CVE-2017-20235

creationtimestamp| type| source ---|---|--- 2026-06-03 12:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnf345rytp2i...

CVE-2025-20235 Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...

CVE-2023-20235

A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an authenticated, remote attacker to access the underlying operating system as the root user. This vulnerability exists because Docke...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : ZeroMQ vulnerabilities (USN-4920-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4920-1 advisory. It was discovered that ZeroMQ incorrectly handled certain application metadata. A remote attacker could use this issue to cause...

CVE-2023-20235

creationtimestamp| type| source ---|---|--- 2023-10-04 20:12:06+00:00| seen| https://t.me/cibsecurity/71611...

CVE-2023-26392 ZDI-CAN-20235: Adobe Substance 3D Stager USD File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2022-20235

creationtimestamp| type| source ---|---|--- 2023-01-27 00:46:53+00:00| seen| https://t.me/cibsecurity/57001...

Photon OS 3.0: Zeromq PHSA-2021-3.0-0232

An update of the zeromq package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0232. The text itself is copyright C VMware, Inc...

CVE-2021-20235

CVE-2021-20235 describes a flaw in ZeroMQ libzmq server before 4.3.3 where the decoder static allocator could have its size changed while using a static buffer, enabling a remote, unauthenticated attacker to trigger a buffer overflow write via crafted requests if CURVE/ZAP authentication is disab...

CVE-2021-20235

There's a flaw in the zeromq server in versions before 4.3.3 in src/decoderallocators.hpp. The decoder static allocator could have its sized changed, but the buffer would remain the same as it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zeromq server...

Debian: Security Advisory (DLA-2588-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2588-1 : zeromq3 security update

Two security issues have been detected in zeromq3. CVE-2021-20234 Memory leak in client induced by malicious servers without CURVE/ZAP. From issue description 1. When a pipe processes a delimiter and is already not in active state but still has an unfinished message, the message is leaked...

Fedora 33 : zeromq (2021-8b3202b783)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-8b3202b783 advisory. - An uncontrolled resource consumption memory leak flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a...

CVE-2019-20235

...

CVE-2019-20235

CVE-2019-20235 entry is rejected and not used, per the initial description.

Atlassian SourceTree 0.5a < 3.0.17 Multiple remote code execution vulnerabilities

The version of Atlassian SourceTree installed on the remote Windows host is version 0.5a prior to 3.0.17. It is, therefore, affected by multiple remote code execution vulnerabilities. - An option injection vulnerability exists in the git submodule component. An unauthenticated, remote attacker ca...

CVE-2018-20235

CVE-2018-20235 affects Atlassian SourceTree for Windows via an argument injection vulnerability in the Mercurial repository handling (filenames) that allows a remote attacker with commit access to a linked Mercurial repo to execute code on the system. Affected versions are SourceTree for Windows ...

Argument Injection via Mercurial hooks in Sourcetree for Windows - CVE-2018-20235

There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. h4. Affected...

Argument Injection via Mercurial hooks in Sourcetree for Windows - CVE-2018-20235

There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. h4. Affected...