Lucene search
K

15 matches found

Nuclei
Nuclei
added yesterday12 views

Cisco Finesse - Server-Side Request Forgery (SSRF)

Cisco Finesse contains an SSRF caused by insufficient validation of user-supplied input in HTTP requests, letting unauthenticated remote attackers access limited sensitive information, exploit requires sending crafted HTTP requests. id: CVE-2024-20404 info: name: Cisco Finesse - Server-Side Reque...

7.2CVSS5.5AI score0.81131EPSS
Exploits1References2
Circl
Circl
added 2026/02/02 11:29 p.m.2 views

CVE-2026-20404

creationtimestamp| type| source ---|---|--- 2026-02-02 23:29:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvytiqzay2x 2026-02-02 23:52:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw24vyjnq2v...

6.5CVSS4.8AI score0.00028EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/07/08 12:0 a.m.5 views

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-20404)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20404 advisory. - Add Zen34 clients Borislav Petkov AMD Orabug: 38129825 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim...

5.6CVSS7.6AI score0.00098EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 11:35 p.m.2 views

CVE-2022-20404

Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A...

7.5CVSS6.9AI score0.00123EPSS
Exploits0References1
Circl
Circl
added 2024/06/07 1:52 p.m.3 views

CVE-2024-20404

creationtimestamp| type| source ---|---|--- 2024-06-07 13:52:10+00:00| published-proof-of-concept| https://t.me/HackingInsights/1894 2024-07-03 15:44:53+00:00| published-proof-of-concept| https://t.me/HackingInsights/4685 2024-10-07 18:09:24+00:00| published-proof-of-concept|...

7.2CVSS5.7AI score0.81131EPSS
In wildExploits1References19
Circl
Circl
added 2022/08/11 6:38 p.m.1 views

CVE-2022-20404

creationtimestamp| type| source ---|---|--- 2022-08-11 18:38:17+00:00| seen| https://t.me/cibsecurity/47990...

7.5CVSS7.3AI score0.00123EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/11 3:15 p.m.3 views

CVE-2022-20404

Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A...

7.5CVSS5.8AI score0.00123EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/08/11 3:4 p.m.8 views

CVE-2022-20404

Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A...

7.6AI score0.00123EPSS
Exploits0References1
CVE
CVE
added 2022/08/11 3:4 p.m.90 views

CVE-2022-20404

CVE-2022-20404 is listed in Pixel bulletin data as affecting Android devices via the Modem component (Type: Information disclosure; Severity: Moderate). The vulnerable entry maps to CVE-2022-20404 with Android kernel context in the initial doc, but Pixel security bulletin categorizes it under the...

7.5CVSS7.4AI score0.00123EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2021/02/11 8:42 p.m.1 views

CVE-2021-20404

creationtimestamp| type| source ---|---|--- 2021-02-11 20:42:55+00:00| seen| https://t.me/cibsecurity/23460...

5.3CVSS4.3AI score0.0031EPSS
Exploits0References1
OSV
OSV
added 2021/02/11 5:15 p.m.0 views

CVE-2021-20404

IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookie value that could prevent future logins. IBM X-Force ID: 196078...

5.3CVSS5.8AI score
Exploits0References2
CVE
CVE
added 2021/02/11 4:30 p.m.35 views

CVE-2021-20404

CVE-2021-20404 affects IBM Security Verify Information Queue (ISIQ) versions 1.0.6 and 1.0.7. The root cause is insufficient protection of session cookies, allowing modification that can cause login failures and a denial of service. The IBM advisory notes that starting with v10.0.0 the safeguards...

5.3CVSS5.1AI score0.0031EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2020/02/06 3:10 a.m.104 views

CVE-2019-20404

The CVE-2019-20404 vulnerability affects Atlassian Jira Server/Data Center prior to version 8.6.0. It is an information-disclosure issue caused by improper authorization, enabling authenticated remote attackers to enumerate project titles they should not access. The issue is confirmed by multiple...

4.3CVSS4.5AI score0.01053EPSS
Exploits0References1Affected Software2
Atlassian
Atlassian
added 2020/01/30 9:25 p.m.27 views

Improper authorization on project titles vulnerability in Jira - CVE-2019-20404

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows authenticated remote attackers to determine project titles they do not have access to via an improper authorization vulnerability. h3. Note on fix The fix was tested internally before backporting it and no issues were...

4.3CVSS5.1AI score0.01053EPSS
Exploits0
OpenVAS
OpenVAS
added 2012/12/31 12:0 a.m.28 views

Fedora Update for libtiff FEDORA-2012-20404

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.5CVSS9AI score0.27173EPSS
Exploits1References2
Rows per page
Query Builder