NVD や CVE、ほか複数の脅威フィードを束ね、RCE など高リスクな事象を深く追える一覧です。CVSS と EPSS を組み合わせ、Exploit 参照や PoC の有無から悪用しやすさを追跡します。ベンダー修正や緩和策の文脈とあわせて優先度を決め、対応サイクルを短く保ちつつ重要資産を守る支援をします。
Assigner（CNA／発行元）：[email protected] この条件を外す
| CVE | 説明 | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|
| CVE-2020-13321 | A vulnerability was discovered in GitLab versions prior to 13.1. Username format restrictions could be bypassed allowing for html tags to be added. | 8.3 | 1.40% | 2020-09-30 | 2026-06-16 |
| CVE-2020-13322 | A vulnerability was discovered in GitLab versions after 12.9. Due to improper verification of permissions, an unauthorized user can create and delete deploy tokens. | 7.2 | 1.14% | 2020-09-30 | 2026-06-16 |
| CVE-2020-13323 | A vulnerability was discovered in GitLab versions prior 13.1. Under certain conditions private merge requests could be read via Todos | 7.7 | 1.09% | 2020-09-30 | 2026-06-16 |
| CVE-2020-13324 | A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the private activity of a user could be exposed via the API. | 6.5 | 1.00% | 2020-09-30 | 2026-06-16 |
| CVE-2020-13325 | A vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting the characters properly, potentially resulting in a denial of service. | 7.1 | 0.91% | 2020-09-30 | 2026-06-16 |
| CVE-2020-13326 | A vulnerability was discovered in GitLab versions prior to 13.1. Under certain conditions the restriction for Github project import could be bypassed. | 4.3 | 0.69% | 2020-09-30 | 2026-06-16 |
| CVE-2020-13328 | An issue has been discovered in GitLab affecting versions prior to 13.1.2, 13.0.8 and 12.10.13. GitLab was vulnerable to a stored XSS by using the PyPi files API. | 4.8 | 0.57% | 2020-09-30 | 2026-06-16 |
| CVE-2020-13329 | An issue has been discovered in GitLab affecting versions from 12.6.2 prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the blob view feature. | 6.5 | 0.59% | 2020-09-30 | 2026-06-16 |
| CVE-2020-13330 | An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS in import the Bitbucket project feature. | 4.4 | 0.62% | 2020-09-30 | 2026-06-16 |
| CVE-2020-13331 | An issue has been discovered in GitLab affecting versions prior to 12.10.13. GitLab was vulnerable to a stored XSS by in the Wiki pasges. | 5.4 | 0.67% | 2020-09-30 | 2026-06-16 |
| CVE-2020-13336 | An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. GitLab was vulnerable to a stored XSS by in the error tracking feature. | 4.0 | 0.51% | 2020-09-30 | 2026-06-16 |
| CVE-2020-13337 | An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a group name. | 7.2 | 0.75% | 2020-10-02 | 2026-06-16 |
| CVE-2020-13338 | An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. A stored cross-site scripting vulnerability was discovered when editing references. | 5.4 | 0.69% | 2020-10-02 | 2026-06-16 |
| CVE-2020-13333 | A potential DOS vulnerability was discovered in GitLab versions 13.1, 13.2 and 13.3. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage. | 4.3 | 2.09% | 2020-10-06 | 2026-06-16 |
| CVE-2020-13343 | An issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized Users Can View Custom Project Template | 7.5 | 1.49% | 2020-10-06 | 2026-06-16 |
| CVE-2020-13345 | An issue has been discovered in GitLab affecting all versions starting from 10.8. Reflected XSS on Multiple Routes | 5.5 | 0.88% | 2020-10-06 | 2026-06-16 |
| CVE-2020-13332 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none | 該当なし | 0.24% | 2020-10-07 | 2023-11-06 |
| CVE-2020-13334 | In GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, improper authorization checks allow a non-member of a project/group to change the confidentiality attribute of issue via mutation GraphQL query | 5.9 | 1.51% | 2020-10-07 | 2026-06-16 |
| CVE-2020-13335 | Improper group membership validation when deleting a user account in GitLab >=7.12 allows a user to delete own account without deleting/transferring their group. | 4.3 | 0.79% | 2020-10-07 | 2026-06-16 |
| CVE-2020-13346 | Membership changes are not reflected in ToDo subscriptions in GitLab versions prior to 13.2.10, 13.3.7 and 13.4.2, allowing guest users to access confidential issues through API. | 6.5 | 1.32% | 2020-10-07 | 2026-06-16 |