114 matches found
CVE-2022-0620
The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
EUVD-2026-0620
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2025-28069
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-0620
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re- authenticating an expired SMB session. This issue can expo...
ctdb-4.22.2+git.396.c752843dcf4-1.1 on GA media (moderate)
ctdb-4.22.2+git.396.c752843dcf4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15296-1 Rating: moderate Cross-References: CVE-2025-0620 CVSS scores: CVE-2025-0620 SUSE : 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2025-0620 SUSE : 7.6...
SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2025:02230-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02230-1 advisory. - CVE-2025-0620: smbd doesn't pick up group membership changes when re-authenticating an expired SMB session bsc124413...
Ubuntu: Security Advisory (USN-7564-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-c9b7df0f0d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-68d1e02e61)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 42 : samba (2025-68d1e02e61)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-68d1e02e61 advisory. Update to Samba 4.22.2 - Security fix for CVE-2025-0620 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
CVE-2025-0620
creationtimestamp| type| source ---|---|--- 2025-06-03 14:57:24+00:00| seen| https://seclists.org/oss-sec/2025/q2/203 2025-06-03 17:07:13+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lqpropuk652r...
CVE-2025-0620
A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again...
Samba Missing Re-Authentication Vulnerability (CVE-2025-0620)
Samba is prone to a vulnerability when re-authenticating an expired SMB session. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
ALPINE-CVE-2025-46803
The default mode of pseudo terminals PTYs allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system...
CVE-2020-0620
An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files, aka 'Microsoft Cryptographic Services Elevation of Privilege Vulnerability'...
CVE-2009-0620
Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A21.1 uses default 1 usernames and 2 passwords for a the administrator and b web management, which makes it easier for remote attackers to perform configuration changes or obtain operating-system access...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Improper and Incorrect Authorization and SQL Injection in Vault (CVE-2023-0665, CVE-2023-24999, CVE-2023-0620)
Summary Vault is used by IBM Storage Fusion Data Foundation as part of user authentication. This bulletin identifies the steps to take to address the vulnerability in IBM Storage Fusion Data Foundation. CVE-2023-0665, CVE-2023-24999, CVE-2023-0620. Vulnerability Details CVEID:CVE-2023-0665...
CVE-2024-0620
creationtimestamp| type| source ---|---|--- 2024-03-02 09:36:07+00:00| seen| https://t.me/ctinow/198289...
CVE-2024-0620
CVE-2024-0620 concerns the PPWP – Password Protect Pages WordPress plugin. Affected versions are
WordPress PPWP – WordPress Password Protect Page Plugin <= 1.8.9 is vulnerable to Bypass Vulnerability
Software PPWP – WordPress Password Protect Page Type Plugin Vulnerable versions = 1.8.9 Fixed in 1.9.0 OWASP Top 10 A5: Broken Access Control Classification Bypass Vulnerability CVE CVE-2024-0620 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 33bb0c05c31f Credits Francesc...