39 matches found
CVE-2016-20024
ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files. Attackers can exploit world-writable permissions on the ZKTimeNet3.0 directory and its contents to replace executable files with...
PT-2026-25664
Name of the Vulnerable Software and Affected Versions ZKTeco ZKTime.Net version 3.0.1.6 Description The software contains an insecure file permissions issue that allows users with limited access to gain higher privileges. This is possible by altering executable files. Attackers can take advantage...
CVE-2026-20024
creationtimestamp| type| source ---|---|--- 2026-03-04 20:01:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgb36nesvn2u...
Linux Distros Unpatched Vulnerability : CVE-2019-20024
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow was discovered in imagebufferresize in fromsixel.c in libsixel before 1.8.4. CVE-2019-20024 Note that Nessus relies on the presence...
CVE-2024-20024
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541635; Issue ID: ALPS08541635...
CVE-2021-20024
Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a system instability or potentially read sensitive information from the memory locations...
CVE-2017-20024
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is...
CVE-2025-20024 Arkcompiler Ets Runtime has an integer overflow vulnerability
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios...
CVE-2019-20024
creationtimestamp| type| source ---|---|--- 2024-03-17 14:51:39+00:00| seen| https://t.me/ctinow/209935...
CVE-2024-20024
CVE-2024-20024 concerns the MediaTek flashc module where an out-of-bounds write arises from insufficient input validation. The vulnerability can enable local escalation of privilege to System execution privileges without user interaction. Public documentation consistently lists the issue as affec...
CVE-2023-20024
creationtimestamp| type| source ---|---|--- 2023-05-22 14:10:50+00:00| seen| https://www.cert.at/de/warnungen/2023/5/kritische-sicherheitslucken-in-cisco-switches-exploit-code-offentlich-updates-teilweise-verfugbar...
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities (cisco-sa-sg-web-multi-S9g4Nkgv)
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due t...
CVE-2023-20024 Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due t...
CVE-2017-20024 Solare Solar-Log denial of service
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is...
CVE-2017-20024
The CVE-2017-20024 vulnerability affects Solar-Log products Solare Solar-Log versions 2.8.4-56 and 3.5.2-85. The issue is described as an actionable denial-of-service condition triggered by an unknown function, with remote execution possible. A fix is available by upgrading to version 3.5.3-86. C...
CVE-2022-20024
creationtimestamp| type| source ---|---|--- 2022-02-10 02:13:36+00:00| seen| https://t.me/cibsecurity/37154...
CVE-2022-20024
CVE-2022-20024 is a local elevation-of-privilege vulnerability affecting system services in the Android stack (notably MediaTek–ALPS06219064 reference). The root cause is a missing permission check in a system service, enabling local privilege escalation with no user interaction and low attack co...
CVE-2021-20024
Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a system instability or potentially read sensitive information from the memory locations...
CVE-2021-20024
The CVE-2021-20024 issue affects SonicWall Switch devices and is caused by a vulnerability in LLDP protocol handling that leads to an out-of-bounds read in memory. This can result in system instability and potential exposure of memory contents. Public disclosures and related advisories confirm th...
SUSE: Security Advisory (SUSE-SU-2019:13927-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...