Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check this weekEPSS 46.00%May 22, 2025
- Medium4.9An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check this weekEPSS 44.00%May 22, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%May 21, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%May 16, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2.Check this weekEPSS 41.00%May 9, 2025
- Medium6.8An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2.Check this weekEPSS 46.00%May 9, 2025
- Medium5.3An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2.Check this weekEPSS 39.00%May 9, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 9, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryApr 30, 2025
- UnknownRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryApr 30, 2025
- Medium4.3An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting allCheck this weekEPSS 31.00%Apr 24, 2025
- Medium6.5An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 beforeCheck this weekEPSS 45.00%Apr 24, 2025
- High7.7An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versionsCheck this weekEPSS 39.00%Apr 24, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryApr 23, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryApr 17, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() If track_pfn_copy() fails, we already addCheck this weekEPSS 21.00%Apr 16, 2025
- UnknownGitLab GitLab Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.59%Jan 15, 2025
- Critical9.8GitLab Community and Enterprise Editions Improper Access Control VulnerabilityPatch nowKEVEPSS 94.65%Jan 12, 2024
- UnknownGitLab GitLab Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 27.81%Dec 12, 2023
- UnknownGitLab CE/EE 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2 Unauthenticated User EnumerationPatch nowKEVEPSS 80.00%Nov 14, 2023
- Unknownsonarsource sonarqube Missing Authentication for Critical FunctionPatch nowKEVEPSS 15.97%Nov 13, 2023
- High7.5GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 36.14%Dec 13, 2021
- Critical9.8GitLab Server-Side Request Forgery (SSRF) VulnerabilityPatch nowKEVEPSS 53.37%Jun 11, 2021
- Critical10.0GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.73%Apr 23, 2021
299 records · page 12 of 12
PreviousNext