15 matches found
CVE-2022-20287
In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2024-20287
CVE-2024-20287 affects Cisco WAP371 Wireless-AC/N Dual Radio Access Point web-based management interface. Affected: versions prior to 1.3.0.8 (per PT-2024-1591). Vulnerability: authenticated, remote command injection due to improper validation of user input in the management web UI; successful ex...
Cisco WAP371 Wireless Access Point Command Injection (cisco-sa-sb-wap-inject-bHStWgXO)
According to its self-reported version, Cisco WAP371 Wireless Access Point Command Injection is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid188066;...
CVE-2024-20287
creationtimestamp| type| source ---|---|--- 2024-01-11 16:30:05+00:00| seen| https://t.me/truesecator/5283 2024-01-17 18:27:34+00:00| seen| https://t.me/ctinow/169410 2024-01-28 15:56:52+00:00| seen| https://t.me/ctinow/174973...
CVE-2019-20287
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during the year 2019. Notes: none...
CVE-2021-20287
CVE-2021-20287 entry is rejected/not used; the CNA withdrawn it and it is not a security issue.
CVE-2022-20287
In AppSearchManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
CVE-2022-20287
CVE-2022-20287 affects Android 13, specifically the AppSearchManagerService. The issue lets a local attacker determine whether an app is installed without query permissions via a side-channel information disclosure, causing local information disclosure with no extra execution privileges needed. E...
Yccms Remote Code Execution (CVE-2020-20287)
A remote code execution vulnerability exists in Yccms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2020-20287
creationtimestamp| type| source ---|---|--- 2021-02-01 21:25:11+00:00| seen| https://t.me/cibsecurity/22912...
CVE-2020-20287
Unrestricted file upload vulnerability in the yccms 3.3 project. The xhUp function's improper judgment of the request parameters, triggers remote code execution...
CVE-2020-20287
Unrestricted file upload vulnerability in the yccms 3.3 project. The xhUp function's improper judgment of the request parameters, triggers remote code execution...
CVE-2020-20287
CVE-2020-20287 affects the yccms 3.3 project, with an unrestricted file upload vulnerability in the internal xhUp function caused by its improper judgment of request parameters. This can lead to remote code execution. Exploitation details are not fully provided in the initial documents, but multi...