22 matches found
CVE-2018-13270
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none...
CVE-2025-13270
creationtimestamp| type| source ---|---|--- 2025-11-17 08:40:33+00:00| seen| https://bsky.app/profile/potato.software/post/3m5staijhiu2c 2025-11-17 11:23:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5t4ei7cgx2w...
EUVD-2025-13270
Malicious code in bioql PyPI...
CVE-2019-13270
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...
CVE-2020-13270
Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API...
CVE-2024-13270
creationtimestamp| type| source ---|---|--- 2025-01-09 20:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdinhg7el22...
CVE-2024-13270
Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...
CVE-2024-13270 Freelinking - Moderately critical - Information Disclosure - SA-CONTRIB-2024-034
Incorrect Authorization vulnerability in Drupal Freelinking allows Forceful Browsing.This issue affects Freelinking: from 0.0.0 before 4.0.1...
CVE-2024-13270
The Freelinking module for the Drupal CMS is affected by an Incorrect Authorization vulnerability (CVE-2024-13270) in versions 0.0.0 through 4.0.0 . The root cause is that the module fails to sufficiently check if a user has access to specific URLs before rendering them as links. This allows a re...
MSC-2024-13270
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
GitLab 11.3 < 12.9.8 / 12.10 < 12.10.7 / 13.0 < 13.0.1 (CVE-2020-13270)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API CVE-2020-13270 Note...
Stack overflow
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...
CVE-2021-34862
The CVE-2021-34862 entry pertains to D-Link DAP-2020 routers (firmware around 1.01rc001) with a stack-based buffer overflow in the webproc endpoint caused by improper validation of the var:menu parameter. Reported as a remote code execution vulnerability, it can be exploited by network-adjacent a...
CVE-2021-34862
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...
CVE-2020-13270
CVE-2020-13270 affects GitLab Community and Enterprise Editions (CE/EE) from 11.3 up to 13.0.1, due to a missing permission check when creating fork relations. The underlying issue allows guest users to create fork relationships on restricted public projects via the API. The available sources con...
CVE-2020-13270
Removed by vendor...
CVE-2019-13270
Edimax BR-6208AC V1 devices are affected by a cross-router covert-channel vulnerability where insufficient isolation between host and guest networks allows data to be transferred within the Group IP field of an IGMP packet. The vulnerability arises from withingroup communication enabled by the se...
CVE-2019-13270
Edimax BR-6208AC V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...