Gitlab
1,309 tracked vulnerabilities.
CVE-2024-8631
MEDIUM
GitLab EE - Privilege Escalation
Sep 12, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-8124
HIGH
GitLab CE/EE <17.1.7-17.3.2 - DoS
Sep 12, 2024
CVSS 7.5
EPSS 0.05
CVE-2024-6446
LOW
GitLab <17.1.7-17.2.5-17.3.2 - CSRF
Sep 12, 2024
CVSS 3.5
EPSS 0.00
CVE-2024-6389
MEDIUM
GitLab-CE/EE <17.1.7, <17.2.5, <17.3.2 - Info Disclosure
Sep 12, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-5435
MEDIUM
Gitlab < 17.1.7 - Error Information Exposure
Sep 12, 2024
CVSS 4.5
EPSS 0.00
CVE-2024-4660
MEDIUM
Gitlab < 17.1.7 - Missing Authorization
Sep 12, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-4612
MEDIUM
Gitlab < 17.1.7 - Open Redirect
Sep 12, 2024
CVSS 6.4
EPSS 0.00
CVE-2024-2743
MEDIUM
Gitlab < 17.1.7 - Incorrect Authorization
Sep 12, 2024
CVSS 5.3
EPSS 0.00
CVE-2024-45409
CRITICALNUCLEI
Ruby-SAML <=1.16.0 - Auth Bypass
Sep 10, 2024
CVSS 10.0
EPSS 0.41
CVE-2024-8041
MEDIUM
GitLab CE/EE <17.1.6-17.3.1 - DoS
Aug 22, 2024
CVSS 6.5
EPSS 0.01
CVE-2024-7110
MEDIUM
Gitlab < 17.1.6 - Command Injection
Aug 22, 2024
CVSS 6.4
EPSS 0.00
CVE-2024-6502
MEDIUM
GitLab CE/EE <17.1.6-17.2.4-17.3.1 - Info Disclosure
Aug 22, 2024
CVSS 5.7
EPSS 0.00
CVE-2024-3127
MEDIUM
GitLab EE <17.1.6-17.2.4-17.3.1 - Auth Bypass
Aug 22, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-7610
MEDIUM
Gitlab < 17.0.6 - Denial of Service
Aug 08, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-7554
MEDIUM
Gitlab < 17.0.6 - Information Disclosure
Aug 08, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-5423
MEDIUM
Gitlab < 17.0.6 - Denial of Service
Aug 08, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-4207
MEDIUM
GitLab <17.0.6-17.1.4-17.2.2 - XSS
Aug 08, 2024
CVSS 4.4
EPSS 0.01
CVE-2024-3958
MEDIUM
Gitlab < 17.0.6 - Code Injection
Aug 08, 2024
CVSS 5.3
EPSS 0.00
CVE-2024-3114
MEDIUM
GitLab CE/EE <17.0.6-17.2.2 - DoS
Aug 08, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-3035
MEDIUM
Gitlab < 17.0.6 - IDOR
Aug 08, 2024
CVSS 6.8
EPSS 0.00
CVE-2024-2800
MEDIUM
Gitlab < 17.0.6 - Denial of Service
Aug 08, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-6329
MEDIUM
GitLab CE/EE <17.0.6-17.2.2 - Info Disclosure
Aug 08, 2024
CVSS 5.7
EPSS 0.00
CVE-2024-4784
MEDIUM
GitLab EE <17.0.6-17.2.2 - Auth Bypass
Aug 08, 2024
CVSS 4.2
EPSS 0.00
CVE-2024-4210
MEDIUM
GitLab CE/EE <17.0.6-17.2.2 - DoS
Aug 08, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-7057
MEDIUM
Gitlab < 17.0.5 - Improper Access Control
Jul 25, 2024
CVSS 4.3
EPSS 0.00