|
210851
|
9.8 |
CRITICAL
Network
|
openfind
|
mailgates mailaudit
|
Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files.
|
CWE-77
Command Injection
|
CVE-2020-12782
|
2024-11-21 14:00 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210852
|
9.8 |
CRITICAL
Network
|
articatech
|
artica_proxy
|
Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818.
|
CWE-78
OS Command
|
CVE-2020-13159
|
2024-11-21 14:00 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210853
|
7.5 |
HIGH
Network
|
articatech
|
artica_proxy
|
Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.
|
CWE-22
Path Traversal
|
CVE-2020-13158
|
2024-11-21 14:00 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210854
|
8.6 |
HIGH
Local
|
gitlab
|
gitlab-vscode-extension
|
Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2020-13279
|
2024-11-21 14:00 |
2020-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210855
|
5.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token
|
CWE-200
Information Exposure
|
CVE-2020-13264
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210856
|
8.8 |
HIGH
Network
|
gitlab
|
gitlab
|
An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perf…
|
CWE-863
Incorrect Authorization
|
CVE-2020-13263
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210857
|
2.7 |
LOW
Network
|
gitlab
|
gitlab
|
Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code
|
CWE-200
Information Exposure
|
CVE-2020-13261
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210858
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 13.0.1
|
CWE-862
Missing Authorization
|
CVE-2020-13276
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210859
|
8.1 |
HIGH
Network
|
gitlab
|
gitlab
|
A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1
|
NVD-CWE-noinfo
|
CVE-2020-13275
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210860
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLab versions through 13.0.1
|
NVD-CWE-noinfo
|
CVE-2020-13274
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|