CVE-2020-36933

HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to inject and execute malicious code with elevated LocalSystem privileges...

CVE-2020-36937 MEMU PLAY 3.7.0 - 'MEmusvc' Unquoted Service Path

Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with elevated LocalSystem...

CVE-2020-25031

creationtimestamp| type| source ---|---|--- 2026-01-24 21:24:45+00:00| seen| https://gist.github.com/alon710/62c93b7cd20fa354ff674bdd08077f2a 2026-01-24 22:32:43+00:00| seen| https://gist.github.com/alon710/69a21c5efcf46791eeae6004d7f83945 2026-01-24 22:32:45+00:00| seen|...

CVE-2020-16248

creationtimestamp| type| source ---|---|--- 2026-01-23 07:34:13+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2020/CVE-2020-16248.yaml 2026-01-25 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mdbmvmjmq52c...

Deserialization of Untrusted Data

Overview docling-core is an A python library to define and validate data types in Docling. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the loadfromyaml function. An attacker can execute arbitrary code by providing malicious YAML input to the...

CVE-2025-32056

The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection. First identified o...

CVE-2025-32057

The CVE-2025-32057 entry concerns the Bosch Infotainment ECU in Nissan Leaf ZE1 (2020). The vulnerability arises from using a Redbend OTA service with HTTPS where the SSL engine uses a default configuration, resulting in server root certificate verification being disabled. This can allow an attac...

CVE-2025-32057 Misconfigured SSL/TLS communication of Redbend service for Infotainment ECU

The Infotainment ECU manufactured by Bosch which is installed in Nissan Leaf ZE1 – 2020 uses a Redbend service for over-the-air provisioning and updates. HTTPS is used for communication with the back-end server. Due to usage of the default configuration for the underlying SSL engine, the server...

CVE-2025-32056 Anti-Theft Bypass for Infotainment ECU

The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possible to reveal all 32 corresponding responses by sniffing CAN traffic or by pre-calculating the values, which allow to bypass the protection. First identified o...

Azure Linux 3.0 Security Update: openjpeg2 (CVE-2020-27845)

The version of openjpeg2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-27845 advisory. - There's a flaw in src/lib/openjp2/pi.c of openjpeg in versions prior to 2.4.0. If an attacker is able to...

Azure Linux 3.0 Security Update: LibRaw (CVE-2020-15503)

The version of LibRaw installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-15503 advisory. - LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp,...

Azure Linux 3.0 Security Update: openjpeg2 (CVE-2020-27814)

The version of openjpeg2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-27814 advisory. - A heap-buffer overflow was found in the way openjpeg2 handled certain PNG format files. An attacker could...

Azure Linux 3.0 Security Update: gsl (CVE-2020-35357)

The version of gsl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-35357 advisory. - A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL GNU...

Azure Linux 3.0 Security Update: openjpeg2 (CVE-2020-27823)

The version of openjpeg2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-27823 advisory. - A flaw was found in OpenJPEG's encoder. This flaw allows an attacker to pass specially crafted x,y offset...

Azure Linux 3.0 Security Update: samba (CVE-2020-14383)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-14383 advisory. - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash...

Azure Linux 3.0 Security Update: ceph / libdb (CVE-2020-13435)

The version of ceph / libdb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-13435 advisory. - SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. CVE-2020-13435 Note...

Azure Linux 3.0 Security Update: samba (CVE-2020-14318)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-14318 advisory. - A flaw was found in the way samba handled file and directory permissions. An authenticated user could use thi...

Azure Linux 3.0 Security Update: kata-containers (CVE-2020-25576)

The version of kata-containers installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-25576 advisory. - An issue was discovered in the randcore crate before 0.4.2 for Rust. Casting of byte slices to...

Azure Linux 3.0 Security Update: junit (CVE-2020-15250)

The version of junit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-15250 advisory. - In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information...

Azure Linux 3.0 Security Update: samba (CVE-2020-14323)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-14323 advisory. - A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12....