Lucene search
K

29 matches found

CNVD
CNVD
added 2026/04/10 12:0 a.m.5 views

OpenClaw has an unspecified vulnerability (CNVD-2026-20007)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by an attacker to cause a low-privileged operator to approve nodes with a wider scope...

8.6CVSS5.8AI score0.00013EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/05 7:31 p.m.1 views

CVE-2026-20007

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

5.8CVSS6AI score0.00034EPSS
Exploits0References1
CNVD
CNVD
added 2025/08/18 12:0 a.m.1 views

NVIDIA Triton Inference Server Denial of Service Vulnerability (CNVD-2025-20007)

NVIDIA Triton Inference Server is an open source software from NVIDIA that helps standardize model deployment and deliver fast and scalable AI in production. NVIDIA Triton Inference Server has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

7.5CVSS6.7AI score0.00295EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:36 a.m.5 views

CVE-2024-20007

In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08441369; Issue ID: ALPS08441369...

7.5CVSS7.4AI score0.0161EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2019-20007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxmlstr2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c...

6.5CVSS6.6AI score0.0085EPSS
Exploits1References3
Circl
Circl
added 2024/03/17 12:46 p.m.3 views

CVE-2019-20007

creationtimestamp| type| source ---|---|--- 2024-03-17 12:46:28+00:00| seen| https://t.me/ctinow/209900...

6.5CVSS6.2AI score0.0085EPSS
Exploits1References1
Circl
Circl
added 2024/02/05 7:26 a.m.1 views

CVE-2024-20007

creationtimestamp| type| source ---|---|--- 2024-02-05 07:26:50+00:00| seen| https://t.me/ctinow/178993 2024-02-25 17:46:27+00:00| seen| https://t.me/ctinow/192950...

7.5CVSS7.3AI score0.0161EPSS
Exploits0References2
CVE
CVE
added 2024/02/05 5:59 a.m.149 views

CVE-2024-20007

CVE-2024-20007 affects MediaTek MP3 decoder: a race condition could trigger an out-of-bounds write, enabling remote escalation of privileges with user interaction required. Public details confirm the mp3 decoder component and patch ALPS08441369; exploitation status is not provided in the sources....

7.5CVSS7.8AI score0.0161EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/01/19 1:40 a.m.77 views

CVE-2023-20007

Cisco CVE-2023-20007 affects the web-based management interfaces of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers. The root cause is insufficient validation of user-supplied input to the web UI, exploitable by an authenticated attacker using crafted HTTP input...

7.2CVSS7.3AI score0.00384EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/01/19 1:40 a.m.15 views

CVE-2023-20007

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code or cause the web-based management process on the device to restart unexpectedly,...

4.7CVSS7.5AI score0.00384EPSS
Exploits0References1
OSV
OSV
added 2022/05/10 8:15 p.m.2 views

CVE-2022-20007

In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foreground, when it is not, due to a race condition. This could lead to local escalation of privilege with no additional execution privileges neede...

7CVSS5.9AI score0.00022EPSS
Exploits0References1
CVE
CVE
added 2022/05/10 7:56 p.m.729 views

CVE-2022-20007

The CVE-2022-20007 issue is a race-condition vulnerability in Android's RootWindowContainer.java (startActivityForAttachedApplicationIfNeeded) that could allow an overlay to fool a foreground app, enabling local privilege escalation. Affected: Android 10–12 (including 12L). Root cause: a race bet...

7CVSS6.9AI score0.00022EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/09 3:25 p.m.6 views

CVE-2021-20007

...

Exploits0
OpenVAS
OpenVAS
added 2021/12/03 12:0 a.m.14 views

SUSE: Security Advisory (SUSE-SU-2021:3873-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.9AI score0.01762EPSS
Exploits15References4
OpenVAS
OpenVAS
added 2021/12/01 12:0 a.m.16 views

openSUSE: Security Advisory for netcdf (openSUSE-SU-2021:3815-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS7.5AI score0.01762EPSS
Exploits15References2
OpenVAS
OpenVAS
added 2021/11/28 12:0 a.m.14 views

openSUSE: Security Advisory for netcdf (openSUSE-SU-2021:1505-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS7.5AI score0.01762EPSS
Exploits15References2
OSV
OSV
added 2021/11/25 12:47 p.m.7 views

OPENSUSE-SU-2021:3804-1 Security update for netcdf

This update for netcdf fixes the following issues: - Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200, CVE-2019-20198, CVE-2021-26221, CVE-2021-26222, CVE-2021-30485, CVE-2021-31229, CVE-2021-31347,...

8.1CVSS7.3AI score0.01762EPSS
Exploits15References18
CVE
CVE
added 2021/10/25 1:33 p.m.39 views

CVE-2017-20007

CVE-2017-20007 affects Ingeteam INGEPAC DA AU AUC_1.13.0.28 (and earlier) web applications. The issue allows an unauthenticated remote attacker with access to the device’s web service to reach a path that contains sensitive information and could be used to obtain different configuration files, en...

5.3CVSS5.3AI score0.00293EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2021/01/01 12:15 a.m.1 views

CVE-2016-20007

The REST/JSON project 7.x-1.x for Drupal allows session name guessing, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy...

7.5CVSS5.8AI score0.0028EPSS
Exploits0References1
NVD
NVD
added 2019/12/26 10:15 p.m.12 views

CVE-2019-20007

An issue was discovered in ezXML 0.8.2 through 0.8.6. The function ezxmlstr2utf8, while parsing a crafted XML file, performs zero-length reallocation in ezxml.c, leading to returning a NULL pointer in some compilers. After this, the function ezxmlparsestr does not check whether the s variable is...

6.5CVSS6.6AI score0.0085EPSS
Exploits1References1
Rows per page
Query Builder