42 matches found
Photon OS 2.0: Elasticsearch PHSA-2021-2.0-0337
An update of the elasticsearch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0337. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2020-7021
Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emitrequestbody option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch...
CVE-2020-7021
CVE-2020-7021 affects Elasticsearch versions before 7.10.0 and 6.8.14. When audit logging and the emit_request_body option are enabled, the Elasticsearch audit log could disclose sensitive information such as password hashes or authentication tokens. This is described in the CVE entry and echoed ...
Adobe Reader < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)
The version of Adobe Reader installed on the remote macOS host is prior to 2019.010.20091, 2017.011.30120, 2015.006.30475. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-07 advisory. - Buffer Errors potentially leading to Arbitrary Code Execution CVE-2019-7020,...
Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-07) - Mac OS X
Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-07) - Windows
Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2018-7021
CVE-2018-7021 is rejected/not used and does not represent an active vulnerability entry.
Design/Logic Flaw
cgi/surgeftpmgr.cgi aka the Web Manager interface on TCP port 7021 or 9021 in NetWin SurgeFTP version 23f2 has XSS via the classid, domainid, or username parameter...
CVE-2017-17933
cgi/surgeftpmgr.cgi aka the Web Manager interface on TCP port 7021 or 9021 in NetWin SurgeFTP version 23f2 has XSS via the classid, domainid, or username parameter...
CVE-2017-17933
cgi/surgeftpmgr.cgi aka the Web Manager interface on TCP port 7021 or 9021 in NetWin SurgeFTP version 23f2 has XSS via the classid, domainid, or username parameter...
About the security content of macOS Sierra 10.12.6, Security Update 2017-003 El Capitan, and Security Update 2017-003 Yosemite - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-003)
The remote host is running Mac OS X 10.10.5, Mac OS X 10.11.6, or macOS 10.12.5 and is missing a security update. It is therefore, affected by multiple vulnerabilities : - An overflow condition exists in the curl component in the dprintfformatf function that is triggered when handling floating...
CVE-2017-7021
CVE-2017-7021 is a memory corruption vulnerability in the AppleGraphicsPowerManagement component affecting macOS versions prior to 10.12.6. A crafted app can trigger memory corruption, allowing arbitrary code execution with system privileges or cause a denial of service. The connected Apple secur...
CVE-2015-7021
CVE-2015-7021 concerns Apple OS X Graphics Drivers memory corruption. The Graphics Drivers subsystem in OS X prior to 10.11.1 allows a local attacker to gain privileges or cause a denial of service via unspecified vectors, due to memory corruption in the kernel graphics path. Affected software: O...
CVE-2013-7021
CVE-2013-7021 affects FFmpeg's libavfilter/vf_fps.c (filter_frame). Before 2.1, it fails to properly ensure FIFO content, allowing remote attackers to trigger a denial of service via a double free or potentially other impact with crafted data. Impact: DoS (and possibly unspecified). Remediation: ...
CVE-2008-7021
Unrestricted file upload vulnerability in editlogo.php in AvailScript Jobs Portal Script allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an image or logo, then accessing it via a direct request to the file in an unspecified directory...
CVE-2008-7021
CVE-2008-7021 affects the AvailScript Jobs Portal Script. A vulnerability in the file upload logic of editlogo.php allows remote authenticated users to upload a file with an executable extension as an image/logo and then access it via a direct request to the file in an unspecified directory, enab...
CVE-2008-6485
creationtimestamp| type| source ---|---|--- 2008-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7026 2008-11-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7021...