|
215571
|
7.8 |
HIGH
Local
|
phoenixcontact
|
pc_worx_srt
|
Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.
|
CWE-276
Incorrect Default Permissions
|
CVE-2020-10939
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
215572
|
9.8 |
CRITICAL
Network
|
gitlab
|
gitlab
|
GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2020-10956
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
215573
|
6.5 |
MEDIUM
Network
|
gitlab debian
|
gitlab debian_linux
|
GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders.
|
CWE-862
Missing Authorization
|
CVE-2020-10955
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
215574
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
GitLab through 12.9 is affected by a potential DoS in repository archive download.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2020-10954
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
215575
|
7.5 |
HIGH
Network
|
gitlab
|
gitlab
|
In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.
|
CWE-22
Path Traversal
|
CVE-2020-10953
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
215576
|
6.5 |
MEDIUM
Network
|
gitlab
|
gitlab
|
GitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images.
|
NVD-CWE-noinfo
|
CVE-2020-10952
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
215577
|
8.8 |
HIGH
Network
|
custom_searchable_data_entry_system_project
|
custom_searchable_data_entry_system
|
The custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued.
|
CWE-89
SQL Injection
|
CVE-2020-10817
|
2024-11-21 13:56 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
215578
|
9.1 |
CRITICAL
Network
|
osmand
|
osmand
|
Osmand through 2.0.0 allow XXE because of binary/BinaryMapIndexReader.java.
|
CWE-611
XXE
|
CVE-2020-10993
|
2024-11-21 13:56 |
2020-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
215579
|
9.8 |
CRITICAL
Network
|
azkaban_project
|
azkaban
|
Azkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user/XmlUserManager.java.
|
CWE-611
XXE
|
CVE-2020-10992
|
2024-11-21 13:56 |
2020-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
215580
|
9.8 |
CRITICAL
Network
|
mulesoft
|
aplkit
|
Mulesoft APIkit through 1.3.0 allows XXE because of validation/RestXmlSchemaValidator.java
|
CWE-611
XXE
|
CVE-2020-10991
|
2024-11-21 13:56 |
2020-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|