General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2020-7019 | In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field L… | Medium (6.5) | 2020-08-18 | General Purpose |
| CVE-2020-7018 | Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface. If a user is giv… | High (8.8) | 2020-08-18 | General Purpose |
| CVE-2020-7708 | The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via… | Critical (9.8) | 2020-08-18 | General Purpose |
| CVE-2020-7707 | The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function. | Critical (9.8) | 2020-08-18 | General Purpose |
| CVE-2020-14333 | A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not filter user-controllable pa… | Medium (6.3) | 2020-08-18 | General Purpose |