Skip to content
OpenAdvisories

Archive

29 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /29 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

49 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-3115

    Incorrect User Management in GitLab

    An issue has been discovered in GitLab EE affecting all versions affecting all versions from 11.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Single Sign On restrictions were not correctly enforced for indirect project members accessing …

    GitLab GitLab Web / CMS
  • Medium 4.3
    CVE-2023-3920

    Incorrect Authorization in GitLab

    An issue has been discovered in GitLab affecting all versions starting from 11.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. It was possible that a maintainer to create a fork relationship betwe…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.3
    CVE-2023-3917

    Improper Validation of Specified Type of Input in GitLab

    Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to cause pipelines to fail.

    GitLab GitLab gitlab gitlab-agent Web / CMS Ubuntu
  • Medium 5.4
    CVE-2023-3914

    Incorrect User Management in GitLab

    A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects.

    GitLab GitLab Web / CMS
  • Medium 4.3
    CVE-2023-4532

    Incorrect Authorization in GitLab

    An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions starting from 16.4 before 16.4.1. Users were capable of linking CI/CD jobs of private projects which th…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.3
    CVE-2023-26147

    All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used t…

  • Medium 5.4
    CVE-2023-26148

    All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set req…

  • Medium 6.1
    CVE-2023-26146

    All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a nam…

  • Medium 5.3
    CVE-2023-44270

    PostCSS line return parsing error

    An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by Po…

    node-postcss node-postcss postcss Debian Ubuntu npm