19 matches found
MAL-2025-20315 Malicious code in fca-yawa (npm)
The package fca-yawa was found to contain malicious code...
CVE-2024-20315
A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...
CVE-2022-20315
In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...
Cisco IOS XR Software MPLS Pseudowire Interfaces Access Control List Bypass (CSCwf99658)
According to its self-reported version, Cisco IOS XR is affected by a vulnerability. - A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This...
CVE-2024-20315
Cisco IOS XR Software ACL bypass (CVE-2024-20315) affects MPLS/PW ingress ACL processing due to improper assignment of lookup keys to internal interface contexts, allowing unauthenticated remote traffic to access protected resources. Root cause: incorrect key-context mapping. Impact: bypass of co...
CVE-2024-20315
A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts...
CVE-2022-20315
In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...
CVE-2022-20315
In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...
CVE-2022-20315
CVE-2022-20315 affects Android 13 with a missing permission check in ActivityManager, causing disclosure of installed packages via local information disclosure without extra privileges and no user interaction. Affected component: ActivityManager; root cause: inadequate permission check; impact: l...
CVE-2021-20315
A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start n...
CVE-2021-20315
CVE-2021-20315 describes a local, physical-attackable bypass in some gnome-shell versions shipped with CentOS Stream 8 when the Application menu or Window List GNOME extensions are enabled. The flaw lets an attacker on a locked system kill existing applications and start new ones as the locked us...
CVE-2018-20315
creationtimestamp| type| source ---|---|--- 2021-01-07 20:40:50+00:00| seen| https://t.me/cibsecurity/21766...
CVE-2018-20315
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read...
CVE-2018-20315
Foxit Reader before 9.5, and PhantomPDF before 8.3.10 and 9.x before 9.5, has a race condition that can cause a stack-based buffer overflow or an out-of-bounds read...
CVE-2018-20315
CVE-2018-20315 affects Foxit Reader prior to 9.5 and Foxit PhantomPDF prior to 8.3.10 or 9.x prior to 9.5. A race condition in these products can lead to a stack-based buffer overflow or an out-of-bounds read. The available documents identify the vulnerable components and the underlying issue but...
CVE-2019-20315
CVE-2019-20315 entry is rejected/not used; this CVE ID should not be treated as an active vulnerability entry.
Foxit Reader < 9.5 Multiple Vulnerabilities
According to its version, the Foxit Reader application installed on the remote Windows host is prior to 9.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenab...
Foxit PhantomPDF < 9.5 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.5. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's...