10 March 2020

144 results · Feed

• Unscored —
  CVE-2019-12445

  An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious user could execute Ja…

  gitlab Ubuntu
  Mar 10, 2020
• Unscored —
  CVE-2019-12444

  An issue was discovered in GitLab Community and Enterprise Edition 8.9 through 11.11. Wiki Pages contained a lack of in…

  Mar 10, 2020
• Unscored —
  CVE-2019-12443

  An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple features contained Serv…

  Mar 10, 2020
• Unscored —
  CVE-2019-12442

  An issue was discovered in GitLab Enterprise Edition 11.7 through 11.11. The epic details page contained a lack of inpu…

  Mar 10, 2020
• Unscored —
  CVE-2019-12441

  An issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. The protected branches feature co…

  gitlab Ubuntu
  Mar 10, 2020
• High 8.1
  CVE-2019-17636

  Insufficient Verification of Data Authenticity in Eclipse Theia

  In Eclipse Theia versions 0.3.9 through 0.15.0, one of the default pre-packaged Theia extensions is "Mini-Browser", published as "@theia/mini-browser" on npmjs.com. This extension, for its own needs, exposes a HTTP endpoint that allows to read the content of …

  The Eclipse Foundation Eclipse Theia @theia/mini-browser npm
  Mar 10, 2020
• Unscored —
  CVE-2019-12434

  An issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users could guess the URL slug o…

  Mar 10, 2020
• Unscored —
  CVE-2019-12433

  An issue was discovered in GitLab Community and Enterprise Edition 11.7 through 11.11. It has Improper Input Validation…

  Mar 10, 2020
• Unscored —
  CVE-2019-12432

  An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Non-member users who subscribed …

  Mar 10, 2020
• Unscored —
  CVE-2019-12431

  An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Restricted users could access th…

  Mar 10, 2020
• Unscored —
  CVE-2019-12430

  An issue was discovered in GitLab Community and Enterprise Edition 11.11. A specially crafted payload would allow an au…

  Mar 10, 2020
• Unscored —
  CVE-2019-12429

  An issue was discovered in GitLab Community and Enterprise Edition 11.9 through 11.11. Unprivileged users were able to …

  Mar 10, 2020
• Unscored —
  CVE-2019-12428

  An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory …

  gitlab Ubuntu
  Mar 10, 2020
• Unscored —
  CVE-2019-11345

  Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow XSS.

  Mar 10, 2020
• Unscored —
  CVE-2017-10992 EPSS 10%

  In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS co…

  Mar 10, 2020
• Unscored —
  CVE-2018-18894

  Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the…

  Mar 10, 2020
• Unscored —
  CVE-2018-14502

  controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated user…

  Mar 10, 2020
• Unscored —
  CVE-2019-10706

  Western Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update authentication method relies o…

  Mar 10, 2020
• Unscored —
  CVE-2019-10065

  An issue was discovered in Open Ticket Request System (OTRS) 7.0 through 7.0.6. An attacker who is logged into OTRS as …

  otrs2 Ubuntu
  Mar 10, 2020
• Unscored —
  CVE-2019-11686

  Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the driv…

  Mar 10, 2020
• Unscored —
  CVE-2019-9859

  Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can resul…

  Mar 10, 2020
• Medium 5.4
  CVE-2020-4162

  IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users …

  IBM InfoSphere Information Server
  Mar 10, 2020
• Medium 5.4
  CVE-2019-4608

  IBM Tivoli Workload Scheduler 9.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…

  IBM Workload Scheduler
  Mar 10, 2020
• Unscored —
  CVE-2020-10251

  In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c…

  imagemagick imagemagick Debian Alpine
  Mar 10, 2020