Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-13345 State: PUBLISHED Published: 2020-10-06T18:26:15 Last Updated: 2024-08-04T12:18:17.684Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: GitLab Products: GitLab Problem Types: Improper neutralization of input during web page generation ('cross-site scripting') in GitLab Description: An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/232829 - https://hackerone.com/reports/946728 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13345.json
CVE ID: CVE-2020-13346 State: PUBLISHED Published: 2020-10-07T13:21:28 Last Updated: 2024-08-04T12:18:17.541Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Improper access control in GitLab Description: Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/219496 - https://hackerone.com/reports/880863 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13346.json
CVE ID: CVE-2020-13347 State: PUBLISHED Published: 2020-10-07T13:14:16 Last Updated: 2024-08-04T12:18:17.532Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: GitLab Products: GitLab Runner Problem Types: Improper neutralization of special elements used in a command ('command injection') in GitLab Runner Description: A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows system with a docker executor, which allows the attacker to run arbitrary commands on Windows host, via DOCKER_AUTH_CONFIG build variable. Additional Analyst Notes: - CVE Program Container: Re
y commands on Windows host, via DOCKER_AUTH_CONFIG build variable. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-runner/-/issues/26725 - https://hackerone.com/reports/955016 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13347.json
CVE ID: CVE-2020-13348 State: PUBLISHED Published: 2020-11-17T18:11:51 Last Updated: 2024-08-04T12:18:17.574Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: GitLab Products: GitLab EE Problem Types: Improper authorization in GitLab EE Description: An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could be bypassed by targeting a branch without the CODEOWNERS file. Affected versions are >=10.2, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/246928 - https://gitlab.com/gitlab-org/cves/-/blob/m
tainer: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/246928 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13348.json
CVE ID: CVE-2020-13349 State: PUBLISHED Published: 2020-11-17T18:22:32 Last Updated: 2024-08-04T12:18:17.565Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab EE Problem Types: Uncontrolled resource consumption in GitLab Description: An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic backtracking. Affected versions are >=8.12, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/257497 - https:/
nal Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/257497 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13349.json
CVE ID: CVE-2020-13350 State: PUBLISHED Published: 2020-11-17T17:55:43 Last Updated: 2024-08-04T12:18:17.575Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab CE/EE Problem Types: Cross-site request forgery (csrf) in GitLab Description: CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runners. Affected versions are >=13.5.0, <13.5.2,>=13.4.0, <13.4.5,<13.3.9. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/24416 - https://hackerone.com/reports/415238 - https://gitlab.com/gi
es: - https://gitlab.com/gitlab-org/gitlab/-/issues/24416 - https://hackerone.com/reports/415238 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13350.json
CVE ID: CVE-2020-13351 State: PUBLISHED Published: 2020-11-17T17:52:28 Last Updated: 2024-08-04T12:18:17.580Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: GitLab CE/EE Problem Types: Authorization bypass through user-controlled key in GitLab Description: Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable names and values for scheduled pipelines on projects visible to the attacker. Affected versions are >=13.0, <13.3.9,>=13.4.0, <13.4.5,>=13.5.0, <13.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/239369 - htt
itional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/239369 - https://hackerone.com/reports/962462 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13351.json
CVE ID: CVE-2020-13352 State: PUBLISHED Published: 2020-11-17T00:36:27 Last Updated: 2024-08-04T12:18:17.655Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab CE/EE Problem Types: Exposure of private information ('privacy violation') in GitLab Description: Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to public group. Affected versions are: >=10.2, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/38281 - https://hackerone.com/reports/748315 - https://gitlab.com/gitlab-o
