76 matches found
CVE-2020-7976
Removed by vendor...
CVE-2020-7977
Removed by vendor...
CVE-2020-7978
GitLab EE versions 12.6 through 12.7.2 are affected by a Denial of Service vulnerability (CVE-2020-7978). The available documents consistently state DoS as the impact; no concrete root-cause or exploitation details are provided in the sources. The initial entry confirms affected ranges but does n...
CVE-2020-8114
CVE-2020-8114 affects GitLab EE 8.9 through 12.7.2 with an insecure permission issue (privilege-related). The vulnerability is described consistently across multiple sources (OSV, CNVD, NVD, CNVD clones). Impact is marked high (CP/I/H/A), but exploitation details are not provided in the documents...
PT-2020-19892 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.8 through 12.7.2 Description: The issue concerns insecure permissions in GitLab EE. Recommendations: For GitLab EE versions 8.8 through 12.7.2, update to a version later than 12.7.2 to resolve the issue...
PT-2020-19889 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 10.1 through 12.7.2 Description: The issue allows information disclosure. Recommendations: For versions 10.1 through 12.7.2, update to a version that contains a fix for this issue...
PT-2020-19893 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.6 through 12.7.2 Description: The issue allows for Denial of Service. There is a vulnerability in GitLab EE. Recommendations: For GitLab EE versions 12.6 through 12.7.2, update to a version that contains a fix for this...
PT-2020-19882 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 11.11 through 12.7.2 Description: The issue allows Directory Traversal. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
PT-2020-19894 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.9 through 12.7.2 Description: The issue is related to insecure permissions. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue wa...
PT-2020-19883 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.0 through 12.7.2 Description: The issue concerns insecure permissions in GitLab EE. Recommendations: For GitLab EE versions 8.0 through 12.7.2, update to a version that contains a fix for this issue...
PT-2020-19891 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.4 through 12.7.2 Description: The issue is related to incorrect access control. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...
PT-2020-19886 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 11.0 through 12.7.2 Description: The issue allows for cross-site scripting XSS, which is a type of attack that can be used to steal user data or take control of user sessions. Recommendations: For GitLab EE versions 11.0...
CVE-2017-7151
A race condition was addressed with additional validation. This issue affected versions prior to iOS 11.2, macOS High Sierra 10.13.2, tvOS 11.2, watchOS 4.2, iTunes 12.7.2 for Windows, macOS High Sierra 10.13.4...
Race condition
A race condition was addressed with additional validation. This issue affected versions prior to iOS 11.2, macOS High Sierra 10.13.2, tvOS 11.2, watchOS 4.2, iTunes 12.7.2 for Windows, macOS High Sierra 10.13.4...
CVE-2017-7156
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote...
CVE-2017-7157
An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote...