Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
CVE-2019-7176 vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2019-6787
An Incorrect Access Control issue exists in GitLab Community and Enterprise Edition prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. The GitLab API allowed project Maintainers and Owners to view the trigger tokens of other project users.
Gitlab Gitlab
6.1
CVSSv3
CVE-2019-6796
An issue exists in GitLab Community and Enterprise Edition prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. It allows XSS (issue 2 of 2). The user status field contains a lack of input validation and output encoding that results in a persistent XSS.
Gitlab Gitlab
6.5
CVSSv3
CVE-2019-7155
An issue exists in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. It has Incorrect Access Control. A user retains their role within a project in a private group after being removed from the group, i...
Gitlab Gitlab
6.5
CVSSv3
CVE-2019-6785
An issue exists in GitLab Community and Enterprise Edition prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. It allows Denial of Service. Inputting an overly long string into a Markdown field could cause a denial of service.
Gitlab Gitlab
4.3
CVSSv3
CVE-2019-6789
An issue exists in GitLab Community and Enterprise Edition prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. It allows Information Disclosure (issue 4 of 6). In some cases, users without project permissions will receive emails after a project move. For private ...
Gitlab Gitlab
4.3
CVSSv3
CVE-2019-6790
An Incorrect Access Control (issue 2 of 3) issue exists in GitLab Community and Enterprise Edition 8.14 and later but prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. Guest users were able to view the list of a group's merge requests.
Gitlab Gitlab
5.3
CVSSv3
CVE-2019-6792
An issue exists in GitLab Community and Enterprise Edition prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. It allows Path Disclosure. When an error is encountered on project import, the error message will display instance internal information.
Gitlab Gitlab
5.4
CVSSv3
CVE-2019-6795
An issue exists in GitLab Community and Enterprise Edition prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. It has Insufficient Visual Distinction of Homoglyphs Presented to a User. IDN homographs and RTLO characters are rendered to unicode, which could be use...
Gitlab Gitlab
6.5
CVSSv3
CVE-2019-6995
An issue exists in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. It has Incorrect Access Control. Users are able to comment on locked project issues.
Gitlab Gitlab
7.5
CVSSv3
CVE-2019-6788
An issue exists in GitLab Community and Enterprise Edition prior to 11.5.8, 11.6.x prior to 11.6.6, and 11.7.x prior to 11.7.1. It allows Information Disclosure (issue 3 of 6). For installations using GitHub or Bitbucket OAuth integrations, it is possible to use a covert redirect...
Gitlab Gitlab
2 Github repositories
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
XXE
CVE-2024-34490
SQL injection
CVE-2024-34488
CVE-2024-4507
CVE-2023-7028
CVE-2024-23187
TCP
CVE-2024-4439
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2