https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:58:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01630 bdu:2024-01630 https://cve.radiocsirt.org/vuln/bdu:2024-01630 https://cve.radiocsirt.org/vuln/bit-gitlab-2024-1451 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims.&#34;</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims.&#34;</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2024-1451 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0155 certfr-2024-avi-0155 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0155 https://cve.radiocsirt.org/vuln/euvd-2026-320186 EUVD-2026-320186 https://cve.radiocsirt.org/vuln/euvd-2026-320186 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1451 <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims.&#34;</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-1451 https://cve.radiocsirt.org/vuln/ghsa-xxcc-244v-rj6x <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims.&#34;</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-xxcc-244v-rj6x https://cve.radiocsirt.org/vuln/gsd-2024-1451 gsd-2024-1451 https://cve.radiocsirt.org/vuln/gsd-2024-1451 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1451 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims.&#34;</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims.&#34;</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1451 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0460 <p>Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, seine Privilegien zu erweitern oder einen Cross-Site-Scripting (XSS)-Angriff durchzuführen.</p> <p>Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, seine Privilegien zu erweitern oder einen Cross-Site-Scripting (XSS)-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0460