https://gitlab.com/gitlab-org/gitlab/-/issues/38281 - https://hackerone.com/reports/748315 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13352.json
CVE ID: CVE-2020-13353 State: PUBLISHED Published: 2020-11-17T00:26:35 Last Updated: 2024-08-04T12:18:17.588Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: GitLab Products: Gitaly Problem Types: Cleartext storage of sensitive information in Gitaly Description: When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitaly/-/issues/2882 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13353.json
CVE ID: CVE-2020-13354 State: PUBLISHED Published: 2020-11-17T00:43:55 Last Updated: 2024-08-04T12:18:17.583Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab CE/EE Problem Types: Uncontrolled resource consumption in GitLab Description: A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name check could cause exponential number of backtracks for certain user supplied values resulting in high CPU usage. Affected versions are: >=12.6, <13.3.9. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/220019 - https://hackeron
st Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/220019 - https://hackerone.com/reports/869875 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13354.json
CVE ID: CVE-2020-13355 State: PUBLISHED Published: 2020-11-18T23:30:25 Last Updated: 2024-08-04T12:18:17.457Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: GitLab Products: GitLab CE/EE Problem Types: Improper limitation of a pathname to a restricted directory ('path traversal') in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path traversal is found in LFS Upload that allows attacker to overwrite certain specific paths on the server. Affected versions are: >=8.14, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-
.4, <13.4.5,>=13.5, <13.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/255886 - https://hackerone.com/reports/990800 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13355.json
CVE ID: CVE-2020-13356 State: PUBLISHED Published: 2020-11-18T23:35:05 Last Updated: 2024-08-04T12:18:17.540Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: GitLab Products: GitLab CE/EE Problem Types: Information exposure in GitLab Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially crafted request could bypass Multipart protection and read files in certain specific paths on the server. Affected versions are: >=8.8.9, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/230878 - https://hackerone.com
tes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/230878 - https://hackerone.com/reports/927953 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13356.json
CVE ID: CVE-2020-13357 State: PUBLISHED Published: 2020-12-11T03:55:55 Last Updated: 2024-08-04T12:18:17.628Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab CE/EE Problem Types: Authorization bypass through user-controlled key in GitLab Description: An issue was discovered in Gitlab CE/EE versions >= 13.1 to <13.4.7, >= 13.5 to <13.5.5, and >= 13.6 to <13.6.2 allowed an unauthorized user to access the user list corresponding to a feature flag in a project. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/241132 - https://hackerone.com/reports/962408 - https://gitlab.com/gi
s: - https://gitlab.com/gitlab-org/gitlab/-/issues/241132 - https://hackerone.com/reports/962408 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13357.json
CVE ID: CVE-2020-13358 State: PUBLISHED Published: 2020-11-17T00:20:25 Last Updated: 2024-08-04T12:18:17.461Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: GitLab Products: Gitlab CE/EE Problem Types: Improper authorization in GitLab Description: A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access to private projects. Affected versions are: >=13.4, <13.4.5,>=13.3, <13.3.9,>=13.5, <13.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/241674 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13358.json
CVE ID: CVE-2020-13359 State: PUBLISHED Published: 2020-11-18T23:57:34 Last Updated: 2024-08-04T12:18:17.623Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:N) Vendors: GitLab Products: GitLab CE/EE Problem Types: Information exposure in GitLab Description: The Terraform API in GitLab CE/EE 12.10+ exposed the object storage signed URL on the delete operation allowing a malicious project maintainer to overwrite the Terraform state, bypassing audit and other business controls. Affected versions are >=12.10, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/250266 - https:/
nal Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/250266 - https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13359.json
CVE ID: CVE-2020-13360 State: REJECTED Published: 2020-11-18T23:41:11 Last Updated: 2020-11-19T17:12:49 Description: No description available.
CVE ID: CVE-2020-13361 State: PUBLISHED Published: 2020-05-28T13:42:06 Last Updated: 2024-08-04T12:18:17.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03983.html - http://www.openwall.com/lists/oss-security/2020/05/28/1 - https://security-tracker.debian.org/tracker/CVE-2020-13361 - https://security.netapp.com/advisory/ntap-20200608-0003/ - https
://security-tracker.debian.org/tracker/CVE-2020-13361 - https://security.netapp.com/advisory/ntap-20200608-0003/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html - https://www.debian.org/security/2020/dsa-4728 - https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html - https://usn.ubuntu.com/4467-1/ - https://security.gentoo.org/glsa/202011-09
CVE ID: CVE-2020-13362 State: PUBLISHED Published: 2020-05-28T14:35:24 Last Updated: 2024-08-04T12:18:18.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg06250.html - https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg03131.html - http://www.openwall.com/lists/oss-security/2020/05/28/2 - https://security-tracker.debian.org/tracker/CVE-2020-13362 - https://security.netapp.com/advisory/ntap-20200608-00
8/2 - https://security-tracker.debian.org/tracker/CVE-2020-13362 - https://security.netapp.com/advisory/ntap-20200608-0003/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00032.html - https://www.debian.org/security/2020/dsa-4728 - https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00086.html - https://usn.ubuntu.com/4467-1/ - https://security.gentoo.org/glsa/202011-09
CVE ID: CVE-2020-13364 State: PUBLISHED Published: 2020-08-06T16:54:43 Last Updated: 2024-08-04T12:18:18.253Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A backdoor in certain Zyxel products allows remote TELNET access via a CGI script. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, V5.11(AAZF.4)C0, V5.11(AAZF.2)C0, and V5.11(AAZF.3)C0; NSA310S V4.75(AALH.2)C0; NSA320S V4.75(AANV.2)C0 and V4
AZF.8)C0, V5.11(AAZF.4)C0, V5.11(AAZF.2)C0, and V5.11(AAZF.3)C0; NSA310S V4.75(AALH.2)C0; NSA320S V4.75(AANV.2)C0 and V4.75(AANV.1)C0; NSA221 V4.41(AFM.1)C0; and NAS540 V5.21(AATB.5)C0 and V5.21(AATB.3)C0. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/us/en/support/security_advisories.shtml - https://www.zyxel.com/support/Zyxel-security-advisory-for-NAS-remote-access-vulnerability.shtml
CVE ID: CVE-2020-13365 State: PUBLISHED Published: 2020-08-06T16:56:21 Last Updated: 2024-08-04T12:18:17.736Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocumented user account that can be used for a TELNET session as root. This affects NAS520 V5.21(AASZ.4)C0, V5.21(AASZ.0)C0, V5.11(AASZ.3)C0, and V5.11(AASZ.0)C0; NAS542 V5.11(ABAG.0)C0, V5.20(ABAG.1)C0, and V5.21(ABAG.3)C0; NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, V5.11(AA
NSA325 v2_V4.81(AALS.0)C0 and V4.81(AAAJ.1)C0; NSA310 4.22(AFK.0)C0 and 4.22(AFK.1)C0; NAS326 V5.21(AAZF.8)C0, V5.11(AAZF.4)C0, V5.11(AAZF.2)C0, and V5.11(AAZF.3)C0; NSA310S V4.75(AALH.2)C0; NSA320S V4.75(AANV.2)C0 and V4.75(AANV.1)C0; NSA221 V4.41(AFM.1)C0; and NAS540 V5.21(AATB.5)C0 and V5.21(AATB.3)C0. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/us/en/support/security_advisories.shtml - https://www.zyxel.com/support/Zyxel-security-advisory-for-NAS-remote-access-vulnerability.shtml
CVE ID: CVE-2020-13376 State: PUBLISHED Published: 2020-08-07T19:03:22 Last Updated: 2024-08-04T12:18:17.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie. Additional Analyst Notes: - CVE Program Container: References: - https://www.securenvoy.com/en-gb/support - https://sidechannel.tempestsi.com/path-traversal-vulnerability-in-securenvoy-impacts-on-remote-command-execution-through-file-upload-ec2e731bd50a
CVE ID: CVE-2020-13377 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:49:36.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to sensitive files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.loadbalancer.org/products/virtual/enterprise-va-max/ - https://inf0seq.github.io/cve/2020/04/21/Path-Traversal-in-Enterprise-loadbalancer-VA-MAX-v8.3.8-and-earlier.html
