260 matches found
CVE-2020-13326
A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github project import could be bypassed...
CVE-2020-13326
Removed by vendor...
CVE-2020-13330
GitLab before version 12.10.13 is affected by a stored XSS in the Bitbucket project import feature. Root cause: input handling flaw leading to stored XSS. Impact per sources is MEDIUM (CVSS v3.1 base score 5.4); NVD lists 3.5 (LOW) in CVSS2. Remediation: upgrade to GitLab 12.10.13 or newer (or ap...
CVE-2020-13330
An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS in import the Bitbucket project feature...
OPENSUSE-SU-2020:1278-1 Security update for gettext-runtime
This update for gettext-runtime fixes the following issues: - Fix boo941629-unnessary-rpath-on-standard-path.patch bsc941629 - Added msgfmt-double-free.patch to fix a double free error CVE-2018-18751 bsc1113719 - Add patch msgfmt-reset-msg-length-after-remove.patch which does reset the length of...
OPENSUSE-SU-2020:1261-1 Security update for libreoffice
This update for libreoffice fixes the following issues: - Update to 6.4.5.2: Various fixes all around - Remove mime-info and application-registry dirs bsc1062631 - Fix bsc1172053 - LO-L3: Image disappears during roundtrip 365-Impress-365 bsc1172053.diff - Fix bsc1172189 - LO-L3: Impress crashes...
CVE-2020-13281
For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature...
CVE-2020-13281
For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature...
CVE-2020-13281
For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature...
Authorization
For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature...
CVE-2020-13281
GitLab CVE-2020-13281 affects GitLab installations with versions before 13.0.12, 13.1.6, and 13.2.3, where the project import feature can trigger a denial-of-service. The connected records confirm the vulnerable ranges and the DoS impact. Remediation is to upgrade to a fixed release (GitLab 13.2....
CVE-2020-13281
For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature...
CVE-2020-13281
Removed by vendor...
PT-2020-13422 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.0.12 GitLab versions prior to 13.1.6 GitLab versions prior to 13.2.3 Description: A denial of service issue exists in the project import feature. Recommendations: For versions prior to 13.0.12, update to version...
OPENSUSE-SU-2020:1162-1 Security update for libX11
This update for libX11 fixes the following issues: - Fixed XIM client heap overflows CVE-2020-14344, bsc1174628 This update was imported from the SUSE:SLE-15:Update update project...
CVE-2020-12499
In PHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier an improper path sanitation vulnerability exists on import of project files...
CVE-2020-10956
GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature...
CVE-2020-10956
GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature...