Lucene search
+L

223 matches found

FreeBSD
FreeBSD
added 2020/08/19 12:00 a.m.35 views

textproc/elasticsearch6 -- field disclosure flaw

Elastic reports: A field disclosure flaw was found in Elasticsearch when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attacker...

6.5CVSS0.8AI score0.01204EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/18 5:15 p.m.25 views

CVE-2020-7019

In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attack...

6.5CVSS6.4AI score0.01204EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/18 5:15 p.m.23 views

CVE-2020-7019

In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attack...

6.5CVSS6.3AI score
SaveExploits0References2
OSV
OSV
added 2020/08/18 5:15 p.m.7 views

UBUNTU-CVE-2020-7019

In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attack...

6.5CVSS7.1AI score0.01204EPSS
SaveExploits0References3
Prion
Prion
added 2020/08/18 5:15 p.m.26 views

Design/Logic Flaw

In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attack...

4CVSS6.2AI score0.01204EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/08/18 5:15 p.m.32 views

CVE-2020-7019

In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attack...

6.5CVSS6.8AI score0.01204EPSS
SaveExploits0References2
CVE
CVE
added 2020/08/18 4:40 p.m.97 views

CVE-2020-7019

CVE-2020-7019 affects Elasticsearch versions prior to 7.9.0 and 6.8.12. A field disclosure flaw occurs when running a scrolling search with Field Level Security: if a user runs the same query another, more privileged user recently ran, the scrolling search can leak hidden fields, potentially gran...

6.5CVSS6.2AI score0.01204EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/08/18 4:40 p.m.42 views

CVE-2020-7019

In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attack...

6.3AI score0.01204EPSS
SaveExploits0References2
Elastic
Elastic
added 2020/08/18 3:11 p.m.16 views

Elastic Stack 7.9.0 and 6.8.12 Security Update

Elasticsearch field disclosure flaw ESA-2020-12 A field disclosure flaw was found in Elasticsearch when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This...

6.5CVSS7.1AI score0.01204EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/08/18 12:00 a.m.9 views

PT-2020-19344 · Elastic · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch versions prior to 7.9.0 Elasticsearch versions prior to 6.8.12 Description: A field disclosure flaw was found in Elasticsearch when running a scrolling search with Field Level Security. If a user runs the same query another more...

6.5CVSS6.6AI score0.01204EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2020/07/30 12:00 a.m.95 views

SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2020:2069-1)

This update for webkit2gtk3 fixes the following issues : Update to version 2.28.3 bsc1173998 : + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. +...

10CVSS6.8AI score0.77246EPSS
SaveExploits5References18
OSV
OSV
added 2020/07/29 9:13 a.m.9 views

SUSE-SU-2020:2069-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Update to version 2.28.3 bsc1173998: + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. +...

10CVSS8.6AI score0.77246EPSS
SaveExploits5References10
OSV
OSV
added 2020/07/26 10:20 a.m.8 views

OPENSUSE-SU-2020:1064-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Update to version 2.28.3 bsc1173998: + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. +...

10CVSS8.6AI score0.77246EPSS
SaveExploits5References10
OPENSUSE Linux
OPENSUSE Linux
added 2020/07/26 12:00 a.m.92 views

Security update for webkit2gtk3 (important)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2020:1064-1 Rating: important References: 1173998 Cross-References: CVE-2020-13753 CVE-2020-9802 CVE-2020-9803 CVE-2020-9805 CVE-2020-9806 CVE-2020-9807 CVE-2020-9843 CVE-2020-9850 Affected Products: openSUSE...

10CVSS8.4AI score0.77246EPSS
SaveExploits5References1
Tenable Nessus
Tenable Nessus
added 2020/07/22 12:00 a.m.76 views

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2020:1990-1)

This update for webkit2gtk3 fixes the following issues : Update to version 2.28.3 bsc1173998 : + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. +...

10CVSS6.8AI score0.77246EPSS
SaveExploits5References18
Tenable Nessus
Tenable Nessus
added 2020/07/22 12:00 a.m.64 views

SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2020:1992-1)

This update for webkit2gtk3 fixes the following issues : Update to version 2.28.3 bsc1173998 : + Enable kinetic scrolling with async scrolling. + Fix web process hangs on large GitHub pages. + Bubblewrap sandbox should not attempt to bind empty paths. + Fix threading issues in the media player. +...

10CVSS6.8AI score0.77246EPSS
SaveExploits5References18
Tenable Nessus
Tenable Nessus
added 2020/07/20 12:00 a.m.81 views

Fedora 31 : webkit2gtk3 (2020-d2736ee493)

Update to 2.28.3 : - Fix kinetic scrolling with async scrolling. - Fix web process hangs on large GitHub pages. - Bubblewrap sandbox should not attempt to bind empty paths. - Fix threading issues in the media player. - Fix several crashes and rendering issues. - Security fixes: CVE-2020-9802,...

10CVSS6.8AI score0.77246EPSS
SaveExploits5References9
Tenable Nessus
Tenable Nessus
added 2020/07/14 12:00 a.m.73 views

Fedora 32 : webkit2gtk3 (2020-ab074c6cdf)

Update to 2.28.3 : - Fix kinetic scrolling with async scrolling. - Fix web process hangs on large GitHub pages. - Bubblewrap sandbox should not attempt to bind empty paths. - Fix threading issues in the media player. - Fix several crashes and rendering issues. - Security fixes: CVE-2020-9802,...

10CVSS6.8AI score0.77246EPSS
SaveExploits5References9
RedHat Linux
RedHat Linux
added 2020/06/04 3:05 p.m.7 views

Low: Red Hat Bug Fix Advisory: Red Hat Virtualization Engine security, bug fix 4.3.10

An update is now available for Red Hat Virtualization Engine 4.3. The ovirt-engine package provides the Red Hat Virtualization Manager, a centralized management platform that allows system administrators to view and manage virtual machines. The Manager provides a comprehensive range of features...

6.5CVSS6.7AI score0.01183EPSS
SaveExploits0References11
Fedora
Fedora
added 2020/01/31 2:03 a.m.20 views

[SECURITY] Fedora 31 Update: links-2.20.2-1.fc31

Links is a web browser capable of running in either graphics or text mode. It provides a pull-down menu system, renders complex pages, has partial HTML 4.0 support including tables, frames and support for multiple character se ts and UTF-8, supports color and monochrome terminals and allows...

1.4AI score
SaveExploits0
Rows per page
Query Builder