CVE ID: CVE-2020-13378 State: PUBLISHED Published: 2023-05-12T00:00:00.000Z Last Updated: 2025-01-24T15:46:55.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.loadbalancer.org/products/virtual/enterprise-va-max/ - https://inf0seq.github.io/cve/2020/04/21/OS.html
CVE ID: CVE-2020-13379 State: PUBLISHED Published: 2020-06-03T18:41:09 Last Updated: 2024-08-04T12:18:17.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make Grafana send HTTP requests to any URL and return its result to the user/client. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS'ing Grafana via SegFault. Additional Analyst Notes: - CVE Program Container: References: - https://community.grafana.com/t/release-notes-v6-7-x/2
Additional Analyst Notes: - CVE Program Container: References: - https://community.grafana.com/t/release-notes-v6-7-x/27119 - http://www.openwall.com/lists/oss-security/2020/06/03/4 - https://community.grafana.com/t/grafana-7-0-2-and-6-7-4-security-update/31408 - https://grafana.com/blog/2020/06/03/grafana-6.7.4-and-7.0.2-released-with-important-security-fix/ - https://community.grafana.com/t/release-notes-v7-0-x/29381 - https://security.netapp.com/advisory/ntap-20200608-0006/ - http://www.openwall.com/lists/oss-security/2020/06/09/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O2KSCCGKNEENZN3DW7TSPFBBUZH3YZXZ/ - https://lists.fedoraproj
ves/list/package-announce%40lists.fedoraproject.org/message/O2KSCCGKNEENZN3DW7TSPFBBUZH3YZXZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EEKSZ6GE4EDOFZ23NGYWOCMD6O4JF5SO/ - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00060.html - https://mostwanted002.cf/post/grafanados/ - http://packetstormsecurity.com/files/158320/Grafana-7.0.1-Denial-Of-Service.html - http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html - https://rhynorater.github.io/CVE-2020-13379-Write-Up - https://lists.apache.org/thread.html/re75f59639f3bc1d14c7ab362bc4485ade84f3c6a3c1a03200c20fe13%40%3Cissues.ambari.apache.org%3E - https
pache.org/thread.html/re75f59639f3bc1d14c7ab362bc4485ade84f3c6a3c1a03200c20fe13%40%3Cissues.ambari.apache.org%3E - https://lists.apache.org/thread.html/r6bb57124a21bb638f552d81650c66684e70fc1ff9f40b6a8840171cd%40%3Cissues.ambari.apache.org%3E - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00017.html - https://lists.apache.org/thread.html/r40f0a97b6765de6b8938bc212ee9dfb5101e9efa48bcbbdec02b2a60%40%3Cissues.ambari.apache.org%3E - https://lists.apache.org/thread.html/r093b405a49fd31efa0d949ac1a887101af1ca95652a66094194ed933%40%3Cdev.ambari.apache.org%3E - https://lists.apache.org/thread.html/rba0247
1efa0d949ac1a887101af1ca95652a66094194ed933%40%3Cdev.ambari.apache.org%3E - https://lists.apache.org/thread.html/rba0247a27be78bd14046724098462d058a9969400a82344b3007cf90%40%3Cdev.ambari.apache.org%3E - https://lists.apache.org/thread.html/rff71126fa7d9f572baafb9be44078ad409c85d2c0f3e26664f1ef5a2%40%3Cdev.ambari.apache.org%3E - https://lists.apache.org/thread.html/re7c4b251b52f49ba6ef752b829bca9565faaf93d03206b1db6644d31%40%3Cdev.ambari.apache.org%3E - https://lists.apache.org/thread.html/rad99b06d7360a5cf6e394afb313f8901dcd4cb777aee9c9197b3b23d%40%3Cdev.ambari.apache.org%3E - https://lists.apache.org/thread.html/r0928ee574281f8b6156e0a6d0291bfc27100a9dd3f9b0177ece24ae4%40%3Cdev.ambari.apach
E - https://lists.apache.org/thread.html/r0928ee574281f8b6156e0a6d0291bfc27100a9dd3f9b0177ece24ae4%40%3Cdev.ambari.apache.org%3E - https://lists.apache.org/thread.html/rd0fd283e3844b9c54cd5ecc92d966f96d3f4318815bbf3ac41f9c820%40%3Ccommits.ambari.apache.org%3E - https://lists.apache.org/thread.html/r6670a6c29044bcb77d4e5d165b5bd13fffe37b84caa5d6471b13b3a2%40%3Cdev.ambari.apache.org%3E - https://lists.apache.org/thread.html/r984c3b42a500f5a6a89fbee436b9432fada5dc27ebab04910aafe4da%40%3Cissues.ambari.apache.org%3E
CVE ID: CVE-2020-13380 State: PUBLISHED Published: 2020-07-01T14:11:52 Last Updated: 2024-08-04T12:18:17.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: openSIS before 7.4 allows SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/158257/openSIS-7.4-SQL-Injection.html - https://github.com/OS4ED/openSIS-Responsive-Design/commit/1127ae0bb7c3a2883febeabc6b71ad8d73510de8
CVE ID: CVE-2020-13381 State: PUBLISHED Published: 2020-07-01T14:16:01 Last Updated: 2024-08-04T12:18:17.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: openSIS through 7.4 allows SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OS4ED/openSIS-Responsive-Design/commits/master - https://packetstormsecurity.com/files/158257/openSIS-7.4-SQL-Injection.html - http://packetstormsecurity.com/files/158331/openSIS-7.4-Unauthenticated-PHP-Code-Execution.html