Page 91 of 1071 results (0.030 seconds)

CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0

CVE-2019-18463

https://notcve.org/view.php?id=CVE-2019-18463

26 Nov 2019 — An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions (issue 4 of 4). Se detectó un problema en GitLab Community and Enterprise Edition versiones hasta 12.4. Posee Permisos No Seguros (problema 4 de 4). • https://about.gitlab.com/blog/2019/10/30/security-release-gitlab-12-dot-4-dot-1-released • CWE-732: Incorrect Permission Assignment for Critical Resource •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1

CVE-2019-15593

https://notcve.org/view.php?id=CVE-2019-15593

22 Nov 2019 — GitLab 12.2.3 contains a security vulnerability that allows a user to affect the availability of the service through a Denial of Service attack in Issue Comments. GitLab versión 12.2.3, contiene una vulnerabilidad de seguridad que permite a un usuario afectar la disponibilidad del servicio por medio de un ataque de Denegación de Servicio en los Comentarios de Problemas. • https://hackerone.com/reports/557154 • CWE-400: Uncontrolled Resource Consumption CWE-770: Allocation of Resources Without Limits or Throttling •

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2019-15729

https://notcve.org/view.php?id=CVE-2019-15729

17 Sep 2019 — An issue was discovered in GitLab Community and Enterprise Edition 8.18 through 12.2.1. An internal endpoint unintentionally disclosed information about the last pipeline that ran for a merge request. Se detectó un problema en GitLab Community and Enterprise Edition versiones 8.18 hasta 12.2.1. Un end point interno divulgó involuntariamente información sobre la última pipeline que se ejecutó para una petición de fusión. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released • CWE-863: Incorrect Authorization •

CVSS: 5.3EPSS: 0%CPEs: 6EXPL: 0

CVE-2019-15740

https://notcve.org/view.php?id=CVE-2019-15740

16 Sep 2019 — An issue was discovered in GitLab Community and Enterprise Edition 7.9 through 12.2.1. EXIF Geolocation data was not being removed from certain image uploads. Se detectó un problema en GitLab Community and Enterprise Edition versiones 7.9 hasta 12.2.1. Los datos de geolocalización de EXIF no estaban siendo eliminados desde ciertas cargas de imágenes. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.1EPSS: 0%CPEs: 6EXPL: 0

CVE-2019-15739

https://notcve.org/view.php?id=CVE-2019-15739

16 Sep 2019 — An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdown were not properly sanitizing some XSS payloads. Se detectó un problema en GitLab Community and Enterprise Edition versiones 8.1 hasta 12.2.1. En ciertas áreas que muestran Markdown no fueron saneadas apropiadamente algunas cargas útiles de XSS. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.3EPSS: 0%CPEs: 6EXPL: 0

CVE-2019-15738

https://notcve.org/view.php?id=CVE-2019-15738

16 Sep 2019 — An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Under certain conditions, merge request IDs were being disclosed via email. Se descubrió un problema en GitLab Community and Enterprise Edition versiones 12.0 hasta 12.2.1. Bajo ciertas condiciones, los ID de petición de fusión estaban siendo divulgados por medio del correo electrónico. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2019-15737

https://notcve.org/view.php?id=CVE-2019-15737

16 Sep 2019 — An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Certain account actions needed improved authentication and session management. Se detectó un problema en GitLab Community and Enterprise Edition versiones hasta 12.2.1. Determinadas acciones de la cuenta necesitaban autenticación mejorada y administración de sesión. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released •

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2019-15736

https://notcve.org/view.php?id=CVE-2019-15736

16 Sep 2019 — An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Under certain circumstances, CI pipelines could potentially be used in a denial of service attack. Se detectó un problema en GitLab Community and Enterprise Edition versiones hasta 12.2.1. Bajo ciertas circunstancias, las pipelines de CI podrían ser usadas potencialmente en un ataque de denegación de servicio. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released • CWE-770: Allocation of Resources Without Limits or Throttling •

CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0

CVE-2019-15734

https://notcve.org/view.php?id=CVE-2019-15734

16 Sep 2019 — An issue was discovered in GitLab Community and Enterprise Edition 8.6 through 12.2.1. Under very specific conditions, commit titles and team member comments could become viewable to users who did not have permission to access these. Se descubrió un problema en GitLab Community and Enterprise Edition versiones 8.6 hasta 12.2.1. Bajo condiciones muy específicas, los títulos de commit y los comentarios de los miembros del equipo podrían ser visualizables para usuarios que no tenían permiso para acceder a ello... • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0

CVE-2019-15733

https://notcve.org/view.php?id=CVE-2019-15733

16 Sep 2019 — An issue was discovered in GitLab Community and Enterprise Edition 7.12 through 12.2.1. The specified default branch name could be exposed to unauthorized users. Se descubrió un problema en GitLab Community and Enterprise Edition versiones 7.12 hasta 12.2.1. El nombre predeterminado de la derivación especificada podría estar expuesto a usuarios no autorizados. • https://about.gitlab.com/2019/08/29/security-release-gitlab-12-dot-2-dot-3-released • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •