterprise Edition 11.9 through 11.11. Unprivileged users were able to access labels, status and merg…
GitLab
MEDIUM 5.3
An issue was discovered in GitLab Community and Enterprise Edition 11.7 through 11.11. It has Improper Input Validation. Restricted visibility settin…
GitLab
CRITICAL 9.8
GitLab 10.7 and later through 12.7.2 has Incorrect Access Control.
GitLab
HIGH 7.5
In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users.
GitLab
HIGH 7.5
An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling.
GitLab
HIGH 7.5
GitLab EE 12.2 has Insecure Permissions (issue 2 of 2).
GitLab
HIGH 7.5
GitLab EE 12.6 and later through 12.7.2 allows Denial of Service.
GitLab
MEDIUM 6.1
GitLab EE 11.0 and later through 12.7.2 allows XSS.
GitLab
MEDIUM 6.1
GitLab through 12.7.2 allows XSS.
GitLab
MEDIUM 5.3
GitLab EE 10.1 through 12.7.2 allows Information Disclosure.
GitLab
MEDIUM 5.3
GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control.
GitLab
MEDIUM 5.3
GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions.
GitLab
HIGH 7.5
GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal.
GitLab
HIGH 7.5
GitLab EE 8.0 through 12.7.2 has Incorrect Access Control.
GitLab
HIGH 7.5
GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure.
GitLab
CRITICAL 9.8
GitLab EE 8.9 and later through 12.7.2 has Insecure Permission
GitLab
MEDIUM 5.3
GitLab EE 8.9 and later through 12.7.2 has Insecure Permission
GitLab
HIGH 8.8
The parse_cmd function in lib/gitlab_shell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and git…
GitLab
MEDIUM 6.5
The (1) create_branch, (2) create_tag, (3) import_project, and (4) fork_project functions in lib/gitlab_projects.rb in GitLab 5.0 before 5.4.2, Commu…