Lucene search
+L

24 matches found

Circl
Circl
added 2026/07/15 5:11 p.m.10 views

CVE-2026-20150

creationtimestamp| type| source ---|---|--- 2026-07-15 17:11:14+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116925102408110334 2026-07-15 19:01:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpftydweo22 2026-07-16 13:00:29+00:00| seen|...

8.8CVSS6.1AI score0.00222EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/07/15 4:17 p.m.56 views

CVE-2026-20150 Cisco RoomOS Security Hardening Release - Access Control Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

8.8CVSS0.00222EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/07/15 12:0 a.m.14 views

PT-2026-60219

Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description Improper access control issues were identified during an internal security review. These issues fall under the Common Weakness Enumeration CWE Pillar CWE-284, which relates to improper...

9CVSS7.8AI score0.00222EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-20150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins. CVE-2018-20150 Note that Nessus relies o...

6.1CVSS6.9AI score0.05052EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 6:57 a.m.11 views

CVE-2024-20150

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01412526; Issue ID: MSV-2018...

7.5CVSS7AI score0.00757EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:6 p.m.8 views

CVE-2021-20150

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and a user may view information as Admin by manually browsing to the setup wizard and forcing it to redirect to the desired page...

5.3CVSS6.5AI score0.4006EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:3 a.m.8 views

CVE-2019-20150

In TreasuryXpress 19191105, a logged-in user can discover saved credentials, even though the UI hides them. Using functionality within the application and a malicious host, it is possible to force the application to expose saved SSH/SFTP credentials. This can be done by using the application's...

6.5CVSS6.9AI score0.00914EPSS
Exploits1References1
Circl
Circl
added 2025/04/16 8:14 p.m.8 views

CVE-2025-20150

creationtimestamp| type| source ---|---|--- 2025-04-16 20:14:38+00:00| seen| https://t.me/cvedetector/23145...

5.3CVSS4.8AI score0.00501EPSS
Exploits0References1
NVD
NVD
added 2025/01/06 4:15 a.m.14 views

CVE-2024-20150

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01412526; Issue ID: MSV-2018...

7.5CVSS0.00757EPSS
Exploits0References1
Circl
Circl
added 2025/01/06 4:2 a.m.9 views

CVE-2024-20150

creationtimestamp| type| source ---|---|--- 2025-01-06 04:02:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113779420395290764 2025-01-06 04:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2bkvp6p22a 2025-01-06 04:42:49+00:00| seen|...

7.5CVSS4.8AI score0.00757EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/01/06 3:17 a.m.10 views

CVE-2024-20150

In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01412526; Issue ID: MSV-2018...

7AI score0.00757EPSS
Exploits0References1
CVE
CVE
added 2025/01/06 3:17 a.m.88 views

CVE-2024-20150

CVE-2024-20150 affects the Modem component in MediaTek chipsets. A logic error in the Modem can cause a system crash, enabling remote denial of service without privileges and without user interaction. The CVSS v3.1 base score is 7.5 (Network, Privileges Required: None, User Interaction: None, Ava...

7.5CVSS7.2AI score0.00757EPSS
Exploits0References1Affected Software5
Circl
Circl
added 2023/04/27 9:58 a.m.10 views

CVE-2021-20150

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-20150.yaml...

5.3CVSS6.9AI score0.4006EPSS
Exploits0References1
CVE
CVE
added 2023/04/05 12:0 a.m.64 views

CVE-2023-20150

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers are affected by multiple cross-site scripting (XSS) vulnerabilities in the web-based management interface due to insufficient input validation. The issues are exploitable by sending crafted HTTP requests and convincing a u...

6.1CVSS6.1AI score0.00433EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/12/28 6:31 p.m.60 views

CVE-2017-20150

The CVE-2017-20150 entry describes a SQL injection vulnerability in the Challenge website. The issue is triggered by manipulating input in unknown processing, with a high impact on confidentiality, integrity, and availability. The initial description references a patch named f1644b1d3502e5aa5284f...

8.8CVSS7.4AI score0.00656EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2022/03/16 12:0 a.m.49 views

showdoc has unspecified vulnerabilities (CNVD-2022-20150)

showdoc is open source and a great tool for IT teams to share documents online. showdoc has a security vulnerability and no details of the vulnerability are currently available...

9CVSS1.9AI score0.00807EPSS
Exploits1References1
CVE
CVE
added 2021/12/30 9:31 p.m.87 views

CVE-2021-20150

Affected product: Trendnet AC2600 TEW-827DRU (firmware 2.08B01). Vulnerability: Improper discloses information via redirection from the setup wizard, enabling an unauthenticated user to bypass authentication and view Admin-level information by forcing the wizard to redirect to a targeted page. Th...

5.3CVSS5.5AI score0.4006EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/08/20 12:35 p.m.55 views

CVE-2019-20150

CVE-2019-20150 affects TreasuryXpress 19191105. A logged-in user can reveal saved SSH/SFTP credentials by manipulating the app’s editor to point the SFTP Host IP at a malicious host and then invoking Check Connectivity, causing the application to send saved credentials to the attacker-controlled ...

6.5CVSS6.4AI score0.00914EPSS
Exploits1References1Affected Software1
Debian
Debian
added 2019/03/01 7:3 a.m.101 views

[SECURITY] [DSA 4401-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4401-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 01, 2019 https://www.debian.org/security/faq -...

7.5CVSS0.4AI score0.82736EPSS
Exploits8
Debian
Debian
added 2019/03/01 7:3 a.m.281 views

[SECURITY] [DSA 4401-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4401-1 [email protected] https://www.debian.org/security/ Sebastien Delafond March 01, 2019 https://www.debian.org/security/faq -...

9.8CVSS8AI score0.82736EPSS
Exploits8
Rows per page
Query Builder