64 matches found
CVE-2023-27332 TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability
TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this...
CVE-2024-20002
creationtimestamp| type| source ---|---|--- 2024-02-05 07:26:46+00:00| seen| https://t.me/ctinow/178989 2024-02-25 18:21:47+00:00| seen| https://t.me/ctinow/192967 2025-06-17 13:39:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18582...
CVE-2024-20002
In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03961715; Issue ID: DTV03961715...
BELL-CVE-2018-20002 CVE-2018-20002 does not affect BellSoft software
Bulletin has no description...
TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the logging functionality of the tdpServer program, which listens ...
CVE-2023-20002
Cisco TelePresence CE and RoomOS Software are affected by an SSRF vulnerability due to improper validation of user-supplied input. An authenticated, local attacker could bypass access controls and cause the device to issue arbitrary network requests sourced from the affected system. Affected Cisc...
CVE-2013-20002
creationtimestamp| type| source ---|---|--- 2021-06-17 20:41:11+00:00| seen| https://t.me/cibsecurity/25527...
CVE-2013-20002
CVE-2013-20002 affects Elemin theme via Themify framework before 1.2.2. The vulnerability resides in wp-content/themes/elemin/themify/themify-ajax.php, allowing remote attackers to upload and execute arbitrary PHP code. This results in remote code execution with potential impact on affected WordP...
CVE-2013-20002
Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework before 1.2.2 wp-content/themes/elemin/themify/themify-ajax.php file...
CVE-2017-20002
creationtimestamp| type| source ---|---|--- 2021-03-17 11:31:05+00:00| seen| https://t.me/cibsecurity/25002...
CVE-2017-20002
The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH hence bypassing PAM's nulloksecure configuration. Thi...
CVE-2017-20002
CVE-2017-20002 affects the Debian shadow package prior to 1:4.5-1: it incorrectly marks pts/0 and pts/1 as physical terminals in /etc/securetty, enabling local privilege escalation even when users connect non-physically (e.g., SSH). The issue is resolved in the Debian LTS advisories by applying t...
CVE-2017-20002
The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH hence bypassing PAM's nulloksecure configuration. Thi...
Debian: Security Advisory (DLA-2596-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-20002
The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...
CVE-2016-20002
CVE-2016-20002 affects the Drupal REST/JSON project (7.x-1.x). The issue is a comment access bypass (SA-CONTRIB-2016-033). The provided documents do not specify the exact root cause, affected methods/files, or explicit fixes. CVSS data from NVD indicates high impact (C/H/I/A) with network exploit...
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2020-1548)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-20002
Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value provided by a low-privileged user in the Subject field of a help request form that is mishandled in a TicketActions/view?tab=group TSV export by an admin user...
CVE-2019-20002
SolarWinds WebHelpDesk 12.7.1 contains a Formula Injection vulnerability in the export feature. A low-privileged user can provide a value in the Subject field of a help request form, which is mishandled during a TSV export performed by an admin user via TicketActions/view?tab=group. This leads to...