|
209901
|
7.5 |
HIGH
Network
|
pexip
|
pexip_infinity
|
Pexip Infinity before 23.4 has a lack of input validation, leading to temporary denial of service via H.323.
|
CWE-20
Improper Input Validation
|
CVE-2020-13387
|
2024-11-21 14:01 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209902
|
9.8 |
CRITICAL
Network
|
aveva
|
edna_enterprise_data_historian
|
Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An attacker …
|
CWE-89
SQL Injection
|
CVE-2020-13505
|
2024-11-21 14:01 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209903
|
9.8 |
CRITICAL
Network
|
aveva
|
edna_enterprise_data_historian
|
Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can cause SQL injections resulting in data compromise. An at…
|
CWE-89
SQL Injection
|
CVE-2020-13504
|
2024-11-21 14:01 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209904
|
9.8 |
CRITICAL
Network
|
aveva
|
edna_enterprise_data_historian
|
An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections…
|
CWE-89
SQL Injection
|
CVE-2020-13501
|
2024-11-21 14:01 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209905
|
9.8 |
CRITICAL
Network
|
aveva
|
edna_enterprise_data_historian
|
SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections re…
|
CWE-89
SQL Injection
|
CVE-2020-13500
|
2024-11-21 14:01 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209906
|
9.8 |
CRITICAL
Network
|
aveva
|
edna_enterprise_data_historian
|
An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Specially crafted SOAP web requests can cause SQL injections…
|
CWE-89
SQL Injection
|
CVE-2020-13499
|
2024-11-21 14:01 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209907
|
2.7 |
LOW
Network
|
gitlab
|
gitlab
|
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by being invited into a p…
|
CWE-281
Improper Preservation of Permissions
|
CVE-2020-13308
|
2024-11-21 14:01 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209908
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The profile activity page was not restricting the amount of results one could request, potentially resulting in a …
|
NVD-CWE-noinfo
|
CVE-2020-13315
|
2024-11-21 14:01 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209909
|
6.5 |
MEDIUM
Network
|
gitlab
|
gitlab
|
A vulnerability was discovered in GitLab runner versions before 13.1.3, 13.2.3 and 13.3.1. It was possible to make the gitlab-runner process crash by sending malformed queries, resulting in a denial …
|
NVD-CWE-noinfo
|
CVE-2020-13310
|
2024-11-21 14:01 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209910
|
8.8 |
HIGH
Network
|
gitlab
|
gitlab
|
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SSRF attack through the repository mirroring feature.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-13309
|
2024-11-21 14:01 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|