Lucene search
K

12 matches found

OSV
OSV
added 2026/03/02 9:16 a.m.1 views

CVE-2026-20423

In wlan STA driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00465314; Issue ID: MSV-4956...

7.8CVSS5.9AI score0.00016EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/01/12 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-1147)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.0088EPSS
Exploits14References2
OpenVAS
OpenVAS
added 2022/12/22 12:0 a.m.20 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-2823)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.0088EPSS
Exploits14References2
OSV
OSV
added 2022/10/28 11:4 a.m.1 views

OESA-2022-2027 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In rndissetresponse of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious USB device is attached with no additional execution privileges...

4.6CVSS6.9AI score0.0005EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/11 8:15 p.m.5 views

CVE-2022-20423

In rndissetresponse of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious USB device is attached with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

4.6CVSS6AI score0.0005EPSS
Exploits0References2
OSV
OSV
added 2022/10/11 8:15 p.m.2 views

CVE-2022-20423

In rndissetresponse of rndis.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious USB device is attached with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

4.6CVSS4.9AI score
Exploits0References2
CVE
CVE
added 2022/10/11 12:0 a.m.163 views

CVE-2022-20423

CVE-2022-20423 is an Android kernel vulnerability arising in rndis_set_response() in rndis.c that allows an out-of-bounds write due to integer overflow. The issue can enable local privilege escalation when a malicious USB device is attached, with physical access required (no user interaction). Pu...

4.6CVSS5.8AI score0.0005EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/07/13 4:10 p.m.37 views

CVE-2021-20423

CVE-2021-20423 affects IBM Cloud Pak for Applications v4.3 (IBM Cloud Pak for Applications). Affected component/behavior: improper assignment/modification/tracking/checking of privileges for an actor, enabling an authenticated user to obtain escalated privileges. CVSS3.0/3.1 scores are high (8.8)...

8.8CVSS8.3AI score0.00179EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2020/01/27 8:37 a.m.0 views

CVE-2019-20423

creationtimestamp| type| source ---|---|--- 2020-01-27 08:37:42+00:00| seen| https://t.me/cveNotify/429...

7.8CVSS7.3AI score0.00619EPSS
Exploits1References1
CVE
CVE
added 2020/01/27 4:21 a.m.93 views

CVE-2019-20423

CVE-2019-20423 affects the Lustre file system prior to 2.12.3, where the ptlrpc module can overflow the buffer and panic due to lacking validation of certain fields in client packets. The root cause is an integer signedness error in target_handle_connect() that mishandles a specific size value wh...

7.8CVSS7.8AI score0.00619EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2018/12/24 4:29 a.m.9 views

CVE-2018-20423

Discuz! DiscuzX 3.4, when WeChat login is enabled, allows remote attackers to bypass a "disabled registration" setting by adding a non-existing wxopenid value to the plugin.php ac=wxregister query string...

8.1CVSS8.1AI score0.00297EPSS
Exploits1References1
CVE
CVE
added 2018/12/24 4:0 a.m.34 views

CVE-2018-20423

CVE-2018-20423 affects Discuz! DiscuzX 3.4 when WeChat login is enabled. A logic flaw in plugin.php ac=wxregister allows remote attackers to bypass the “disabled registration” setting by supplying a non-existent wxopenid value, enabling unauthorized registrations. Exploitation details are not pro...

8.1CVSS8AI score0.00297EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder