CVE-2019-20145

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 11.4 through 12.6.1. It has Incorrect Access Control...

CVE-2019-14696

Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter...

CVE-2019-9485

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions...

CVE-2019-5408

Command View Advanced Edition CVAE products contain a vulnerability that could expose configuration information of hosts and storage systems that are managed by Device Manager server. This problem is due to a vulnerability in Device Manager GUI. The following products are affected. DevMgr version...

CVE-2019-6676

On versions 15.0.0-15.0.1, 14.0.0-14.1.2.2, and 13.1.0-13.1.3.1, TMM may restart on BIG-IP Virtual Edition VE when using virtio direct descriptors and packets 2 KB or larger...

CVE-2019-19255

GitLab Enterprise Edition EE 12.3 and later through 12.5 has Incorrect Access Control...

CVE-2019-19256

GitLab Enterprise Edition EE 12.2 and later through 12.5 has Incorrect Access Control...

CVE-2019-19086

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 1 of 2...

CVE-2019-19309

GitLab Enterprise Edition EE 8.90 and later through 12.5 has Incorrect Access Control...

CVE-2019-19087

Gitlab Enterprise Edition EE before 12.5.1 has Insecure Permissions issue 2 of 2...

CVE-2019-14784

The "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition...

CVE-2019-14943

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.1.4. It uses Hard-coded Credentials...

CVE-2019-15581

An IDOR exists in 12.3.2, 12.2.6, and 12.1.12 for GitLab Community Edition CE and Enterprise Edition EE that allowed a project owner or maintainer to see the members of any private group via merge request approval rules...

CVE-2019-19310

GitLab Enterprise Edition EE 9.0 and later through 12.5 allows Information Disclosure...

CVE-2019-15724

An issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.2.1. Label descriptions are vulnerable to HTML injection...

CVE-2019-19260

GitLab Community Edition CE and Enterprise Edition EE through 12.5 has Incorrect Access Control issue 2 of 2...

CVE-2019-18459

An issue was discovered in GitLab Community and Enterprise Edition 11.3 to 12.3 in the protected environments feature. It has Insecure Permissions issue 3 of 4...

CVE-2019-16170

An issue was discovered in GitLab Enterprise Edition 11.x and 12.x before 12.0.9, 12.1.x before 12.1.9, and 12.2.x before 12.2.5. It has Incorrect Access Control...

CVE-2019-15733

An issue was discovered in GitLab Community and Enterprise Edition 7.12 through 12.2.1. The specified default branch name could be exposed to unauthorized users...

CVE-2019-15731

An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to comment on merge requests despite the repository being set to allow only project members to do so...