|
212741
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 13.0.1
|
CWE-862
Missing Authorization
|
CVE-2020-13276
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212742
|
8.1 |
HIGH
Network
|
gitlab
|
gitlab
|
A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1
|
NVD-CWE-noinfo
|
CVE-2020-13275
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212743
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLab versions through 13.0.1
|
NVD-CWE-noinfo
|
CVE-2020-13274
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212744
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
A Denial of Service vulnerability allowed exhausting the system resources in GitLab CE/EE 12.0 and later through 13.0.1
|
NVD-CWE-noinfo
|
CVE-2020-13273
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212745
|
8.8 |
HIGH
Network
|
gitlab
|
gitlab
|
OAuth flow missing verification checks CE/EE 12.3 and later through 13.0.1 allows unverified user to use OAuth authorization code flow
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2020-13272
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212746
|
5.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
User email verification bypass in GitLab CE/EE 12.5 and later through 13.0.1 allows user to bypass email verification
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2020-13265
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212747
|
6.1 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Client-Side code injection through Mermaid markup in GitLab CE/EE 12.9 and later through 13.0.1 allows a specially crafted Mermaid payload to PUT requests on behalf of other users via clicking on a l…
|
CWE-74
Injection
|
CVE-2020-13262
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212748
|
6.5 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5
|
CWE-863
Incorrect Authorization
|
CVE-2020-13277
|
2024-11-21 14:00 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212749
|
7.5 |
HIGH
Network
|
arm
|
mbed-coap
|
Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sn_co…
|
CWE-190 CWE-401
Integer Overflow or Wraparound Missing Release of Memory after Effective Lifetime
|
CVE-2020-12887
|
2024-11-21 14:00 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212750
|
9.1 |
CRITICAL
Network
|
arm
|
mbed_os
|
A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses the C…
|
CWE-125
Out-of-bounds Read
|
CVE-2020-12886
|
2024-11-21 14:00 |
2020-06-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|