| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-28439 | 7.5 | This affects all versions of package corenlp-js-prefab. The injection point is located in line 10 in 'index.js.' It depends on a vulnerable package 'corenlp-js-interface.' Vulnerability can be exploited with the following PoC: | 2021-07-21 11:39:00 | 2020-12-11 17:15:00 |
| CVE-2020-4633 | 9.0 | IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation. | 2021-07-21 11:39:00 | 2020-12-11 15:15:00 |
| CVE-2020-26416 | 2.1 | Information disclosure in Advanced Search component of GitLab EE starting from 8.4 results in exposure of search terms via Rails logs. This affects versions >=8.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2. | 2021-07-21 11:39:00 | 2020-12-11 04:15:00 |
| CVE-2020-26415 | 4.0 | Information about the starred projects for private user profiles was exposed via the GraphQL API starting from 12.2 via the REST API. This affects GitLab >=12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2. | 2021-07-21 11:39:00 | 2020-12-11 04:15:00 |
| CVE-2020-26412 | 4.0 | Removed group members were able to use the To-Do functionality to retrieve updated information on confidential epics starting in GitLab EE 13.2 before 13.6.2. | 2021-07-21 11:39:00 | 2020-12-11 04:15:00 |
| CVE-2020-26408 | 5.0 | A limited information disclosure vulnerability exists in Gitlab CE/EE from >= 12.2 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2 that allows an attacker to view limited information in user's private profile | 2021-07-21 11:39:00 | 2020-12-11 04:15:00 |
| CVE-2020-26409 | 4.0 | A DOS vulnerability exists in Gitlab CE/EE >=10.3, <13.4.7,>=13.5, <13.5.5,>=13.6, <13.6.2 that allows an attacker to trigger uncontrolled resource by bypassing input validation in markdown fields. | 2021-07-21 11:39:00 | 2020-12-11 02:15:00 |
| CVE-2020-29311 | 10.0 | Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by another part of the software. | 2021-07-21 11:39:00 | 2020-12-10 23:15:00 |
| CVE-2020-25967 | 6.5 | The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability. | 2021-07-21 11:39:00 | 2020-12-10 23:15:00 |
| CVE-2020-12594 | 9.0 | A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4. | 2021-07-21 11:39:00 | 2020-12-10 06:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: