https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:13:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-05258 bdu:2024-05258 https://cve.radiocsirt.org/vuln/bdu:2024-05258 https://cve.radiocsirt.org/vuln/bit-gitlab-2024-2191 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2024-2191 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0521 certfr-2024-avi-0521 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0521 https://cve.radiocsirt.org/vuln/euvd-2026-186066 EUVD-2026-186066 https://cve.radiocsirt.org/vuln/euvd-2026-186066 https://cve.radiocsirt.org/vuln/fkie_cve-2024-2191 <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only.</p> <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-2191 https://cve.radiocsirt.org/vuln/ghsa-fjc3-h6x3-cpx9 <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only.</p> <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only.</p> https://cve.radiocsirt.org/vuln/ghsa-fjc3-h6x3-cpx9 https://cve.radiocsirt.org/vuln/gsd-2024-2191 gsd-2024-2191 https://cve.radiocsirt.org/vuln/gsd-2024-2191 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-2191 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: gitlab</p> <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows merge request title to be visible publicly despite being set as project members only.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-2191 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1468 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern oder einen Cross-Site-Scripting (XSS)-Angriff durchzuführen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren, seine Privilegien zu erweitern oder einen Cross-Site-Scripting (XSS)-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1468