https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:09:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-10299 bdu:2024-10299 https://cve.radiocsirt.org/vuln/bdu:2024-10299 https://cve.radiocsirt.org/vuln/bit-gitlab-2024-7404 <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining full API access as the victim via the Device OAuth flow.</p> <p><strong>Affected:</strong> Bitnami: gitlab</p> <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining full API access as the victim via the Device OAuth flow.</p> https://cve.radiocsirt.org/vuln/bit-gitlab-2024-7404 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0981 certfr-2024-avi-0981 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0981 https://cve.radiocsirt.org/vuln/euvd-2026-201549 EUVD-2026-201549 https://cve.radiocsirt.org/vuln/euvd-2026-201549 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7404 <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining full API access as the victim via the Device OAuth flow.</p> <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining full API access as the victim via the Device OAuth flow.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-7404 https://cve.radiocsirt.org/vuln/ghsa-f7c4-9mmj-8w4v <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining full API access as the victim via the Device OAuth flow.</p> <p>An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 prior to 17.4.4 and starting from 17.5 prior to 17.5.2, which could have allowed an attacker gaining full API access as the victim via the Device OAuth flow.</p> https://cve.radiocsirt.org/vuln/ghsa-f7c4-9mmj-8w4v https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3453 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu erzeugen oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in GitLab ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu erzeugen oder einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3453