Vulnerability index

Browse CVEs

1,035 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

GitLab MEDIUM 6.5
CVE-2019-6785

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Denial of…

Fix: 11.5.8 / 11.6.6+
Fix from $1,600 2019-09-09
GitLab MEDIUM 6.5
CVE-2019-6786

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It has Incorrect Ac…

Fix: 11.5.8 / 11.6.6+
Fix from $1,600 2019-09-09
GitLab MEDIUM 6.1
CVE-2019-6784

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows XSS (issu…

Fix: 11.5.8 / 11.6.6+
Fix from $1,600 2019-09-09
GitLab HIGH 7.5
CVE-2019-11605

An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11.10.x before 11.10.3. It allow…

Fix: 11.8.10 / 11.9.11+
Fix from $1,950 2019-09-09
GitLab MEDIUM 6.5
CVE-2019-11549

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10…

Fix: 11.8.9 / 11.9.10+
Fix from $1,600 2019-09-09
GitLab MEDIUM 6.1
CVE-2019-11547

An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has Improper …

Fix: 11.8.9 / 11.9.10+
Fix from $1,600 2019-09-09
GitLab MEDIUM 5.4
CVE-2019-11548

An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project …

Fix: 11.8.9+
Fix from $1,600 2019-09-09
GitLab MEDIUM 5.3
CVE-2019-11546

An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It has a Race Co…

Fix: 11.8.9 / 11.9.10+
Fix from $1,600 2019-09-09
GitLab HIGH 7.2
CVE-2019-5473

An authentication issue was discovered in GitLab that allowed a bypass of email verification. This was addressed in GitLab 12.1.2 and 12.0.4.

No fix yet
Fix from $1,950 2019-09-09
GitLab MEDIUM 5.4
CVE-2019-5467

An input validation and output encoding issue was discovered in the GitLab CE/EE wiki pages feature which could result in a persistent XSS. This vuln…

Fix: 11.11.7 / 12.0.4+
Fix from $1,600 2019-09-09
GitLab MEDIUM 5.4
CVE-2019-5471

An input validation and output encoding issue was discovered in the GitLab email notification feature which could result in a persistent XSS. This wa…

Fix: 11.11.7 / 12.0.4+
Fix from $1,600 2019-09-09
GitLab MEDIUM 5.3
CVE-2019-5463

An authorization issue was discovered in the GitLab CE/EE CI badge images endpoint which could result in disclosure of the build status. This vulnera…

Fix: 11.11.7 / 12.0.4+
Fix from $1,600 2019-09-09
GitLab CRITICAL 9.8
CVE-2019-14943

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.1.4. It uses Hard-coded Credentials.

Fix: after 12.1.4
Fix from $2,300 2019-08-29
GitLab HIGH 7.5
CVE-2018-19584

GitLab EE, versions 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure direct object reference vulnerabili…

Fix: 11.3.11 / 11.4.8+
Fix from $1,950 2019-07-10
GitLab HIGH 7.7
CVE-2018-19571EPSS 28%

GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhook…

Fix: 11.3.11 / 11.4.8+
Fix from $1,950 2019-07-10
GitLab HIGH 7.5
CVE-2018-19581

GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerab…

Fix: 11.3.11 / 11.4.8+
Fix from $1,950 2019-07-10
GitLab MEDIUM 6.5
CVE-2018-19578

GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the J…

Fix: 11.5.1+
Fix from $1,600 2019-07-10
GitLab MEDIUM 6.5
CVE-2018-19583

GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, perm…

Fix: 11.3.11 / 11.4.8+
Fix from $1,600 2019-07-10
GitLab MEDIUM 5.4
CVE-2018-19579

GitLab EE version 11.5 is vulnerable to a persistent XSS vulnerability in the Operations page. This is fixed in 11.5.1.

Fix: 11.5.1+
Fix from $1,600 2019-07-10
GitLab MEDIUM 5.3
CVE-2018-19580

All versions of GitLab prior to 11.5.1, 11.4.8, and 11.3.11 do not send an email to the old email address when an email address change is made.

Fix: 11.3.11 / 11.4.8+
Fix from $1,600 2019-07-10
GitLab HIGH 8.1
CVE-2018-19576

GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allo…

Fix: 11.3.11 / 11.4.8+
Fix from $1,950 2019-07-10
GitLab HIGH 8.8
CVE-2018-19569

GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability th…

Fix: 11.3.11 / 11.4.8+
Fix from $1,950 2019-07-10
GitLab MEDIUM 5.9
CVE-2018-19572

GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to file…

Fix: 11.3.11 / 11.4.8+
Fix from $1,600 2019-07-10
GitLab MEDIUM 5.4
CVE-2018-19570

GitLab CE/EE, versions 11.3 before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown fields via…

Fix: 11.3.11 / 11.4.8+
Fix from $1,600 2019-07-10
GitLab MEDIUM 5.4
CVE-2018-19573

GitLab CE/EE, versions 10.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in Markdown…

Fix: 11.3.11 / 11.4.8+
Fix from $1,600 2019-07-10
GitLab MEDIUM 5.4
CVE-2018-19574

GitLab CE/EE, versions 7.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an XSS vulnerability in the OAuth…

Fix: 11.3.11 / 11.4.8+
Fix from $1,600 2019-07-10
GitLab MEDIUM 6.5
CVE-2018-19496

An issue was discovered in GitLab Community and Enterprise Edition 10.x and 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. Ther…

Fix: 11.3.11 / 11.4.8+
Fix from $1,600 2019-07-10
GitLab MEDIUM 5.3
CVE-2018-19577

Gitlab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an incorrect access control vulne…

Fix: 11.3.11 / 11.4.8+
Fix from $1,600 2019-07-10
GitLab MEDIUM 6.5
CVE-2018-19495

An issue was discovered in GitLab Community and Enterprise Edition before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an SSRF v…

Fix: 11.3.11 / 11.4.8+
Fix from $1,600 2019-07-10
GitLab MEDIUM 6.1
CVE-2018-19493

An issue was discovered in GitLab Community and Enterprise Edition 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is a pe…

Fix: 11.3.11 / 11.4.8+
Fix from $1,600 2019-07-10