Security Vulnerabilities
IBM Aspera 5.0.0 through 5.0.13.1
could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.
CVSS Score
4.3
EPSS Score
0.0
Published
2025-10-09
IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted.
CVSS Score
5.3
EPSS Score
0.0
Published
2025-10-09
GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.
CVSS Score
7.7
EPSS Score
0.0
Published
2025-10-09
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, and 18.4 prior to 18.4.2 that could have allowed an authenticated attacker to create a denial of service condition by configuring malicious webhook endpoints that send crafted HTTP responses.
CVSS Score
4.3
EPSS Score
0.001
Published
2025-10-09
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could make the GitLab instance unresponsive or severely degraded by sending crafted GraphQL queries requesting large repository blobs.
CVSS Score
7.5
EPSS Score
0.0
Published
2025-10-09
Transient DOS may occur when multi-profile concurrency arises with QHS enabled.
CVSS Score
7.1
EPSS Score
0.0
Published
2025-10-09
Memory corruption while processing control commands in the virtual memory management interface.
CVSS Score
7.8
EPSS Score
0.0
Published
2025-10-09
Memory corruption while performing SCM call.
CVSS Score
8.8
EPSS Score
0.0
Published
2025-10-09
Memory corruption while performing SCM call with malformed inputs.
CVSS Score
8.8
EPSS Score
0.0
Published
2025-10-09
Information disclosure may occur while processing the hypervisor log.
CVSS Score
6.5
EPSS Score
0.0
Published
2025-10-09