|
210611
|
8.8 |
HIGH
Network
|
fasterxml debian netapp oracle
|
jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier weblogic_server retail_merchandising_system agile_plm bankin…
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, a…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2020-11111
|
2024-11-21 13:56 |
2020-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210612
|
6.1 |
MEDIUM
Network
|
tecrail
|
responsive_filemanager
|
An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $_SESSION['RF']["view_type"] wasn't sanitized if it was already set. This made stored XS…
|
CWE-79
Cross-site Scripting
|
CVE-2020-11106
|
2024-11-21 13:56 |
2020-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210613
|
9.8 |
CRITICAL
Network
|
usc
|
cereal
|
An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::share…
|
CWE-763
Release of Invalid Pointer or Reference
|
CVE-2020-11105
|
2024-11-21 13:56 |
2020-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210614
|
5.3 |
MEDIUM
Network
|
usc
|
cereal
|
An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or he…
|
CWE-908
Use of Uninitialized Resource
|
CVE-2020-11104
|
2024-11-21 13:56 |
2020-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210615
|
7.8 |
HIGH
Local
|
phoenixcontact
|
portico_server_4_client portico_server_16_client portico_server_1_client
|
Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.
|
CWE-269
Improper Privilege Management
|
CVE-2020-10940
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210616
|
7.8 |
HIGH
Local
|
phoenixcontact
|
pc_worx_srt
|
Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-10939
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210617
|
9.8 |
CRITICAL
Network
|
gitlab
|
gitlab
|
GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-10956
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210618
|
6.5 |
MEDIUM
Network
|
gitlab debian
|
gitlab debian_linux
|
GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders.
|
CWE-862
Missing Authorization
|
CVE-2020-10955
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210619
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
GitLab through 12.9 is affected by a potential DoS in repository archive download.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-10954
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210620
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.
|
CWE-22
Path Traversal
|
CVE-2020-10953
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|