https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:34:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10987 bdu:2025-10987 https://cve.radiocsirt.org/vuln/bdu:2025-10987 https://cve.radiocsirt.org/vuln/bit-gitlab-2024-10219 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2024-10219 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0690 certfr-2025-avi-0690 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0690 https://cve.radiocsirt.org/vuln/euvd-2026-249686 EUVD-2026-249686 https://cve.radiocsirt.org/vuln/euvd-2026-249686 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10219 <p>An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints.</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10219 https://cve.radiocsirt.org/vuln/ghsa-rwwp-3rv3-j6q6 <p>An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints.</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints.</p> https://cve.radiocsirt.org/vuln/ghsa-rwwp-3rv3-j6q6 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-10219 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-10219 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1816 <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Benutzerkonten zu übernehmen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Benutzerkonten zu übernehmen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1816