Lucene search
K

30 matches found

Circl
Circl
added 2026/02/21 3:15 p.m.2 views

CVE-2026-20140

creationtimestamp| type| source ---|---|--- 2026-02-21 15:15:09+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mfew2hlsmk2f 2026-02-21 15:26:03+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mfewnwdnx42s...

5.1AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 6:57 a.m.7 views

CVE-2024-20140

In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09270402; Issue ID: MSV-2020...

6.7CVSS7AI score0.00022EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:33 p.m.4 views

CVE-2022-20140

In readmultirsp of gattsr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...

10CVSS7.4AI score0.04172EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:8 p.m.5 views

CVE-2020-20140

Cross Site Scripting XSS vulnerability in Remote Report component under the Open menu in Flexmonster Pivot Table & Charts 2.7.17...

6.1CVSS6AI score0.00626EPSS
Exploits3
RedhatCVE
RedhatCVE
added 2025/05/22 5:8 a.m.7 views

CVE-2017-20140

A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input leads to basic cross site scripting Reflected. The attack may be launched...

6.1CVSS6.1AI score0.00201EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/05/07 5:36 p.m.6 views

CVE-2025-20140

A vulnerability in the Wireless Network Control daemon wncd of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent wireless attacker to cause a denial of service DoS condition. This vulnerability is due to improper memory management. An attacker could...

7.4CVSS0.00103EPSS
Exploits0References1
CVE
CVE
added 2025/05/07 5:36 p.m.46 views

CVE-2025-20140

CVE-2025-20140 affects Cisco IOS XE Software for Wireless LAN Controllers, specifically the Wireless Network Control daemon (wncd). The issue is due to improper memory management in wncd, which can be exploited by an unauthenticated, adjacent wireless attacker by sending IPv6 network requests fro...

7.4CVSS7.5AI score0.00103EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/01/06 4:15 a.m.7 views

CVE-2024-20140

In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09270402; Issue ID: MSV-2020...

6.7CVSS6.9AI score0.00022EPSS
Exploits0References1
NVD
NVD
added 2025/01/06 4:15 a.m.14 views

CVE-2024-20140

In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09270402; Issue ID: MSV-2020...

6.7CVSS0.00022EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/06 3:17 a.m.9 views

CVE-2024-20140

In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09270402; Issue ID: MSV-2020...

0.00022EPSS
Exploits0References1
Circl
Circl
added 2024/03/18 3:46 p.m.0 views

CVE-2019-20140

creationtimestamp| type| source ---|---|--- 2024-03-18 15:46:27+00:00| seen| https://t.me/ctinow/210664 2026-04-24 14:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkap5vw4tm2w...

8.8CVSS8.1AI score0.00512EPSS
Exploits1References2
CVE
CVE
added 2023/04/05 12:0 a.m.49 views

CVE-2023-20140

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers are affected by multiple XSS vulnerabilities in the web-based management interface caused by insufficient input validation. Exploitation requires only network access and persuading a user to visit a page with a malicious p...

6.1CVSS6.1AI score0.00107EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/07/22 4:1 p.m.38 views

CVE-2017-20140

CVE-2017-20140 affects Itech Movie Portal Script 7.36. The vulnerability is a reflected cross-site scripting issue in /movie.php triggered by manipulating the f parameter with input like . Exploitation is possible remotely, and public exploits have been disclosed. Root cause lies in unsanitized/u...

6.1CVSS5.2AI score0.00201EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/07/22 4:1 p.m.17 views

CVE-2017-20140 Itech Movie Portal Script movie.php Reflected cross site scripting

A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input leads to basic cross site scripting Reflected. The attack may be launched...

4.3CVSS6.1AI score0.00201EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/15 2:15 p.m.2 views

CVE-2022-20140

In readmultirsp of gattsr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...

10CVSS7.4AI score0.04172EPSS
Exploits0References2
CVE
CVE
added 2022/06/15 1:2 p.m.179 views

CVE-2022-20140

CVE-2022-20140 is a Bluetooth GATT stack vulnerability in Android 12/12L where an out-of-bounds write occurs in read_multi_rsp in gatt_sr.cc due to an incorrect bounds check. This can lead to remote escalation of privilege with no user interaction and requires no additional execution privileges. ...

10CVSS9.1AI score0.04172EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2021/12/09 6:23 p.m.1 views

CVE-2021-20140

creationtimestamp| type| source ---|---|--- 2021-12-09 18:23:58+00:00| seen| https://t.me/cibsecurity/33693...

8.8CVSS8.1AI score0.07766EPSS
Exploits1References1
NVD
NVD
added 2021/12/09 4:15 p.m.12 views

CVE-2021-20140

An unauthenticated command injection vulnerability exists in the parameters of operation 10 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet t...

8.8CVSS0.07766EPSS
Exploits1References1
CVE
CVE
added 2021/12/09 3:22 p.m.36 views

CVE-2021-20140

Summary: CVE-2021-20140 describes an unauthenticated command injection in Gryphon Tower routers. The vulnerability occurs in the controller_server service, specifically in operation 10, where a crafted packet sent to port 9999 from an on-network attacker can execute commands as root. Multiple con...

8.8CVSS9AI score0.07766EPSS
Exploits1References1Affected Software1
Exploit DB
Exploit DB
added 2020/12/21 12:0 a.m.288 views

Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS

Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS Date: 08/01/2020 Exploit Author: Marco Nappi Vendor Homepage: https://www.flexmonster.com/ Version:Flexmonster Pivot Table & Charts 2.7.17 Tested on:Flexmonster Pivot Table & Charts 2.7.17 CVE : CVE-2020-20140...

6.1CVSS6.4AI score0.00626EPSS
Exploits3
Rows per page
Query Builder