30 matches found
CVE-2026-20140
creationtimestamp| type| source ---|---|--- 2026-02-21 15:15:09+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mfew2hlsmk2f 2026-02-21 15:26:03+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mfewnwdnx42s...
CVE-2024-20140
In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09270402; Issue ID: MSV-2020...
CVE-2022-20140
In readmultirsp of gattsr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...
CVE-2020-20140
Cross Site Scripting XSS vulnerability in Remote Report component under the Open menu in Flexmonster Pivot Table & Charts 2.7.17...
CVE-2017-20140
A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input leads to basic cross site scripting Reflected. The attack may be launched...
CVE-2025-20140
A vulnerability in the Wireless Network Control daemon wncd of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, adjacent wireless attacker to cause a denial of service DoS condition. This vulnerability is due to improper memory management. An attacker could...
CVE-2025-20140
CVE-2025-20140 affects Cisco IOS XE Software for Wireless LAN Controllers, specifically the Wireless Network Control daemon (wncd). The issue is due to improper memory management in wncd, which can be exploited by an unauthenticated, adjacent wireless attacker by sending IPv6 network requests fro...
CVE-2024-20140
In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09270402; Issue ID: MSV-2020...
CVE-2024-20140
In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09270402; Issue ID: MSV-2020...
CVE-2024-20140
In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09270402; Issue ID: MSV-2020...
CVE-2019-20140
creationtimestamp| type| source ---|---|--- 2024-03-18 15:46:27+00:00| seen| https://t.me/ctinow/210664 2026-04-24 14:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mkap5vw4tm2w...
CVE-2023-20140
Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers are affected by multiple XSS vulnerabilities in the web-based management interface caused by insufficient input validation. Exploitation requires only network access and persuading a user to visit a page with a malicious p...
CVE-2017-20140
CVE-2017-20140 affects Itech Movie Portal Script 7.36. The vulnerability is a reflected cross-site scripting issue in /movie.php triggered by manipulating the f parameter with input like . Exploitation is possible remotely, and public exploits have been disclosed. Root cause lies in unsanitized/u...
CVE-2017-20140 Itech Movie Portal Script movie.php Reflected cross site scripting
A vulnerability was found in Itech Movie Portal Script 7.36. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /movie.php. The manipulation of the argument f with the input leads to basic cross site scripting Reflected. The attack may be launched...
CVE-2022-20140
In readmultirsp of gattsr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...
CVE-2022-20140
CVE-2022-20140 is a Bluetooth GATT stack vulnerability in Android 12/12L where an out-of-bounds write occurs in read_multi_rsp in gatt_sr.cc due to an incorrect bounds check. This can lead to remote escalation of privilege with no user interaction and requires no additional execution privileges. ...
CVE-2021-20140
creationtimestamp| type| source ---|---|--- 2021-12-09 18:23:58+00:00| seen| https://t.me/cibsecurity/33693...
CVE-2021-20140
An unauthenticated command injection vulnerability exists in the parameters of operation 10 in the controllerserver service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet t...
CVE-2021-20140
Summary: CVE-2021-20140 describes an unauthenticated command injection in Gryphon Tower routers. The vulnerability occurs in the controller_server service, specifically in operation 10, where a crafted packet sent to port 9999 from an on-network attacker can execute commands as root. Multiple con...
Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS
Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS Date: 08/01/2020 Exploit Author: Marco Nappi Vendor Homepage: https://www.flexmonster.com/ Version:Flexmonster Pivot Table & Charts 2.7.17 Tested on:Flexmonster Pivot Table & Charts 2.7.17 CVE : CVE-2020-20140...