CVE-2020-13320

An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard...

CVE-2020-13320

An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard...

CVE-2020-13320

Removed by vendor...

PT-2020-13461 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 12.10.13 Description: An issue has been discovered that allowed a project member with limited permissions to view the project security dashboard. Recommendations: For versions prior to 12.10.13, update to version...

CVE-2020-13320: Undefined Security Weakness

An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard...

NERVE - Network Exploitation, Reconnaissance & Vulnerability Engine

NERVE is a vulnerability scanner tailored to find low-hanging fruit level vulnerabilities, in specific application configurations, network services, and unpatched services. It is not a replacement for Qualys, Nessus, or OpenVAS. It does not do authenticated scans, and operates in black-box mode...

Security Bulletin: App Connect Enterprise Certified Container is vulnerable to a regular expression infinite loop (NODE-SECURITY-1488)

Summary App Connect Enterprise Certified Container is vulnerable to a regular expression infinite loop that would cause the Designer UI to become unresponsive. Vulnerability Details Third Party Entry: 177309 DESCRIPTION: Node.js acorn module denial of service CVSS Base score: 5.3 CVSS Temporal...

SUSE-SU-2020:2715-1 Security update for grafana

This update for grafana fixes the following issues: - CVE-2020-11110: Fixed a stored XSS in dashboard snapshot original dashboard link bsc1174583...

CVE-2020-7297

Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to access protected dashboard data via improper access control in the user interface...

PT-2020-19534

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1 Description The issue allows an authenticated user interface user to access protected dashboard data due to improper access control in the user interface. This is a result of a privilege escalation...

CVE-2020-21845

Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.'...

Design/Logic Flaw

Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.'...

CVE-2020-21845

Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.'...

CVE-2020-21845

CVE-2020-21845 affects Codoforum 4.8.3 and is described across multiple sources as enabling HTML injection in the admin dashboard, specifically in the Manage users section. The available documents identify the vulnerability but do not provide a concrete exploit method, affected exact versions bey...

PT-2020-15398

Name of the Vulnerable Software and Affected Versions Codoforum version 4.8.3 Description The issue allows HTML Injection in the 'admin dashboard Manage users Section.' Recommendations For Codoforum version 4.8.3, update to a newer version that contains a fix for this issue...

CVE-2020-21845: Improper Neutralization of Input During Web Page Generation

Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.'...

CVE-2020-23824

ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery CSRF for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF...

CVE-2020-23824

ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery CSRF for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF...

Cross site request forgery (csrf)

ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery CSRF for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF...

CVE-2020-23824

ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery CSRF for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user credentials, if the admin/user admin opens a website with the malicious page that will run the CSRF...