Archive
29 September 2020
Vulnerabilities first published on this day (UTC), newest first.
14 results · Clear filters · Feed
-
Medium 4.3
Authenticated users can exploit an enumeration vulnerability in Harbor
Harbor 1.9.* 1.10.* and 2.0.* allows Exposure of Sensitive Information to an Unauthorized Actor.
-
Medium 4.3
A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github pr…
-
Medium 6.5
A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a use…
-
Medium 5.4
An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by i…
-
Medium 4.4
An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS in i…
-
Medium 6.5
An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab was vulnerable to a sto…
-
Medium 4.8
An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable t…
-
Medium 6.5
An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions t…
-
Medium 5.3
Signature Validation Bypass in goxmldsig
In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxml…
-
Medium 4.3
An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission chec…
-
Medium 6.5
An issue has been discovered in GitLab affecting versions >=10.7 <13.0.14, >=13.1.0 <13.1.8, >=13.2.0 <13.2.6. Improper…
-
Medium 4.3
An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration f…
-
Medium 4.3
An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element Configuration feature (to…
-
Medium 6.5
CRLF injection in urllib3
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.