Lucene search
+L

19 matches found

OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-20315 Malicious code in fca-yawa (npm)

The package fca-yawa was found to contain malicious code...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 7:49 a.m.8 views

CVE-2024-20315

A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...

5.8CVSS7AI score0.00519EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:20 p.m.9 views

CVE-2022-20315

In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

3.3CVSS6.2AI score0.00089EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/08/21 12:0 a.m.13 views

Cisco IOS XR Software MPLS Pseudowire Interfaces Access Control List Bypass (CSCwf99658)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability. - A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This...

5.8CVSS6.1AI score0.00519EPSS
SaveExploits0References4
CVE
CVE
added 2024/03/13 4:45 p.m.62 views

CVE-2024-20315

Cisco IOS XR Software ACL bypass (CVE-2024-20315) affects MPLS/PW ingress ACL processing due to improper assignment of lookup keys to internal interface contexts, allowing unauthenticated remote traffic to access protected resources. Root cause: incorrect key-context mapping. Impact: bypass of co...

5.8CVSS5.7AI score0.00519EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/13 4:45 p.m.38 views

CVE-2024-20315

A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...

5.8CVSS6AI score0.00519EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/12 3:15 p.m.4 views

CVE-2022-20315

In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

3.3CVSS5.9AI score0.00089EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/12 3:15 p.m.25 views

CVE-2022-20315

In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

3.3CVSS0.00089EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/11 3:25 p.m.61 views

CVE-2022-20315

CVE-2022-20315 affects Android 13 with a missing permission check in ActivityManager, causing disclosure of installed packages via local information disclosure without extra privileges and no user interaction. Affected component: ActivityManager; root cause: inadequate permission check; impact: l...

3.3CVSS3.7AI score0.00089EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/02/18 6:15 p.m.17 views

CVE-2021-20315

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start n...

6.1CVSS6.5AI score
SaveExploits0References1
CVE
CVE
added 2022/02/18 12:0 a.m.76 views

CVE-2021-20315

CVE-2021-20315 describes a local, physical-attackable bypass in some gnome-shell versions shipped with CentOS Stream 8 when the Application menu or Window List GNOME extensions are enabled. The flaw lets an attacker on a locked system kill existing applications and start new ones as the locked us...

6.1CVSS6AI score0.00196EPSS
SaveExploits0References1Affected Software1
Circl
Circl
added 2021/01/07 8:40 p.m.7 views

CVE-2018-20315

creationtimestamp| type| source ---|---|--- 2021-01-07 20:40:50+00:00| seen| https://t.me/cibsecurity/21766...

8.1CVSS7.7AI score0.00816EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/07 6:15 p.m.3 views

CVE-2018-20315

Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read...

8.1CVSS6.2AI score0.00816EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2021/01/07 5:5 p.m.47 views

CVE-2018-20315

Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read...

8.1CVSS7.9AI score0.00816EPSS
SaveExploits1References1
CVE
CVE
added 2021/01/07 5:5 p.m.82 views

CVE-2018-20315

CVE-2018-20315 affects Foxit Reader prior to 9.5 and Foxit PhantomPDF prior to 8.3.10 or 9.x prior to 9.5. A race condition in these products can lead to a stack-based buffer overflow or an out-of-bounds read. The available documents identify the vulnerable components and the underlying issue but...

8.1CVSS8.1AI score0.00816EPSS
SaveExploits1References1Affected Software2
Cvelist
Cvelist
added 2020/01/02 8:33 p.m.12 views

CVE-2019-20315

...

SaveExploits0
CVE
CVE
added 2020/01/02 8:33 p.m.42 views

CVE-2019-20315

CVE-2019-20315 entry is rejected/not used; this CVE ID should not be treated as an active vulnerability entry.

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/11/15 12:0 a.m.42 views

Foxit Reader < 9.5 Multiple Vulnerabilities

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 9.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenab...

8.1CVSS7.1AI score0.00863EPSS
SaveExploits8References9
Tenable Nessus
Tenable Nessus
added 2019/11/15 12:0 a.m.37 views

Foxit PhantomPDF < 9.5 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...

8.1CVSS7.6AI score0.00863EPSS
SaveExploits8References9
Rows per page
Query Builder