69 matches found
CVE-2024-7020
Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Ubuntu: Security Advisory (USN-7020-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7020-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7020-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
CVE-2023-7020
creationtimestamp| type| source ---|---|--- 2023-12-21 02:22:30+00:00| seen| https://t.me/ctinow/157463 2023-12-28 01:16:27+00:00| seen| https://t.me/ctinow/159868 2024-01-04 00:31:47+00:00| seen| https://t.me/arpsyndicate/2388 2024-01-13 16:26:31+00:00| seen| https://t.me/ctinow/167871...
CVE-2023-7020 Tongda OA 2017 view.php sql injection
A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. This issue affects some unknown processing of the file general/wiki/cp/ct/view.php. The manipulation of the argument TEMPID leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...
SUSE CVE-2017-7020
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote...
AlmaLinux 9 : firefox (ALSA-2022:7020)
The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:7020 advisory. - libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. CVE-2022-40674 Note that Nessus has not tested for this issue but has instead...
RHEL 9 : firefox (RHSA-2022:7020)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:7020 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to versi...
Security Bulletin: Multiple security vulnerabilities have been identified in Elasticsearch shipped with IBM Tivoli Netcool Impact
Summary Elasticsearch is shipped with IBM Tivoli Netcool Impact, Information about multiple security vulnerabilities affecting elasticsearch has been published in a security bulletin. Vulnerability Details CVEID:CVE-2020-7020 DESCRIPTION: Elastic Enterprise Search could allow a remote authenticat...
CVE-2020-7020 affecting package rubygem-elasticsearch 7.6.0-1
CVE-2020-7020 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...
Security Bulletin: IBM Cloud Private is vulnerable to Elastic vulnerabilities (CVE-2020-7020 )
Summary IBM Cloud Private is vulnerable to Elastic vulnerabilities Vulnerability Details CVEID: CVE-2020-7020 DESCRIPTION: Elastic Enterprise Search could allow a remote authenticated attacker to obtain sensitive information, caused by not properly preserving security permissions in search querie...
CVE-2020-7020
Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain complex queries. This could result in the search disclosing the existence of documen...
CVE-2020-7020
Elasticsearch vulnerability CVE-2020-7020 affects Elasticsearch versions shipped with IBM Tivoli Netcool Impact, specifically before 6.8.13 and 7.9.2. Root cause: a document disclosure flaw where Document/Field Level Security is used, causing search queries to fail to preserve security permission...
CVE-2019-7020
Adobe Acrobat/Reader on Windows and macOS is affected by CVE-2019-7020 (buffer errors) and related issues described in APSB19-07. The vulnerabilities affect versions prior to 2019.010.20091 (macOS/Windows) and 2015.006.30464–2017.011.30113–2019.010.20069 family, with successful exploitation leadi...
Adobe Acrobat < 2015.006.30475 / 2017.011.30120 / 2019.010.20091 Multiple Vulnerabilities (APSB19-07)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30475, 2017.011.30120, or 2019.010.20091. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier,...
Adobe Reader < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)
The version of Adobe Reader installed on the remote macOS host is prior to 2019.010.20091, 2017.011.30120, 2015.006.30475. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-07 advisory. - Buffer Errors potentially leading to Arbitrary Code Execution CVE-2019-7020,...
Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-07) - Mac OS X
Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-07) - Windows
Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat and Reader Buffer Errors (APSB19-07: CVE-2019-7020)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...