CVE-2026-20238

creationtimestamp| type| source ---|---|--- 2026-05-20 18:54:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcle4nvvp2h...

CVE-2025-20238

A vulnerability in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this...

CVE-2025-20238

creationtimestamp| type| source ---|---|--- 2025-08-14 17:02:54+00:00| seen| Telegram/DbHLrXURoa2ZqW5uns9hSRQRXB4AqVU8gbs7c1yaRMkv-0s...

CVE-2023-20238

A vulnerability in the single sign-on SSO implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected system. This vulnerability is due to th...

Oracle Linux 8 : qt5-qtbase (ELSA-2024-3056)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3056 advisory. - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25725 Tenable has extracted the preceding description block...

CVE-2023-20238

creationtimestamp| type| source ---|---|--- 2023-09-06 22:18:20+00:00| seen| https://t.me/cibsecurity/70035 2023-09-07 15:40:59+00:00| seen| https://t.me/informationsecuritychannel/50599 2023-09-08 13:40:05+00:00| seen| https://t.me/truesecator/4826 2023-09-08 14:07:38+00:00| seen|...

CVE-2023-20238

CVE-2023-20238 affects Cisco BroadWorks Application Delivery Platform and BroadWorks Xtended Services Platform. The issue is an authentication bypass in the SSO token validation logic, allowing an unauthenticated, remote attacker to forge credentials and access the system. Potential impacts inclu...

CVE-2019-20238

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during the year 2019. Notes: none...

CVE-2022-20238

creationtimestamp| type| source ---|---|--- 2022-07-13 22:37:00+00:00| seen| https://t.me/cibsecurity/46177...

CVE-2022-20238

'remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

CVE-2022-20238

CVE-2022-20238 describes a kernel memory mapping flaw in Android where remap_pfn_range can map memory outside the intended region because vma->vm_page_prot is user-controllable. The result is a potential writable mapping of kernel memory, enabling exploitation per several sources (Android kern...

CVE-2021-20238

creationtimestamp| type| source ---|---|--- 2022-04-02 02:26:15+00:00| seen| https://t.me/cibsecurity/40054...

CVE-2019-20238

...

CVE-2019-20238

CVE-2019-20238 is rejected and not used (as stated in the description).

CVE-2018-20238

Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version 3.3.4 allow remote attackers to authenticate using an expired user session via an insufficient session expiration vulnerability...

CVE-2018-20238

CVE-2018-20238 affects Atlassian Crowd: remote attackers can authenticate using an expired user session due to insufficient session expiration. Affected versions are Crowd prior to 3.2.7 and 3.3.0 up to 3.3.4. This is described as an authentication issue in various REST resources, enabling sessio...

Insufficient Session Expiration of user sessions - CVE-2018-20238

Various rest resources in Atlassian Crowd before version 3.2.7 and from version 3.3.0 before version 3.3.4 allow remote attackers to authenticate using an expired user session via an insufficient session expiration vulnerability...