5 February 2020

66 results · Feed

• Unscored —
  CVE-2020-7968

  GitLab EE 8.0 through 12.7.2 has Incorrect Access Control.

  Feb 5, 2020
• Unscored —
  CVE-2020-7969

  GitLab EE 8.0 and later through 12.7.2 allows Information Disclosure.

  Feb 5, 2020
• Unscored —
  CVE-2020-7971

  GitLab EE 11.0 and later through 12.7.2 allows XSS.

  Feb 5, 2020
• Unscored —
  CVE-2020-7972

  GitLab EE 12.2 has Insecure Permissions (issue 2 of 2).

  Feb 5, 2020
• Unscored —
  CVE-2020-7973

  GitLab through 12.7.2 allows XSS.

  Feb 5, 2020
• Unscored —
  CVE-2020-7974

  GitLab EE 10.1 through 12.7.2 allows Information Disclosure.

  Feb 5, 2020
• Critical 9.8
  CVE-2020-6174

  Incorrect threshold signature computation in TUF

  TUF (aka The Update Framework) through 0.12.1 has Improper Verification of a Cryptographic Signature.

  tuf PyPI
  Feb 5, 2020
• Unscored —
  CVE-2020-7976

  GitLab EE 12.4 and later through 12.7.2 has Incorrect Access Control.

  Feb 5, 2020
• Unscored —
  CVE-2013-0507

  IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability

  IBM IBM InfoSphere Information Server
  Feb 5, 2020
• Unscored —
  CVE-2020-7977

  GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions.

  Feb 5, 2020
• Unscored —
  CVE-2020-7978

  GitLab EE 12.6 and later through 12.7.2 allows Denial of Service.

  Feb 5, 2020
• Medium 6.5
  CVE-2019-4670

  IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information c…

  IBM WebSphere Application Server
  Feb 5, 2020
• Medium 4.3
  CVE-2019-4616

  IBM Cloud Automation Manager 3.2.1.0 does not set the secure attribute on authorization tokens or session cookies. Atta…

  IBM Cloud Automation Manager
  Feb 5, 2020
• Medium 4.3
  CVE-2019-4613

  IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio…

  IBM Planning Analytics
  Feb 5, 2020
• Unscored —
  CVE-2020-8506

  The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics.

  Feb 5, 2020
• Unscored —
  CVE-2019-16204

  Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets…

  Brocade Brocade Fabric OS
  Feb 5, 2020
• Unscored —
  CVE-2019-16203

  Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could expose the credentials of the remote ESRS server when these…

  Brocade Brocade Fabric OS
  Feb 5, 2020
• Unscored —
  CVE-2020-8507

  The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics.

  Feb 5, 2020
• Unscored —
  CVE-2020-6969

  It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an…

  Feb 5, 2020
• Unscored —
  CVE-2020-7979

  GitLab EE 8.9 and later through 12.7.2 has Insecure Permission

  Feb 5, 2020
• Unscored —
  CVE-2020-8114

  GitLab EE 8.9 and later through 12.7.2 has Insecure Permission

  Feb 5, 2020
• Unscored —
  CVE-2020-7216

  An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial…

  Feb 5, 2020
• High 7.7
  CVE-2020-5208

  remote code execution vulnerability in ipmitool

  It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may lead to buffer overflows and potentially to remote code execution on the ipmitool side. This is especially danger…

  ipmitool ipmitool ipmitool ipmitool Debian Ubuntu Azure Linux Alpine
  Feb 5, 2020
• High 8.8
  CVE-2020-5237

  Relative Path Traversal in oneup/uploader-bundle

  Multiple relative path traversal vulnerabilities in the oneup/uploader-bundle before 1.9.3 and 2.1.5 allow remote attackers to upload, copy, and modify files on the filesystem (potentially leading to arbitrary code execution) via the (1) filename parameter to…

  1up-lab oneup/uploader-bundle oneup/uploader-bundle Packagist
  Feb 5, 2020
• Unscored —
  CVE-2020-8632

  In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value,…

  cloud-init cloud-init Debian Ubuntu
  Feb 5, 2020
• Unscored —
  CVE-2020-8631

  cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predic…

  cloud-init cloud-init Debian Ubuntu
  Feb 5, 2020