[vakzz](https://hackerone.com/vakzz)
16 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
49Plan | CVE-2023-0050No exploit | An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.gitlab · gitlab · CWE-79 | Medium5.4 | — | 92.4% | Mar 9, 2023 |
26Monitor | CVE-2022-3067No exploit | An issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions starting from 14.4 before 15.2.5, all versiogitlab · gitlab · CWE-284 | Medium6.5 | — | 1.0% | Oct 17, 2022 |
21Monitor | CVE-2022-3066No exploit | An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.gitlab · gitlab · CWE-284 | Medium5.4 | — | 0.7% | Oct 17, 2022 |
65This week | CVE-2022-2992Weaponized | A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated usgitlab · gitlab · CWE-74 | Critical9.9 | — | 86.1% | Oct 17, 2022 |
58Plan | CVE-2022-2185Proof of concept | A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prgitlab · gitlab · CWE-78 | High8.8 | — | 76.6% | Jul 1, 2022 |
26Monitor | CVE-2022-1185No exploit | A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7, 14.8.0 to 14.8.5, and 14.9.0 to 14.9.2 algitlab · gitlab · CWE-787 | Medium6.5 | — | 1.3% | Apr 4, 2022 |
30Monitor | CVE-2022-0741No exploit | Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables vgitlab · gitlab · CWE-116 | High7.5 | — | 1.4% | Apr 1, 2022 |
30Monitor | CVE-2022-0244No exploit | An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5.gitlab · gitlab · CWE-552 | High7.5 | — | 1.6% | Jan 18, 2022 |
43Plan | CVE-2021-22238No exploit | An issue has been discovered in GitLab affecting all versions starting with 13.3.gitlab · gitlab · CWE-79 | Medium5.4 | — | 71.7% | Aug 20, 2021 |
25Monitor | CVE-2021-22234No exploit | An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 befgitlab · gitlab · CWE-79 | Medium6.4 | — | 1.0% | Aug 5, 2021 |
21Monitor | CVE-2020-26407No exploit | A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to pegitlab · gitlab · CWE-79 | Medium5.4 | — | 0.8% | Dec 10, 2020 |
28Monitor | CVE-2020-26405No exploit | Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitgitlab · gitlab · CWE-22 | High7.1 | — | 1.4% | Nov 17, 2020 |
21Monitor | CVE-2020-13345No exploit | An issue has been discovered in GitLab affecting all versions starting from 10.8.gitlab · gitlab · CWE-79 | Medium5.4 | — | 0.8% | Oct 6, 2020 |
21Monitor | CVE-2020-13338No exploit | An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2.gitlab · gitlab · CWE-79 | Medium5.4 | — | 0.7% | Oct 2, 2020 |
19Monitor | CVE-2020-13328No exploit | An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13.gitlab · gitlab · CWE-79 | Medium4.8 | — | 0.5% | Sep 30, 2020 |
17Monitor | CVE-2020-13286No exploit | For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgergitlab · gitlab · CWE-918 | Medium4.3 | — | 0.8% | Aug 13, 2020 |
- CVE-2023-005049Plan
An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.
MediumCVSS 5.4No exploitEPSS 92%gitlab · gitlabMar 9, 2023
- CVE-2022-306726Monitor
An issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions starting from 14.4 before 15.2.5, all versio
MediumCVSS 6.5No exploitEPSS 1%gitlab · gitlabOct 17, 2022
- CVE-2022-306621Monitor
An issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5, all versions starting from 15.3 before 15.3.
MediumCVSS 5.4No exploitEPSS 0%gitlab · gitlabOct 17, 2022
- CVE-2022-299265This week
A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated us
CriticalCVSS 9.9WeaponizedEPSS 86%gitlab · gitlabOct 17, 2022
- CVE-2022-218558Plan
A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 pr
HighCVSS 8.8Proof of conceptEPSS 76%gitlab · gitlabJul 1, 2022
- CVE-2022-118526Monitor
A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7, 14.8.0 to 14.8.5, and 14.9.0 to 14.9.2 al
MediumCVSS 6.5No exploitEPSS 1%gitlab · gitlabApr 4, 2022
- CVE-2022-074130Monitor
Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables v
HighCVSS 7.5No exploitEPSS 1%gitlab · gitlabApr 1, 2022
- CVE-2022-024430Monitor
An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5.
HighCVSS 7.5No exploitEPSS 1%gitlab · gitlabJan 18, 2022
- CVE-2021-2223843Plan
An issue has been discovered in GitLab affecting all versions starting with 13.3.
MediumCVSS 5.4No exploitEPSS 71%gitlab · gitlabAug 20, 2021
- CVE-2021-2223425Monitor
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.11 before 13.11.7, all versions starting from 13.12 bef
MediumCVSS 6.4No exploitEPSS 1%gitlab · gitlabAug 5, 2021
- CVE-2020-2640721Monitor
A XSS vulnerability exists in Gitlab CE/EE from 12.4 before 13.4.7, 13.5 before 13.5.5, and 13.6 before 13.6.2 that allows an attacker to pe
MediumCVSS 5.4No exploitEPSS 0%gitlab · gitlabDec 10, 2020
- CVE-2020-2640528Monitor
Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbit
HighCVSS 7.1No exploitEPSS 1%gitlab · gitlabNov 17, 2020
- CVE-2020-1334521Monitor
An issue has been discovered in GitLab affecting all versions starting from 10.8.
MediumCVSS 5.4No exploitEPSS 0%gitlab · gitlabOct 6, 2020
- CVE-2020-1333821Monitor
An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2.
MediumCVSS 5.4No exploitEPSS 0%gitlab · gitlabOct 2, 2020
- CVE-2020-1332819Monitor
An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13.
MediumCVSS 4.8No exploitEPSS 0%gitlab · gitlabSep 30, 2020
- CVE-2020-1328617Monitor
For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forger
MediumCVSS 4.3No exploitEPSS 0%gitlab · gitlabAug 13, 2020