Skip to content
OpenAdvisories

Archive

14 September 2020

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.2

    A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Conan package upload functionality…

  • High 8.1

    A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The revocation feature was not rev…

  • High 8.0

    GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in…

  • High 7.5
    CVE-2019-0233 EPSS 66%

    Improper Preservation of Permissions in Apache Struts

    An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file upload.

  • High 7.5
    CVE-2020-25540 Public exploit Scanner template EPSS 75%

    ThinkAdmin directory traversal vulnerability

    ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.