Skip to content

CVEs

Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.

CVEs: GitLab · SQL Injection
CVEVendor · productExploitationCVSSEPSSPublished
CVE-2017-0914Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the MilestoneFinder component resulting in disclosure of all data in a…GitLab · GitLab Community and Enterprise EditionsPossible–1.4%2018-03-21

Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-14.