|
212181
|
5.4 |
MEDIUM
Network
|
gitlab
|
gitlab
|
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. When 2 factor authentication was enabled for groups, a malicious user could bypass that restriction by sending a s…
|
NVD-CWE-noinfo
|
CVE-2020-13297
|
2024-11-21 14:00 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212182
|
10.0 |
CRITICAL
Network
|
gitlab
|
gitlab
|
GitLab CE/EE version 13.3 prior to 13.3.4 was vulnerable to an OAuth authorization scope change without user consent in the middle of the authorization flow.
|
CWE-863
Incorrect Authorization
|
CVE-2020-13300
|
2024-11-21 14:00 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212183
|
8.1 |
HIGH
Network
|
gitlab
|
gitlab
|
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The revocation feature was not revoking all session tokens and one could re-use it to obtain a valid session.
|
CWE-613
Insufficient Session Expiration
|
CVE-2020-13299
|
2024-11-21 14:00 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212184
|
5.4 |
MEDIUM
Network
|
gitlab
|
gitlab
|
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is activated.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2020-13289
|
2024-11-21 14:00 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212185
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Project reporters and above could see confidential EPIC attached to confidential issues
|
NVD-CWE-noinfo
|
CVE-2020-13287
|
2024-11-21 14:00 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212186
|
6.5 |
MEDIUM
Network
|
gitlab
|
gitlab
|
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. API Authorization Using Outdated CI Job Token
|
CWE-863
Incorrect Authorization
|
CVE-2020-13284
|
2024-11-21 14:00 |
2020-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212187
|
7.5 |
HIGH
Network
|
microchip
|
atsama5d21c-cu_firmware atsama5d21c-cur_firmware atsama5d22c-cn_firmware atsama5d22c-cnr_firmware atsama5d22c-cu_firmware atsama5d22c-cur_firmware atsama5d23c-cn_firmware atsama5…
|
The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2020-12789
|
2024-11-21 14:00 |
2020-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212188
|
7.5 |
HIGH
Network
|
microchip
|
atsama5d21c-cu_firmware atsama5d21c-cur_firmware atsama5d22c-cn_firmware atsama5d22c-cnr_firmware atsama5d22c-cu_firmware atsama5d22c-cur_firmware atsama5d23c-cn_firmware atsama5…
|
CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks.
|
CWE-203
Information Exposure Through Discrepancy
|
CVE-2020-12788
|
2024-11-21 14:00 |
2020-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212189
|
7.5 |
HIGH
Network
|
microchip
|
atsama5d21c-cu_firmware atsama5d21c-cur_firmware atsama5d22c-cn_firmware atsama5d22c-cnr_firmware atsama5d22c-cu_firmware atsama5d22c-cur_firmware atsama5d23c-cn_firmware atsama5…
|
Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling.
|
NVD-CWE-noinfo
|
CVE-2020-12787
|
2024-11-21 14:00 |
2020-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212190
|
8.8 |
HIGH
Network
|
loway
|
queuemetrics
|
A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKS_LIST__pt.querystring parameter.
|
CWE-89
SQL Injection
|
CVE-2020-13127
|
2024-11-21 14:00 |
2020-09-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|