22 matches found
CVE-2025-20222
creationtimestamp| type| source ---|---|--- 2025-08-15 11:00:11+00:00| seen| https://t.me/truesecator/7332...
CVE-2022-20222
In readattrvalue of gattdb.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID...
CVE-2019-20222
creationtimestamp| type| source ---|---|--- 2024-03-19 10:04:42+00:00| seen| https://t.me/ctinow/211301...
CVE-2023-20222
creationtimestamp| type| source ---|---|--- 2023-08-17 02:37:01+00:00| seen| https://t.me/cibsecurity/68712...
CVE-2023-20222
CVE-2023-20222 concerns Cisco Prime Infrastructure and Cisco EPNM web-based management interfaces. The issue arises from insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to perform a cross-site scripting (XSS) attack by injecting malicious code into int...
blt-contracting.com Cross Site Scripting vulnerability OBB-2947525
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-20222
creationtimestamp| type| source ---|---|--- 2022-07-13 22:40:17+00:00| seen| https://t.me/cibsecurity/46193...
CVE-2022-20222
CVE-2022-20222 affects Google Android (Android-12/Android-12L). Root cause: in read_attr_value of gatt_db.cc, a missing bounds check allows an out-of-bounds write. Impact: remote code execution without privileges and no user interaction required; attack vector is over the network. Public referenc...
CVE-2020-20222
Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...
CVE-2020-20222
Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...
CVE-2020-20222
Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...
CVE-2020-20222
CVE-2020-20222 affects MikroTik RouterOS (6.44.6 long-term) with a memory corruption in the /nova/bin/sniffer component. An authenticated remote attacker can trigger a Denial of Service via a NULL pointer dereference. This is the explicit impact described across NVD and Red Hat/Nessus-style entri...
CVE-2021-20222
CVE-2021-20222 affects Keycloak before 13.0.0: cross-site scripting via the new account console referrer URL, enabling malicious code execution. Impacts include confidentiality, integrity, and availability. Remediation: upgrade to Keycloak 13.0.0+ (e.g., 13.0.0-1 per Arch Linux ASA); check vendor...
CVE-2019-20222
The CVE-2019-20222 entry affects Support Incident Tracker (SiT!) version 3.67, where the Short Application Name and Application Name fields in the config.php page are vulnerable to cross-site scripting (XSS). Multiple connected sources (NVD entry and Red Hat security advisory) confirm the issue a...
CVE-2018-20222
Airsonic before 10.1.2 is affected by an XML External Entity (XXE) vulnerability discovered during XML parsing. The issue affects versions prior to 10.1.2; the exact root-cause details are not elaborated in the provided documents. Upgrading to 10.1.2 or newer is the stated remediation. No exploit...
CVE-2018-20222
XXE issue in Airsonic before 10.1.2 during parse...
Memory corruption
Unspecified vulnerability in the Open Database Connectivity ODBC component in 7T Interactive Graphical SCADA System IGSS before 9.0.0.11143 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 20222, which triggers memory corruption related to an "invalid structure...
CVE-2011-2214
Unspecified vulnerability in the Open Database Connectivity ODBC component in 7T Interactive Graphical SCADA System IGSS before 9.0.0.11143 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 20222, which triggers memory corruption related to an "invalid structure...
7T Interactive Graphical SCADA System memory corruption
Memory corruption on TCP/20222 data parsing...
IGSS ODBC Server Multiple Uninitialized Pointer Denial of Service Vulnerability
The host is running IGSS ODBC Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodigssodbcserverdosvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ IGSS ODBC Server Multiple Uninitialized Pointer Denial of Service Vulnerability Authors: Veerendra G.G Copyrigh...