54 matches found
CVE-2020-7009
CVE-2020-7009 affects Elasticsearch across 6.7.0–6.8.7 and 7.0.0–7.6.2, with a privilege-escalation flaw in the API key/authentication flow that can elevate privileges when an attacker can generate API keys. Public docs reference this vulnerability as a flaw in the API Key service, enabling an at...
CVE-2018-7009
This CVE entry is rejected/not used and does not represent an active vulnerability.
Apple iOS < 10.3.3 Multiple Vulnerabilities
Binary data appleios1033check.nbin...
macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-003)
The remote host is running Mac OS X 10.10.5, Mac OS X 10.11.6, or macOS 10.12.5 and is missing a security update. It is therefore, affected by multiple vulnerabilities : - An overflow condition exists in the curl component in the dprintfformatf function that is triggered when handling floating...
CVE-2017-7009
CVE-2017-7009 affects Apple devices via the IOUSBFamily component. Apple advisories show a memory corruption issue that can allow an attacker to execute arbitrary code with kernel privileges or cause a denial of service when a crafted app is used. Affected products include iOS <10.3.3, macOS &...
CVE-2016-7009
Technical details for CVE-2016-7009 are not publicly available in the provided documents; monitor for updates.
CVE-2016-7009
Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
Memory corruption
FontParser in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6976, CVE-2015-6977, CVE-2015-6978, CVE-2015-6990, CVE-2015-6991,...
CVE-2015-7009
CVE-2015-7009 involves a vulnerability in FontParser on Apple platforms: iOS < 9.1 and OS X
CVE-2014-7009
CVE-2014-7009 concerns the HKBN My Account Android app (package com.hkbn.myaccount). The NVD entry states the app does not verify X.509 certificates from SSL servers, enabling MITM attacks to spoof servers and capture sensitive information via crafted certificates. The connected documentation con...
CVE-2013-7009
FFmpeg: CVE-2013-7009 affects the rpza_decode_stream function in libavcodec/rpza.c, where improper maintenance of the pixel data pointer in FFmpeg before 2.1 can cause out-of-bounds access and a denial-of-service via crafted Apple RPZA data. Exploitation is remote and depends on parsing RPZA data...
CVE-2008-7009
CVE-2008-7009 describes a buffer overflow in ZoneAlarm Security Suite’s multiscan.exe affecting ZoneAlarm Internet Security Suite 7.0.483.000 and 8.0.020.000. The vulnerability allows a local attacker to execute arbitrary code by supplying a file or directory path that is excessively long. The pr...
CVE-2008-6225
creationtimestamp| type| source ---|---|--- 2008-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7009...
CVE-2006-7009
CVE-2006-7009 affects Joomla! prior to 1.0.10. The vulnerability allows remote attackers to spoof the frontend submission forms. The provided documents describe the impact as unknown and do not specify exploit vectors or affected components beyond the frontend-form spoofing issue. There is no rem...