CVE-2020-10082

GitLab CVE-2020-10082 affects GitLab versions 12.2–12.8.1. The connected documents confirm a Denial of Service vulnerability impacting the designs for public issues within these versions. The exact root cause, affected subcomponents, and exploitation details are not provided in the documents. No ...

Security fix for the ALT Linux 8 package postgresql12 version 12.2-alt0.M80P.1

12.2-alt0.M80P.1 built Feb. 25, 2020 Alexei Takaseev in task 245913 Feb. 12, 2020 Alexei Takaseev - 12.2 Fixes CVE-2020-1720...

Security fix for the ALT Linux 10 package postgresql13 version 12.2-alt1

Feb. 12, 2020 Alexei Takaseev 12.2-alt1 - 12.2 Fixes CVE-2020-1720...

Security fix for the ALT Linux 10 package postgresql15 version 12.2-alt1

Feb. 12, 2020 Alexei Takaseev 12.2-alt1 - 12.2 Fixes CVE-2020-1720...

CVE-2020-7972

GitLab EE 12.2 has Insecure Permissions issue 2 of 2...

CVE-2020-7972

GitLab EE 12.2 has Insecure Permissions issue 2 of 2...

CVE-2020-7972

GitLab EE 12.2 has Insecure Permissions issue 2 of 2...

CVE-2020-7972

CVE-2020-7972 concerns GitLab Enterprise Edition 12.2 with an insecure permissions/privilege vulnerability. Multiple connected sources identify GitLab EE 12.2 as affected and describe an insecure privilege condition (GitLab EE 12.2 vulnerability). The CVE status is corroborated across OSV/ CNVD /...

PT-2020-19887 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE version 12.2 Description: The issue concerns insecure permissions in GitLab EE. Recommendations: For GitLab EE version 12.2, update to a version that addresses the insecure permissions issue...

ManageEngine Network Configuration Manager 12.2 SQL Injection

Exploit Title: ManageEngine Network Configuration Manager 12.2 - 'apiKey' SQL Injection discovery Date: 2019-01-24 published : 2020-01-20 Exploit Author: AmirHadi Yazdani Vendor Homepage: https://www.manageengine.com/network-configuration-manager/ Software Link:...

CVE-2019-8535

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-19256

GitLab Enterprise Edition EE 12.2 and later through 12.5 has Incorrect Access Control...

CVE-2019-8565

A race condition was addressed with additional validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A malicious application may be able to gain root privileges...

CVE-2019-8566

An API issue existed in the handling of microphone data. This issue was addressed with improved validation. This issue is fixed in iOS 12.2. A malicious application may be able to access the microphone without indication to the user...

CVE-2019-8563

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8567

A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in iOS 12.2. A device may be passively tracked by its WiFi MAC address...

CVE-2019-8559

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8562

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2019-8563

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-8559

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...