76 matches found
CVE-2022-2720
CVE-2022-2720 affects Octopus Server. The issue is a masking flaw where a sensitive value that is a substring of another value is only partially masked, exposing potential sensitive content. Root cause: masking logic fails under substring scenarios. Impact per sources is Confidentiality Low; no e...
RHEL 8 : kpatch-patch (RHSA-2021:2720)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2720 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...
CentOS 8 : pki-deps:10.6 (CESA-2019:2720)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:2720 advisory. - jackson-databind: failure to block the logback-core class from polymorphic deserialization leading to remote code execution CVE-2019-12384 Note that Nessus ha...
CVE-2020-2720
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...
CVE-2020-2720
CVE-2020-2720 affects Oracle FLEXCUBE Investor Servicing (Oracle Financial Services Applications), specifically the Infrastructure component, with affected versions 12.1.0-12.4.0 and 14.0.0-14.1.0. The vulnerability enables a low-privilege, unauthenticated or minimally authenticated attacker with...
CVE-2019-2720
The CVE-2019-2720 entry concerns Oracle Fusion Middleware’s Oracle Data Integrator (ODI Tools). Affected versions are 11.1.1.9.0 and 12.2.1.3.0. The vulnerability allows a low-privileged, network-originating attacker (HTTP) to read a subset of ODI data. The provided sources do not include exploit...
CVE-2018-2720
CVE-2018-2720 affects Oracle Financial Services Liquidity Risk Management (Oracle Financial Services Applications), specifically the User Interface subcomponent in version 8.0.x . The vulnerability allows a low privileged attacker with network access via HTTP to compromise the product, enabling u...
CVE-2017-2720
The CVE-2017-2720 issue affects Huawei FusionSphere OpenStack V100R006C00, where an information-exposure vulnerability stems from a hard-coded cryptographic key used to encrypt inter-component messages. This design flaw can increase the risk of encrypted data being recovered. Huawei’s Security Ad...
Security Advisory - Information Exposure Vulnerability on FusionSphere OpenStack
There is an information exposure vulnerability on FusionSphere OpenStack. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increases the possibility that encrypted data may be recovered and results in information exposure...
CVE-2016-2720
CVE-2016-2720 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
Ubuntu 14.04 LTS : Django vulnerability (USN-2720-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2720-1 advisory. Lin Hua Cheng discovered that Django incorrectly handled the session store. A remote attacker could use this issue to cause the session store to fill up,...
Slackware 14.1 / current : mozilla-thunderbird (SSA:2015-192-01)
New mozilla-thunderbird packages are available for Slackware 14.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-192-01. The text itself is...
Mozilla Firefox Multiple Vulnerabilities-01 (May 2015) - Windows
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
CVE-2015-2720
Mozilla Firefox before 38.0 on Windows is affected by CVE-2015-2720 due to a flaw in the updater.exe path verification, which could let local attackers plant Trojan horse files to gain privileges. The vulnerability is documented in NVD and mirrored in OpenVAS/Nessus entries referencing the same C...
CVE-2014-2720
IZArc 4.1.8 is vulnerable due to a mismatch between ZIP Central Directory data (file name) and the Local File Header used to launch the file. This allows user‑assisted remote attackers to perform file‑extension spoofing that can lead to unintended code execution, demonstrated when a .jpg in the C...
Debian DSA-2720-1 : icedove - several vulnerabilities
Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client. Multiple memory safety errors, use-after-free vulnerabilities, missing permission checks, incorrect memory handling and other implementation errors may lead to the execution of...
Debian: Security Advisory (DSA-2720-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Reader Multiple Unspecified Vulnerabilities -01 (May 2013) - Mac OS X
Adobe Reader is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Memory corruption
Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721,...