| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-0045 | 6.9 | In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Produ | 2021-07-21 11:39:00 | 2020-03-10 21:15:00 |
| CVE-2020-0061 | 4.9 | In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product | 2021-07-21 11:39:00 | 2020-03-10 20:15:00 |
| CVE-2020-0036 | 7.2 | In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne | 2021-07-21 11:39:00 | 2020-03-10 20:15:00 |
| CVE-2020-0035 | 4.9 | In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for expl | 2021-07-21 11:39:00 | 2020-03-10 20:15:00 |
| CVE-2020-0033 | 7.2 | In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitati | 2021-07-21 11:39:00 | 2020-03-10 20:15:00 |
| CVE-2019-13006 | 4.0 | An issue was discovered in GitLab Community and Enterprise Edition 9.0 and through 12.0.2. Users with access to issues, but not the repository were able to view the number of related merge requests on an issue. It has Incorrect Access Control. | 2021-07-21 11:39:00 | 2020-03-10 17:15:00 |
| CVE-2019-13002 | 4.0 | An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. Unauthorized users were able to read pipeline information of the last merge request. It has Incorrect Access Control. | 2021-07-21 11:39:00 | 2020-03-10 15:15:00 |
| CVE-2019-12430 | 6.5 | An issue was discovered in GitLab Community and Enterprise Edition 11.11. A specially crafted payload would allow an authenticated malicious user to execute commands remotely through the repository download feature. It allows Command Injection. | 2021-07-21 11:39:00 | 2020-03-10 14:15:00 |
| CVE-2019-12429 | 4.0 | An issue was discovered in GitLab Community and Enterprise Edition 11.9 through 11.11. Unprivileged users were able to access labels, status and merge request counts of confidential issues via the milestone details page. It has Improper Access Contro | 2021-07-21 11:39:00 | 2020-03-10 14:15:00 |
| CVE-2020-10257 | 7.5 | The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_ | 2021-07-21 11:39:00 | 2020-03-10 00:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: