|
223951
|
5.9 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Enterprise Edition 8.3 through 12.0.2. The color codes decoder was vulnerable to a resource depletion attack if specific formats were used. It allows Uncontrolled Re…
|
NVD-CWE-noinfo
|
CVE-2019-13010
|
2024-11-21 13:24 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223952
|
6.5 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Community and Enterprise Edition 9.2 through 12.0.2. Uploaded files associated with unsaved personal snippets were accessible to unauthorized users due to improper p…
|
CWE-400 CWE-732
Uncontrolled Resource Consumption Incorrect Permission Assignment for Critical Resource
|
CVE-2019-13009
|
2024-11-21 13:24 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223953
|
4.9 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Community and Enterprise Edition 11.11 through 12.0.2. When an admin enabled one of the service templates, it was triggering an action that leads to resource depleti…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2019-13007
|
2024-11-21 13:24 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223954
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Community and Enterprise Edition 9.0 and through 12.0.2. Users with access to issues, but not the repository were able to view the number of related merge requests o…
|
NVD-CWE-noinfo
|
CVE-2019-13006
|
2024-11-21 13:24 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223955
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2. The GitLab graphql service was vulnerable to multiple authorization issues that disclosed restricted us…
|
NVD-CWE-noinfo
|
CVE-2019-13005
|
2024-11-21 13:24 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223956
|
5.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. When specific encoded characters were added to comments, the comments section would become inaccessible. It ha…
|
NVD-CWE-Other
|
CVE-2019-13004
|
2024-11-21 13:24 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223957
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Community and Enterprise Edition before 12.0.3. One of the parsers used by Gilab CI was vulnerable to a resource exhaustion attack. It allows Uncontrolled Resource C…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2019-13003
|
2024-11-21 13:24 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223958
|
8.8 |
HIGH
Network
|
mi
|
mi_browser
|
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Browser Prior to 10.4.0. User interaction is required to exploit this vulnerability in that …
|
CWE-20
Improper Input Validation
|
CVE-2019-13322
|
2024-11-21 13:24 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223959
|
8.0 |
HIGH
Adjacent
|
mi
|
mi_browser
|
This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Browser Prior to 10.4.0. User interaction is required to exploit this vulnerability …
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2019-13321
|
2024-11-21 13:24 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
223960
|
7.8 |
HIGH
Local
|
foxitsoftware
|
phantompdf
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the …
|
CWE-787
Out-of-bounds Write
|
CVE-2019-13334
|
2024-11-21 13:24 |
2020-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|