Lucene search
K

62 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:34 p.m.1 views

CVE-2022-20197

In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS6.8AI score0.00013EPSS
Exploits0References1
Circl
Circl
added 2025/05/07 9:31 p.m.14 views

CVE-2025-20197

creationtimestamp| type| source ---|---|--- 2025-05-07 21:31:49+00:00| seen| https://t.me/cvedetector/24749 2025-05-08 04:22:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15471 2025-05-08 10:58:21+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lonqx6uh572s 2025-05-08...

8.2CVSS4.8AI score0.00082EPSS
Exploits0References4
CVE
CVE
added 2025/05/07 5:39 p.m.58 views

CVE-2025-20197

This CVE (CVE-2025-20197) affects Cisco IOS XE Software and concerns a CLI input-validation flaw in config processing that enables a locally authenticated attacker with privilege level 15 to escalate to root on the device OS. The vulnerability arises from insufficient input validation when handli...

8.2CVSS6.6AI score0.00082EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/07 5:39 p.m.20 views

CVE-2025-20197

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

6.7CVSS6.6AI score0.00082EPSS
Exploits0References1
CBLMariner
CBLMariner
added 2025/04/23 3:8 p.m.6 views

CVE-2021-20197 affecting package crash for versions less than 8.0.4-4

CVE-2021-20197 affecting package crash for versions less than 8.0.4-4. An upgraded version of the package is available that resolves this issue...

6.3CVSS7.3AI score0.00115EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/04/11 11:55 a.m.8 views

CVE-2017-20197

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

7.5CVSS7.7AI score0.00148EPSS
Exploits0References1
Circl
Circl
added 2025/04/09 11:47 a.m.2 views

CVE-2017-20197

creationtimestamp| type| source ---|---|--- 2025-04-09 11:47:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11042 2025-04-09 14:15:59+00:00| seen| https://t.me/cvedetector/22557...

7.5CVSS7.3AI score0.00148EPSS
Exploits0References2
OSV
OSV
added 2025/04/09 11:15 a.m.3 views

CVE-2017-20197

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

6.9CVSS7.6AI score
Exploits0References3
NVD
NVD
added 2025/04/09 11:15 a.m.10 views

CVE-2017-20197

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

7.5CVSS0.00148EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/04/09 11:0 a.m.15 views

CVE-2017-20197 propanetank Roommate-Bill-Tracking login.php sql injection

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

7.5CVSS0.00148EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/04/09 11:0 a.m.5 views

CVE-2017-20197 propanetank Roommate-Bill-Tracking login.php sql injection

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

7.5CVSS7.7AI score0.00148EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-20197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these...

6.3CVSS7.5AI score0.00115EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2025/02/04 12:0 a.m.12 views

SUSE: Security Advisory (SUSE-SU-2025:0325-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01988EPSS
Exploits0References17
Circl
Circl
added 2023/12/18 12:37 p.m.0 views

CVE-2019-20197

creationtimestamp| type| source ---|---|--- 2023-12-18 12:37:35+00:00| seen| https://t.me/arpsyndicate/1984 2024-03-19 08:07:05+00:00| seen| https://t.me/ctinow/211228...

9CVSS8.2AI score0.36023EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.49 views

RockyLinux 8 : binutils (RLSA-2021:4364)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4364 advisory. binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c readsection CVE-2021-3487 binutils: Race window allows...

6.3CVSS7AI score0.00327EPSS
Exploits2References14
Tenable Nessus
Tenable Nessus
added 2023/09/11 12:0 a.m.19 views

Amazon Linux AMI : clamav (ALAS-2023-1820)

The version of clamav installed on the remote host is prior to 0.103.9-1.55. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1820 advisory. A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated,...

7.5CVSS6.3AI score0.005EPSS
Exploits0References4
Amazon
Amazon
added 2023/09/07 12:0 a.m.2 views

Important: clamav

Issue Overview: A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a...

7.5CVSS6.8AI score0.005EPSS
Exploits0
Amazon
Amazon
added 2023/09/07 12:0 a.m.18 views

Important: clamav

Issue Overview: A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to an incorrect check for completion when a...

7.5CVSS6.3AI score0.005EPSS
Exploits0
OSV
OSV
added 2023/09/02 11:5 a.m.1 views

OESA-2023-1557 clamav security update

Clam AntiVirus clamav is an open source antivirus engine for detecting trojans, viruses, malware and other malicious threats. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command...

7.5CVSS7AI score0.005EPSS
Exploits0References2
OSV
OSV
added 2023/09/02 11:5 a.m.1 views

OESA-2023-1560 clamav security update

Clam AntiVirus clamav is an open source antivirus engine for detecting trojans, viruses, malware and other malicious threats. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command...

7.5CVSS7AI score0.005EPSS
Exploits0References2
Rows per page
Query Builder