Lucene search
K

12 matches found

Circl
Circl
added 2026/02/03 12:15 a.m.3 views

CVE-2026-20403

creationtimestamp| type| source ---|---|--- 2026-02-03 00:15:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw3eiudex22...

6.5CVSS5.7AI score0.00119EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:14 a.m.3 views

CVE-2024-20403

A vulnerability in the web-based management interface of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This vulnerability is due to insufficient...

5.4CVSS6AI score0.00109EPSS
Exploits0References1
Circl
Circl
added 2024/10/23 8:45 p.m.1 views

CVE-2024-20403

creationtimestamp| type| source ---|---|--- 2024-10-23 20:45:20+00:00| seen| https://t.me/cvedetector/8761...

5.4CVSS4.8AI score0.00109EPSS
Exploits0References1
Circl
Circl
added 2022/08/11 6:38 p.m.5 views

CVE-2022-20403

creationtimestamp| type| source ---|---|--- 2022-08-11 18:38:16+00:00| seen| https://t.me/cibsecurity/47989...

9.8CVSS8.7AI score0.00147EPSS
Exploits0References1
CVE
CVE
added 2022/08/11 3:4 p.m.90 views

CVE-2022-20403

CVE-2022-20403 targets Google Pixel devices via the Android modem component. The Pixel security bulletin classifies it as RCE (critical) in the Modem with a high impact; the NVD entry records a CVSSv3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The initial records list Product: And...

9.8CVSS9.1AI score0.00147EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/11 3:4 p.m.15 views

CVE-2022-20403

Product: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A...

9.3AI score0.00147EPSS
Exploits0References1
CVE
CVE
added 2021/02/11 4:30 p.m.36 views

CVE-2021-20403

The Connected documents confirm a CSRF vulnerability in IBM Security Verify Information Queue (ISIQ) versions 1.0.6 and 1.0.7, allowing an attacker to perform malicious/unauthorized actions on behalf of a trusted user. The IBM bulletin notes older browser support affects CSRF protections (SameSit...

8.8CVSS8.6AI score0.00109EPSS
Exploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/10 5:56 p.m.20 views

Security Bulletin: IBM Security Verify Information Queue still supports older browsers that don't enforce CSRF token protections (CVE-2021-20403)

Summary The IBM Security Verify Information Queue ISIQ web application protects against cross-site request forgery CSRF attacks by using the SameSite cookie attribute. However, ISIQ's web browser requirements are not current enough to ensure that this cookie attribute gets consistently used. As o...

8.8CVSS0.7AI score0.00109EPSS
Exploits0Affected Software1
NVD
NVD
added 2020/02/06 3:15 a.m.13 views

CVE-2019-20403

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or not via an information disclosure vulnerability...

5.3CVSS5.1AI score0.00436EPSS
Exploits0References1
CVE
CVE
added 2020/02/06 3:10 a.m.105 views

CVE-2019-20403

The CVE-2019-20403 information-disclosure vulnerability affects Atlassian Jira Server and Data Center versions prior to 8.6.0, allowing an unauthenticated remote attacker to determine whether a Jira project key exists. The issue is a partial confidentiality impact (C/L) with network access and lo...

5.3CVSS5.1AI score0.00436EPSS
Exploits0References1Affected Software2
Atlassian
Atlassian
added 2020/01/29 11:27 p.m.49 views

Information disclosure of project key existence vulnerability in Jira - CVE-2019-20403

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or not via an information disclosure vulnerability...

5.3CVSS5.1AI score0.00436EPSS
Exploits0Affected Software1
Atlassian
Atlassian
added 2020/01/29 11:27 p.m.24 views

Information disclosure of project key existence vulnerability in Jira - CVE-2019-20403

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or not via an information disclosure vulnerability...

5.3CVSS5.1AI score0.00436EPSS
Exploits0
Rows per page
Query Builder