33 matches found
CVE-2020-7720
The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions...
CVE-2020-7720
CVE-2020-7720 is a prototype pollution vulnerability in the node-forge library (util.setPath) present in older node-forge releases. Multiple connected sources confirm that versions prior to 0.10.0 are affected, with 0.10.0 removing the vulnerable functions. Public risk scores in the sources range...
00ld8nuivn (2.1.0), 00rqiw31nd (2.1.0) +8745 more potentially affected by CVE-2020-7720 via node-forge (>=0.1.15, <=0.9.2)
node-forge NPM version =0.1.15, =0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on node-forge and may be impacted: - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 ...
CVE-2019-7720
taocms through 2014-05-24 allows eval injection by placing PHP code in the install.php dbname parameter and then making a config.php request...
CVE-2019-7720
The CVE-2019-7720 entry applies to TaoCMS, describing an eval-injection flaw in which PHP code can be placed in the install.php db_name parameter and then triggered via a config.php request. Red Hat and other sources corroborate the same issue, indicating the root cause is eval injection leading ...
CVE-2018-7720
A cross-site request forgery CSRF vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation...
CVE-2018-7720
The CVE-2018-7720 entry details a CSRF vulnerability in Western Bridge Cobub Razor 0.7.2, exploitable via /index.php?/user/createNewUser/ to create new accounts without proper authorization. The underlying issue is cross-site request forgery that permits account creation, with impact described as...
CVE-2018-7720
A cross-site request forgery CSRF vulnerability exists in Western Bridge Cobub Razor 0.7.2 via /index.php?/user/createNewUser/, resulting in account creation...
CVE-2016-7720
CVE-2016-7720 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-7720
The CVE-2017-7720 issue affects PrivateTunnel versions 2.7 and 2.8. A buffer overflow in password handling allows a local attacker to trigger a denial of service via SEH overwrite, with possible unspecified additional impact. The vulnerability is local-privilege context (no authentication require...
CVE-2014-7720
CVE-2014-7720 affects the Better Homes and Gardens Aus Android app (com.pacificmagazines.betterhomesandgardens). The vulnerability is that the app does not validate SSL X.509 certificates from servers, enabling potential man-in-the-middle attacks to spoof servers and exfiltrate sensitive data via...
SuSE 11.2 Security Update : flash-player (SAT Patch Number 7720)
Adobe flash-player has been updated to 11.2.202.285 security update which fixes various remote code execution problems and other security issues. Some more details can be found on: https://www.adobe.com/support/security/bulletins/apsb13-14.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc...