CVE-2020-7790 Arbitrary File Read

This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF...

CVE-2020-7790

CVE-2020-7790 affects spatie/browsershot (v0.0.0 range) where specifying a file:// URL can cause arbitrary files to be included in the resulting PDF, indicating a local-file inclusion in the rendering path. Root cause: unsanitized handling of file:// URLs enabling access to arbitrary filesystem p...

CVE-2020-7790

This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF...

CVE-2020-5378

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5378

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

Design/Logic Flaw

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5378

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-5378

This entry concerns Dell G7 17 7790 BIOS versions prior to 1.13.2 with a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory could overwrite the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM). The affected component...

CVE-2020-5378

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2019-7790

CVE-2019-7790 : Adobe Acrobat and Adobe Reader are affected by an out-of-bounds read vulnerability in versions 2019.010.20100 and earlier, 2019.010.20099 and earlier, 2017.011.30140 and earlier, 2017.011.30138 and earlier, 2015.006.30495 and earlier, and 2015.006.30493 and earlier. Successful exp...

CVE-2018-7790

CVE-2018-7790 affects Schneider Electric Modicon M221 (all references, all versions prior to firmware v1.6.2.0). The vulnerability is an Information Management Error that allows unauthorized users to replay authentication sequences, potentially uploading the original PLC program when connected to...

CVE-2017-7790

CVE-2017-7790 affects the Windows build of Mozilla Firefox prior to 55. The issue arises when non-null-terminated strings are copied into the crash reporter for certain registry keys, causing stack memory to be copied up to a null terminator. This could potentially expose private data from the lo...

CVE-2016-7790

Exponent CMS 2.3.9 is affected by a remote code execution vulnerability in /install/index.php. An attacker can upload a PHP file via uploader_paste.php and then overwrite /framework/conf/config.php to achieve arbitrary code execution. This is enabled by the ability to place a crafted file on the ...

CVE-2015-7790

The CVE-2015-7790 entry documents a stored cross-site scripting (XSS) vulnerability in the ASUS Japan WL-330NUL portable wireless router. Affected firmware versions are prior to 3.0.0.42. The issue allows remote attackers to execute arbitrary script or HTML in the user’s browser via unspecified v...