ngalog
7 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
17İzleyin | CVE-2021-39876İstismar yok | In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.gitlab · gitlab · CWE-863 | Orta4,3 | — | %0,9 | 28 Mar 2022 |
17İzleyin | CVE-2021-39930İstismar yok | Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an attgitlab · gitlab · CWE-863 | Orta4,3 | — | %0,8 | 13 Ara 2021 |
10İzleyin | CVE-2021-39901İstismar yok | In all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token of that group by visiting a specific endpoingitlab · gitlab | Düşük2,7 | — | %0,9 | 4 Kas 2021 |
17İzleyin | CVE-2021-39870İstismar yok | In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by agitlab · gitlab | Orta4,3 | — | %1,0 | 5 Eki 2021 |
17İzleyin | CVE-2021-22258İstismar yok | The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addressesgitlab · gitlab | Orta4,3 | — | %1,0 | 5 Eki 2021 |
26İzleyin | CVE-2021-39872İstismar yok | In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still accgitlab · gitlab · CWE-287 | Orta6,5 | — | %1,0 | 5 Eki 2021 |
17İzleyin | CVE-2021-39868İstismar yok | In all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious user may create a project with unlimited reposgitlab · gitlab · CWE-732 | Orta4,3 | — | %0,9 | 4 Eki 2021 |
- CVE-2021-3987617İzleyin
In all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee discloses the members of private groups.
OrtaCVSS 4,3İstismar yokEPSS %1gitlab · gitlab28 Mar 2022
- CVE-2021-3993017İzleyin
Missing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4, and between 14.5.0 and 14.5.2 allowed an att
OrtaCVSS 4,3İstismar yokEPSS %1gitlab · gitlab13 Ara 2021
- CVE-2021-3990110İzleyin
In all versions of GitLab CE/EE since version 11.10, an admin of a group can see the SCIM token of that group by visiting a specific endpoin
DüşükCVSS 2,7İstismar yokEPSS %1gitlab · gitlab4 Kas 2021
- CVE-2021-3987017İzleyin
In all versions of GitLab CE/EE since version 11.11, an instance that has the setting to disable Repo by URL import enabled is bypassed by a
OrtaCVSS 4,3İstismar yokEPSS %1gitlab · gitlab5 Eki 2021
- CVE-2021-2225817İzleyin
The project import/export feature in GitLab 8.9 and greater could be used to obtain otherwise private email addresses
OrtaCVSS 4,3İstismar yokEPSS %1gitlab · gitlab5 Eki 2021
- CVE-2021-3987226İzleyin
In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still acc
OrtaCVSS 6,5İstismar yokEPSS %1gitlab · gitlab5 Eki 2021
- CVE-2021-3986817İzleyin
In all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious user may create a project with unlimited repos
OrtaCVSS 4,3İstismar yokEPSS %1gitlab · gitlab4 Eki 2021