CVE-2017-20248

creationtimestamp| type| source ---|---|--- 2026-06-09 13:02:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuazhzkb22l...

CVE-2017-20248

CVE-2017-20248 affects the WordPress plugin Apptha Slider Gallery 1.0. It describes a path traversal vulnerability in asgallDownload.php that lets unauthenticated attackers download arbitrary files by supplying directory traversal sequences (e.g., ../) via the imgname parameter. CVSS scores in th...

CVE-2025-20248

creationtimestamp| type| source ---|---|--- 2025-09-10 16:34:32+00:00| seen| https://gist.github.com/Darkcrai86/93d1a3260721908b19cc37efd0c96de7 2025-09-11 14:44:47+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3lykye3vdpw2t 2025-09-11 15:21:11+00:00| seen|...

CVE-2023-20248

creationtimestamp| type| source ---|---|--- 2025-04-24 11:49:50+00:00| seen| https://bsky.app/profile/thewhynet.bsky.social/post/3lnkncecuyg2e...

CVE-2023-20248

CVE-2023-20248 concerns Cisco TelePresence Management Suite (TMS) — Web-based management interface. The issue is an XSS vulnerability caused by insufficient input validation, exploitable by an authenticated, remote attacker who can insert malicious data in a specific data field in the interface. ...

MikroTik RouterOs Uncontrolled Resource Consumption (CVE-2020-20248)

Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the memtest process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU. This plugin only works with Tenable.ot. Please visit...

CVE-2019-20248

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during the year 2019. Notes: none...

CVE-2022-20248

creationtimestamp| type| source ---|---|--- 2022-08-11 18:32:15+00:00| seen| https://t.me/cibsecurity/47973...

CVE-2022-20248

In Settings, there is a possible way to connect to an open network bypassing DISALLOWCONFIGWIFI restriction due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20248

CVE-2022-20248 affects Android 13 where a logic error in the Settings code can bypass DISALLOW_CONFIG_WIFI, enabling a local escalation of privilege to connect to an open network without user interaction. Affected component: Settings; impact: local Privilege Elevation with High confidentiality/in...

MikroTik RouterOS < 6.47 Multiple Vulnerabilities

MikroTik RouterOS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:mikrotik:routeros"; if...

CVE-2020-20248

creationtimestamp| type| source ---|---|--- 2021-07-19 22:32:37+00:00| seen| https://t.me/cibsecurity/26263...

CVE-2020-20248

Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the memtest process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU...

CVE-2020-20248

Summary of CVE-2020-20248 : MikroTik RouterOS before stable 6.47 suffers from uncontrolled resource consumption in the memtest process. An authenticated remote attacker can cause a Denial of Service by overloading the system CPU. Affected software is MikroTik RouterOS (versions prior to 6.47). Th...

UBUNTU-CVE-2021-20248

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2019-20248

...

CVE-2019-20248

CVE-2019-20248 is rejected/not used per the Initial Description.

CVE-2018-20248

Foxit Quick PDF Library (prior to version 16.12) is affected by CVE-2018-20248, where loading a malformed or malicious PDF containing invalid xref table pointers or data via LoadFromFile, LoadFromString, LoadFromStream, DAOpenFile, or DAOpenFileReadOnly can cause an access violation due to out-of...

CVE-2021-20248

CVE-2021-20248 entry is rejected and not used.