<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T04:56:15.876760+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2024-10299</id>
    <title>bdu:2024-10299</title>
    <updated>2026-10-03T04:56:15.964572+00:00</updated>
    <content>bdu:2024-10299</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2024-10299"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bit-gitlab-2024-7404</id>
    <title>BIT-gitlab-2024-7404 — Improper Restriction of Rendered UI Layers or Frames in GitLab</title>
    <updated>2026-10-03T04:56:15.964621+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Bitnami: gitlab</p>
<p>An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining full API access as the victim via the Device OAuth flow.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bit-gitlab-2024-7404"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2024-avi-0981</id>
    <title>certfr-2024-avi-0981 — De multiples vulnérabilités ont été découvertes dans GitLab. Certaines d'entre elles permettent à un attaquant de provo…</title>
    <updated>2026-10-03T04:56:15.964673+00:00</updated>
    <content>certfr-2024-avi-0981</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2024-avi-0981"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-201549</id>
    <title>EUVD-2026-201549</title>
    <updated>2026-10-03T04:56:15.964701+00:00</updated>
    <content>EUVD-2026-201549</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-201549"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2024-7404</id>
    <title>fkie_cve-2024-7404</title>
    <updated>2026-10-03T04:56:15.964719+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining full API access as the victim via the Device OAuth flow.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2024-7404"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-f7c4-9mmj-8w4v</id>
    <title>GHSA-f7c4-9mmj-8w4v</title>
    <updated>2026-10-03T04:56:15.964754+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining full API access as the victim via the Device OAuth flow.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-f7c4-9mmj-8w4v"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3453</id>
    <title>WID-SEC-W-2024-3453 — GitLab: Mehrere Schwachstellen</title>
    <updated>2026-10-03T04:56:15.964780+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu erzeugen oder einen Cross-Site-Scripting-Angriff durchzuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3453"/>
  </entry>
</feed>
