Archive
10 August 2020
Vulnerabilities first published on this day (UTC), newest first.
10 results · Clear filters · Feed
-
Medium 5.4
For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is su…
-
Medium 4.2
In GitLab before 13.0.12, 13.1.6 and 13.2.3, access grants were not revoked when a user revoked access to an applicatio…
-
Medium 6.3
In GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override an existing hash.
-
Medium 6.7
An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A spe…
-
Medium 6.4
An SQL injection vulnerability exists in the frappe.desk.reportview.get functionality of ERPNext 11.1.38. A specially c…
-
Medium 6.1
IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embe…
-
Medium 6.1
IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerabil…
-
Medium 6.1
IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows use…
-
Medium 5.7
Combodo iTop - CSRF
Combodo iTop contains a cross-site request forgery (CSRF) vulnerability, attackers can execute specific commands via malicious site request forgery.
-
Medium 6.8
Combodo iTop - Stored XSS
Combodo iTop contains a stored Cross-site Scripting vulnerability, which can be attacked by uploading file with malicious script.