Lucene search
K

14 matches found

Circl
Circl
added 2025/10/03 3:37 p.m.3 views

CVE-2025-20371

creationtimestamp| type| source ---|---|--- 2025-10-03 15:37:06+00:00| seen| https://bsky.app/profile/ransomnews.online/post/3m2cfju6rw42x 2025-10-04 02:06:27+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3m2dipb5bv52k...

8.8CVSS4.8AI score0.00083EPSS
Exploits0References2
OSV
OSV
added 2025/10/01 5:15 p.m.0 views

CVE-2025-20371

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery SSRF potentially letting an attacker perform REST API calls on...

8.8CVSS5.8AI score0.00083EPSS
Exploits0References1
NVD
NVD
added 2025/10/01 5:15 p.m.1 views

CVE-2025-20371

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery SSRF potentially letting an attacker perform REST API calls on...

8.8CVSS0.00083EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:20 p.m.4 views

CVE-2022-20371

In dmbowdtr and related functions of dm-bow.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.4CVSS7.2AI score0.00015EPSS
Exploits0References1
Circl
Circl
added 2024/11/06 4:30 p.m.2 views

CVE-2024-20371

creationtimestamp| type| source ---|---|--- 2024-11-06 16:30:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113436958723505420 2024-11-07 14:20:08+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113442108664352339 2024-11-07 14:20:08+00:00| seen|...

5.3CVSS6.9AI score0.00146EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/11/06 4:28 p.m.11 views

CVE-2024-20371 Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability

A vulnerability in the access control list ACL programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. This vulnerability exists because ACL deny rules are not properly...

5.3CVSS7AI score0.00146EPSS
Exploits0References1
CVE
CVE
added 2024/11/06 4:28 p.m.48 views

CVE-2024-20371

Cisco Nexus 3550‑F Switches contain an ACL denial rule enforcement issue that may allow an unauthenticated, remote attacker to send traffic to the device management interface. The root cause is that ACL deny rules are not properly enforced at reboot. Affected behavior: traffic that should be bloc...

5.3CVSS5.3AI score0.00146EPSS
Exploits0References1
Circl
Circl
added 2022/08/11 6:32 p.m.0 views

CVE-2022-20371

creationtimestamp| type| source ---|---|--- 2022-08-11 18:32:07+00:00| seen| https://t.me/cibsecurity/47966...

6.4CVSS6.3AI score0.00015EPSS
Exploits0References1
CVE
CVE
added 2022/08/11 3:0 p.m.83 views

CVE-2022-20371

Summary: CVE-2022-20371 affects the Android kernel, specifically the dm_bow_dtr path in dm-bow.c, due to a race-condition use-after-free. The vulnerability enables local escalation of privilege to System by exploiting a race condition, with no user interaction required. Documents consistently des...

6.4CVSS6.5AI score0.00015EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/06/02 8:40 p.m.64 views

CVE-2021-20371

CVE-2021-20371 describes an information-disclosure vulnerability in IBM Jazz Foundation and IBM Engineering products where error messages returned in the browser could reveal sensitive data. Affected products include IBM Jazz Foundation and Engineering Lifecycle Management suite (ELM) and related...

6.5CVSS6.5AI score0.00253EPSS
Exploits0References2Affected Software9
OSV
OSV
added 2018/12/23 2:29 a.m.2 views

CVE-2018-20371

PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers to bypass intended GET restrictions via a brute-force approach, as demonstrated by "GET /login.htmlpasswd1" and "GET /login.htmlpasswd2" and so on...

9.8CVSS5.8AI score0.00368EPSS
Exploits3References1
CVE
CVE
added 2018/12/23 2:0 a.m.41 views

CVE-2018-20371

CVE-2018-20371 affects PhotoRange Photo Vault 1.2. The issue is failure to securely handle authentication by appending the password to the URI, enabling brute-force like access to GET-restricted pages (e.g., /login.html__passwd1, /login.html__passwd2). Multiple records (NVD, Red Hat advisory, CVE...

9.8CVSS9.4AI score0.00368EPSS
Exploits3References1Affected Software1
Vulnerability Lab
Vulnerability Lab
added 2018/01/16 12:0 a.m.45 views

Photo Vault 1.2 iOS - Insecure Authentication Vulnerability

Document Title: =============== Photo Vault 1.2 iOS - Insecure Authentication Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2110 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20371 CVE-ID: ======= CVE-2018-20371 Release Date:...

9.8CVSS0.2AI score0.00368EPSS
Exploits3
Vulnerability Lab
Vulnerability Lab
added 2018/01/16 12:0 a.m.57 views

Photo Vault v1.2 iOS - Insecure Authentication Vulnerability

Document Title: =============== Photo Vault v1.2 iOS - Insecure Authentication Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2110 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20371 CVE-ID: ======= CVE-2018-20371 Release Date:...

5CVSS9.2AI score0.00368EPSS
Exploits3
Rows per page
Query Builder