Lucene search
K

37 matches found

Circl
Circl
added 2026/03/04 6:20 p.m.0 views

CVE-2026-20101

creationtimestamp| type| source ---|---|--- 2026-03-04 18:20:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavkoaann2d 2026-03-04 22:10:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgbcf5gvpw2e 2026-03-05 11:03:43+00:00| seen|...

8.6CVSS5.7AI score0.00157EPSS
Exploits0References5
vulnersOsv
vulnersOsv
added 2025/08/14 6:52 p.m.2 views

@tgticketing/common (>=1.0.2 <=1.0.25), pirvp (=1.0.0) potentially affected by unknown CVE via exrpess (=0.0.1-security)

exrpess NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on exrpess and may be impacted: - @tgticketing/common =1.0.2, =1.0.25 - pirvp =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20101...

5.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 8:32 a.m.7 views

CVE-2024-20101

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998901; Issue ID: MSV-1602...

9.8CVSS7.9AI score0.01788EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:47 a.m.3 views

CVE-2023-20101

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted. This vulnerability is due to the presence of static user credentials for th...

9.8CVSS7.9AI score0.00715EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:6 p.m.6 views

CVE-2021-20101

Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to receive malformed content...

6.1CVSS7AI score0.0024EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:55 a.m.6 views

CVE-2017-20101

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zipdownload. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely...

5.7CVSS6.5AI score0.00139EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/05/13 9:2 p.m.5 views

CVE-2025-20101

Out-of-bounds read for some IntelR Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denial of service via local access...

8.4CVSS7.7AI score0.00073EPSS
Exploits0References1
CVE
CVE
added 2025/05/13 9:2 p.m.29 views

CVE-2025-20101

Summary: CVE-2025-20101 is an out-of-bounds read in Intel® Graphics Drivers that could allow an authenticated local user to disclose information or cause a denial of service. Affected software (per sources): Intel® Graphics Drivers for Intel® Arc, Arc Pro, Iris Xe, Data Center GPU Flex Series, an...

8.4CVSS7.7AI score0.00073EPSS
Exploits0References1
OSV
OSV
added 2024/10/07 3:15 a.m.0 views

CVE-2024-20101

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998901; Issue ID: MSV-1602...

9.8CVSS6.3AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 1:58 a.m.20 views

CVE-2023-37323 D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution Vulnerability

D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability...

8.8CVSS7.8AI score0.0123EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/13 12:0 a.m.24 views

Cisco Emergency Responder Static Credentials (cisco-sa-cer-priv-esc-B9t3hqk9)

According to its self-reported version, Cisco Emergency Responder Static Credentials is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

9.8CVSS9.2AI score0.00715EPSS
Exploits0References3
The Hacker News
The Hacker News
added 2023/10/05 12:2 p.m.66 views

Cisco Releases Urgent Patch to Fix Critical Flaw in Emergency Responder Systems

Cisco has released updates to address a critical security flaw impacting Emergency Responder that allows unauthenticated, remote attackers to sign into susceptible systems using hard-coded credentials. The vulnerability, tracked as CVE-2023-20101 CVSS score: 9.8, is due to the presence of static...

8.1AI score0.00715EPSS
Exploits0
Circl
Circl
added 2023/10/04 8:12 p.m.1 views

CVE-2023-20101

creationtimestamp| type| source ---|---|--- 2023-10-04 20:12:04+00:00| seen| https://t.me/cibsecurity/71609 2023-10-05 14:27:13+00:00| seen| https://t.me/KomunitiSiber/893 2023-10-05 16:30:07+00:00| seen| https://t.me/truesecator/4932 2023-10-05 16:34:30+00:00| seen|...

9.8CVSS8.9AI score0.00715EPSS
Exploits0References4
CVE
CVE
added 2023/10/04 4:12 p.m.110 views

CVE-2023-20101

Cisco Emergency Responder is affected by a vulnerability where an unauthenticated attacker can log in via the root account that uses default, static credentials. The issue comes from static root credentials that cannot be changed or deleted, enabling the attacker to log in and execute arbitrary c...

9.8CVSS9.8AI score0.00715EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2022/06/27 6:34 p.m.1 views

CVE-2017-20101

creationtimestamp| type| source ---|---|--- 2022-06-27 18:34:45+00:00| seen| https://t.me/cibsecurity/45188...

5.7CVSS5.7AI score0.00139EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/06/27 1:25 p.m.9 views

CVE-2017-20101 ProjectSend information disclosure

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zipdownload. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely...

3.5CVSS5.4AI score0.00139EPSS
Exploits1References3
CVE
CVE
added 2022/06/27 1:25 p.m.37 views

CVE-2017-20101

CVE-2017-20101 affects ProjectSend r754. A vulnerability in the file/process: process.php?do=zip_download allows manipulation of the argument client/file, leading to information disclosure. The flaw is exploitable remotely. Connected documents confirm the impact as an information disclosure vulne...

5.7CVSS4.5AI score0.00139EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/06/27 1:25 p.m.6 views

CVE-2017-20101 ProjectSend information disclosure

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zipdownload. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely...

3.5CVSS6.8AI score0.00139EPSS
Exploits1References3
Circl
Circl
added 2022/05/04 12:34 a.m.2 views

CVE-2022-20101

creationtimestamp| type| source ---|---|--- 2022-05-04 00:34:34+00:00| seen| https://t.me/cibsecurity/41864...

5.5CVSS5.5AI score0.00014EPSS
Exploits0References1
CVE
CVE
added 2022/05/03 8:2 p.m.84 views

CVE-2022-20101

CVE-2022-20101 describes a path traversal vulnerability in the aee daemon that can cause local information disclosure without requiring user interaction. The underlying issue is a path traversal flaw, enabling disclosure of sensitive data with local access. The exposure is supported by multiple s...

5.5CVSS5.1AI score0.00014EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder