|
224271
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Community and Enterprise Edition 9.0 and through 12.0.2. Users with access to issues, but not the repository were able to view the number of related merge requests o…
|
NVD-CWE-noinfo
|
CVE-2019-13006
|
2024-11-21 13:24 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224272
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2. The GitLab graphql service was vulnerable to multiple authorization issues that disclosed restricted us…
|
NVD-CWE-noinfo
|
CVE-2019-13005
|
2024-11-21 13:24 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224273
|
5.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. When specific encoded characters were added to comments, the comments section would become inaccessible. It ha…
|
NVD-CWE-Other
|
CVE-2019-13004
|
2024-11-21 13:24 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224274
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
An issue was discovered in GitLab Community and Enterprise Edition before 12.0.3. One of the parsers used by Gilab CI was vulnerable to a resource exhaustion attack. It allows Uncontrolled Resource C…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2019-13003
|
2024-11-21 13:24 |
2020-03-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224275
|
8.8 |
HIGH
Network
|
mi
|
mi_browser
|
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Browser Prior to 10.4.0. User interaction is required to exploit this vulnerability in that …
|
CWE-20
Improper Input Validation
|
CVE-2019-13322
|
2024-11-21 13:24 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224276
|
8.0 |
HIGH
Adjacent
|
mi
|
mi_browser
|
This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Browser Prior to 10.4.0. User interaction is required to exploit this vulnerability …
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2019-13321
|
2024-11-21 13:24 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224277
|
7.8 |
HIGH
Local
|
foxitsoftware
|
phantompdf
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the …
|
CWE-787
Out-of-bounds Write
|
CVE-2019-13334
|
2024-11-21 13:24 |
2020-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224278
|
7.8 |
HIGH
Local
|
foxitsoftware
|
phantompdf
|
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the …
|
CWE-787
Out-of-bounds Write
|
CVE-2019-13333
|
2024-11-21 13:24 |
2020-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224279
|
5.9 |
MEDIUM
Network
|
fujitsu
|
gp7000f_firmware primepower_firmware gps_firmware sparc_enterprise_m3000_firmware sparc_enterprise_m4000_firmware sparc_enterprise_m5000_firmware sparc_enterprise_m8000_firmware …
|
The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, …
|
CWE-326
Inadequate Encryption Strength
|
CVE-2019-13163
|
2024-11-21 13:24 |
2020-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
224280
|
8.6 |
HIGH
Network
|
ros
|
ros-comm
|
An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. ROS_ASSERT_MSG only works when ROS_ASSERT_ENABLED is defined. This leads to a…
|
NVD-CWE-noinfo
|
CVE-2019-13465
|
2024-11-21 13:24 |
2019-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|