An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. Missing permission check for adding time spent on an issue.

Published at: September 30, 2020 at 02:15PM
View on website

An issue has been discovered in GitLab before version 12.10.13 that allowed a project member with limited permissions to view the project security dashboard.

Published at: September 30, 2020 at 02:15PM
View on website

A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to be added.

Published at: September 30, 2020 at 02:15PM
View on website

A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens.

Published at: September 30, 2020 at 02:15PM
View on website

Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication.
This issue affects:
WAGO 750-852
version FW07 and prior versions.
WAGO 750-880/xxx-xxx
version FW07 and prior versions.
WAGO 750-881
version FW07 and prior versions.
WAGO 750-831/xxx-xxx
version FW07 and prior versions.
WAGO 750-882
version FW07 and prior versions.
WAGO 750-885/xxx-xxx
version FW07 and prior versions.
WAGO 750-889
version FW07 and prior versions.

Published at: September 30, 2020 at 12:15PM
View on website