Skip to content
OpenAdvisories

Archive

10 August 2020

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Medium 5.4

    For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is su…

  • Medium 4.2

    In GitLab before 13.0.12, 13.1.6 and 13.2.3, access grants were not revoked when a user revoked access to an applicatio…

  • Medium 6.3

    In GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override an existing hash.

  • Medium 6.7

    An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A spe…

  • Medium 6.4

    An SQL injection vulnerability exists in the frappe.desk.reportview.get functionality of ERPNext 11.1.38. A specially c…

  • Medium 6.1

    IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embe…

  • Medium 6.1

    IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerabil…

  • Medium 6.1

    IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows use…

  • Medium 5.7

    Combodo iTop - CSRF

    Combodo iTop contains a cross-site request forgery (CSRF) vulnerability, attackers can execute specific commands via malicious site request forgery.

  • Medium 6.8

    Combodo iTop - Stored XSS

    Combodo iTop contains a stored Cross-site Scripting vulnerability, which can be attacked by uploading file with malicious script.