Denial of Service

Every one of the 188 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Allocation of Resources Without Limits or Throttling in GitLabCVE-2023-0921GitLab · CVSS 4.3 · 84% likely

   CWE-770

2. Inefficient Regular Expression Complexity in GitLabCVE-2023-3364GitLab · CVSS 7.5 · 44% likely

   CWE-1333

3. Inefficient Regular Expression Complexity in GitLabCVE-2024-8124GitLab · CVSS 7.5 · 40% likely

   CWE-1333

4. Inefficient Regular Expression Complexity in GitLabCVE-2024-2651GitLab · CVSS 6.5 · 33% likely

   CWE-1333

5. Allocation of Resources Without Limits or Throttling in GitLabCVE-2024-2454GitLab · CVSS 6.5 · 33% likely

   CWE-770

6. Inefficient Regular Expression Complexity in GitLabCVE-2024-2829GitLab · CVSS 7.5 · 26% likely

   CWE-1333

7. Allocation of Resources Without Limits or Throttling in GitLabCVE-2024-2878GitLab · CVSS 7.5 · 23% likely

   CWE-770

8. A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a link from a release had a regex check which caused exponential…CVE-2020-13333GitLab · CVSS 4.3 · 2.1% likely

   CWE-400

9. An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 bef…CVE-2022-1510GitLab · CVSS 6.5 · 2.0% likely

   CWE-1333

10. An authorization issue was discovered in Gitlab versions < 12.1.2, < 12.0.4, and < 11.11.6 that prevented owners and maintainer to delete epic comments.CVE-2019-5472GitLab · 1.9% likely

    CWE-400

11. A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab Webhook feature could be abused to perform denial of service attacks due to the lack of…CVE-2020-13306GitLab · CVSS 3.7 · 1.8% likely

    CWE-770

12. A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from…CVE-2022-3283GitLab · CVSS 7.5 · 1.7% likely

    CWE-400

13. An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefixCVE-2023-2232GitLab · CVSS 6.5 · 1.6% likely

    CWE-1333

14. An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.…CVE-2021-39940GitLab · CVSS 4.3 · 1.6% likely

    CWE-1333

15. A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 b…CVE-2022-2931GitLab · CVSS 7.5 · 1.6% likely

    CWE-400

16. A potential DoS vulnerability was discovered in GitLab CE/EE starting with version 13.7. Using a malformed TIFF images was possible to trigger memory exhaustion.CVE-2021-39912GitLab · CVSS 5.3 · 1.5% likely

    CWE-770

17. A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 13.7. The stripping of EXIF data from certain images resulted in high CPU usage.CVE-2021-39907GitLab · CVSS 5.3 · 1.5% likely

    CWE-770

18. An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issu…CVE-2022-0489GitLab · CVSS 3.5 · 1.5% likely

    CWE-400

19. A business logic issue in the handling of large repositories in all versions of GitLab CE/EE from 10.0 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions s…CVE-2022-2455GitLab · CVSS 6.5 · 1.5% likely

    CWE-400

20. An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14…CVE-2021-39933GitLab · CVSS 4.3 · 1.5% likely

    CWE-1333

21. A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting fro…CVE-2021-39942GitLab · CVSS 4.3 · 1.5% likely

    CWE-400

22. A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name check could cause exponential number of backtracks for certain…CVE-2020-13354GitLab · CVSS 4.3 · 1.4% likely

    CWE-400

23. An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed methodCVE-2021-22166GitLab · CVSS 5.3 · 1.4% likely

    CWE-400

24. A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6. GitLab Webhook feature could be abused to perform denial of service attacks.CVE-2021-22246GitLab · CVSS 7.7 · 1.3% likely

    CWE-770

25. Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API.CVE-2020-13346GitLab · CVSS 6.5 · 1.3% likely

    CWE-459

26. For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import featureCVE-2020-13281GitLab · CVSS 6.5 · 1.3% likely

    CWE-400

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.