31 matches found
CVE-2020-7720
CVE-2020-7720 is a prototype pollution vulnerability in the node-forge library (util.setPath) present in older node-forge releases. Multiple connected sources confirm that versions prior to 0.10.0 are affected, with 0.10.0 removing the vulnerable functions. Public risk scores in the sources range...
CVE-2019-7720
taocms through 2014-05-24 allows eval injection by placing PHP code in the install.php dbname parameter and then making a config.php request...
CVE-2019-7720
The CVE-2019-7720 entry applies to TaoCMS, describing an eval-injection flaw in which PHP code can be placed in the install.php db_name parameter and then triggered via a config.php request. Red Hat and other sources corroborate the same issue, indicating the root cause is eval injection leading ...
CVE-2018-7720
A cross-site request forgery CSRF vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation...
CVE-2018-7720
The CVE-2018-7720 entry details a CSRF vulnerability in Western Bridge Cobub Razor 0.7.2, exploitable via /index.php?/user/createNewUser/ to create new accounts without proper authorization. The underlying issue is cross-site request forgery that permits account creation, with impact described as...
CVE-2018-7720
A cross-site request forgery CSRF vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation...
CVE-2016-7720
CVE-2016-7720 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-7720
The CVE-2017-7720 issue affects PrivateTunnel versions 2.7 and 2.8. A buffer overflow in password handling allows a local attacker to trigger a denial of service via SEH overwrite, with possible unspecified additional impact. The vulnerability is local-privilege context (no authentication require...
CVE-2014-7720
CVE-2014-7720 affects the Better Homes and Gardens Aus Android app (com.pacificmagazines.betterhomesandgardens). The vulnerability is that the app does not validate SSL X.509 certificates from servers, enabling potential man-in-the-middle attacks to spoof servers and exfiltrate sensitive data via...
SuSE 11.2 Security Update : flash-player (SAT Patch Number 7720)
Adobe flash-player has been updated to 11.2.202.285 security update which fixes various remote code execution problems and other security issues. Some more details can be found on: https://www.adobe.com/support/security/bulletins/apsb13-14.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc...