CVE-2026-20164

CVE-2026-20164 affects Splunk Enterprise and Splunk Cloud Platform. A low-privileged user not in admin/power roles can access the REST endpoint /splunkd/__raw/servicesNS/-/-/configs/conf-passwords, exposing hashed or plaintext passwords from passwords.conf due to improper access control. Impact i...

CVE-2026-20164 Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise

In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, 10.0.2503.11, and 9.3.2411.123, a low-privileged user that does not hold the "admin" or "power" Splunk roles could access the...

CVE-2019-20164

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gfisomboxdel in isomedia/boxfuncs.c...

CVE-2022-20164

Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A...

CVE-2025-20164

creationtimestamp| type| source ---|---|--- 2025-05-07 18:41:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lom2f5wvql2p 2025-05-08 04:22:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15467...

CVE-2025-20164

A vulnerability in the Cisco Industrial Ethernet Switch Device Manager DM of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges. This vulnerability is due to insufficient validation of authorizations for authenticated users. An attacker could exploit this...

CVE-2025-20164

A vulnerability in the Cisco Industrial Ethernet Switch Device Manager DM of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges. This vulnerability is due to insufficient validation of authorizations for authenticated users. An attacker could exploit this...

CVE-2019-20164

creationtimestamp| type| source ---|---|--- 2024-03-18 16:46:40+00:00| seen| https://t.me/ctinow/210720...

Cisco Identity Services Engine Command Injection Vulnerability (cisco-sa-ise-injection-sRQnsEU9)

According to its self-reported version, Cisco Identity Services Engine is affected by a command injection vulnerability, which could allow an authenticated remote attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these...

CVE-2023-20164

creationtimestamp| type| source ---|---|--- 2023-05-18 07:32:08+00:00| seen| https://t.me/cibsecurity/64369...

CVE-2023-20164 Cisco Identity Services Engine Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow an authenticated attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid credentials on an affected...

CVE-2023-20164

CVE-2023-20164 affects Cisco Identity Services Engine (ISE). The vulnerability is a command injection in ISE that could allow an authenticated attacker (with valid credentials on an affected device) to execute commands on the underlying OS and potentially gain root privileges. Exploitation detail...

CVE-2023-20164 Cisco Identity Services Engine Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow an authenticated attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit these vulnerabilities, an attacker must have valid credentials on an affected...

CVE-2017-20164

creationtimestamp| type| source ---|---|--- 2023-01-08 06:13:12+00:00| seen| https://t.me/cibsecurity/56122 2025-04-08 20:46:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11009...

CVE-2017-20164

A vulnerability was found in Symbiote Seed up to 6.0.2. It has been classified as critical. Affected is the function onBeforeSecurityLogin of the file code/extensions/SecurityLoginExtension.php of the component Login. The manipulation of the argument URL leads to open redirect. It is possible to...

CVE-2017-20164

Symbiote Seed

CVE-2022-20164

creationtimestamp| type| source ---|---|--- 2022-06-15 18:20:35+00:00| seen| https://t.me/cibsecurity/44514...

CVE-2022-20164

Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A...

CVE-2022-20164

Product: AndroidVersions: Android kernelAndroid ID: A-204891956References: N/A...

CVE-2021-20164

creationtimestamp| type| source ---|---|--- 2021-12-31 00:34:42+00:00| seen| https://t.me/cibsecurity/34782...