Lucene search
+L

14 matches found

NVD
NVD
•added 2026/08/13 8:17 p.m.•10 views

CVE-2026-16896

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...

7.1CVSS0.001EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:30 a.m.•18 views

CVE-2019-16896

In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...

7.8CVSS7.1AI score0.00402EPSS
SaveExploits1References1
Circl
Circl
•added 2024/03/18 9:11 a.m.•11 views

CVE-2019-16896

creationtimestamp| type| source ---|---|--- 2024-03-18 09:11:17+00:00| seen| https://t.me/ctinow/210283...

7.8CVSS7.5AI score0.00402EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2020/11/05 11:15 p.m.•6 views

CVE-2018-16896

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...

5.4AI score
SaveExploits0References1
CVE
CVE
•added 2020/11/05 11:13 p.m.•31 views

CVE-2018-16896

This CVE entry is rejected and not used; the candidate was withdrawn by its CNA.

7.4AI score
SaveExploits0
Cvelist
Cvelist
•added 2020/11/05 11:13 p.m.•15 views

CVE-2018-16896

...

SaveExploits0
OSV
OSV
•added 2020/10/16 11:15 p.m.•7 views

CVE-2020-16896

An information disclosure vulnerability exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. ...

7.5CVSS5.8AI score0.12604EPSS
SaveExploits0References1
CVE
CVE
•added 2020/10/16 10:17 p.m.•203 views

CVE-2020-16896

An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) for Windows operating systems due to insufficient validation of input data . A remote attacker can exploit this by sending specially crafted requests to a server providing RDP services to gain unauthorized access to p...

7.5CVSS7.3AI score0.12604EPSS
SaveIn wildExploits0References1Affected Software8
OpenVAS
OpenVAS
•added 2020/10/14 12:00 a.m.•69 views

Microsoft Windows Multiple Vulnerabilities (KB4580327)

This host is missing a critical security update according to Microsoft KB4580327 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.9AI score0.93966EPSS
SaveExploits10References3
Rapid7 Blog
Rapid7 Blog
•added 2020/10/13 11:25 p.m.•313 views

Patch Tuesday - October 2020

Microsoft brings us an October's Update Tuesday with 87 vulnerabilities, a sub-100 number we haven't experienced in quite some time. To further add to this oddity, there are no Browser-based vulnerabilities to mention and the arrival of a new Adobe Flash vulnerability CVE-2020-9746. Despite this...

9.3CVSS1.2AI score0.71095EPSS
SaveExploits23
Check Point Advisories
Check Point Advisories
•added 2020/10/13 12:00 a.m.•23 views

Microsoft Windows Remote Desktop Protocol (RDP) Information Disclosure (CVE-2020-16896)

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

5CVSS7.1AI score0.12604EPSS
SaveExploits0
CVE
CVE
•added 2019/12/27 3:27 p.m.•80 views

CVE-2019-16896

CVE-2019-16896 affects K7 Ultimate Security 16.0.0117. The backup module K7BKCExt.dll improperly validates administrative privileges, enabling a local, user‑privilege bypass that allows an arbitrary file write via a symbolic link attack with file restoration functionality. Documented impact acros...

7.8CVSS7.6AI score0.00402EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2017/11/20 4:29 p.m.•32 views

CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

9.8CVSS7.2AI score0.01478EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2017/11/20 4:00 p.m.•32 views

CVE-2017-16896

A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter...

9.9AI score0.01478EPSS
SaveExploits0References2
Rows per page
Query Builder