Skip to content
OpenAdvisories

Archive

13 August 2020

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Medium 6.4

    For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Serve…

  • Medium 6.5

    For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature

  • Medium 6.5

    For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email e…

  • Medium 4.3

    IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse directories on the system. An att…

  • Medium 5.2

    DLP for Mac - Unprotected Storage of Credentials

    Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the RiskDB username and password via unprotected log files containing plain text credentials.

  • Medium 5.2

    DLP for Mac - Unprotected Storage of Credentials

    Unprotected Storage of Credentials vulnerability in McAfee Data Loss Prevention (DLP) for Mac prior to 11.5.2 allows local users to gain access to the ADRMS username and password via unprotected log files containing plain text

  • Medium 6.7

    DLP ePO extension - Privilege escalation

    Privilege escalation vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials.

  • Medium 4.1

    DLP ePO extension - Cross-site scripting

    Cross Site scripting vulnerability in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated remote user to trigger scripts to run in a user's browser via adding a new label.

  • Medium 5.4

    DLP ePO extension - Unrestricted Upload of File with Dangerous Type

    Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking.