Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:16 p.m.5 views

CVE-2022-20597

In ppmpuset of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-243480506References: N...

7.8CVSS7.1AI score0.00174EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:29 p.m.5 views

CVE-2020-20597

A cross-site scripting XSS vulnerability in the potrtalItemName parameter in \web\PortalController.java of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML...

6.1CVSS6AI score0.00831EPSS
Exploits1
Circl
Circl
added 2023/09/20 10:29 p.m.2 views

CVE-2023-20597

creationtimestamp| type| source ---|---|--- 2023-09-20 22:29:39+00:00| seen| https://t.me/cibsecurity/70831 2025-06-27 21:55:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19790...

5.5CVSS5.5AI score0.00171EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/09/20 5:32 p.m.33 views

CVE-2023-20597

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access...

5.3AI score0.00171EPSS
Exploits0References1
CVE
CVE
added 2023/09/20 5:32 p.m.75 views

CVE-2023-20597

CVE-2023-20597 concerns improper initialization of variables in the AMD DXE driver, leading to potential local-information disclosure. The vulnerability is discussed across multiple sources (AMD/SB-4007 and related advisories), which describe memory-leak risks in the DXE driver and note mitigatio...

5.5CVSS5.1AI score0.00171EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.43 views

Mitsubishi Electric MELSEC iQ-R Series Insufficiently Protected Credentials (CVE-2021-20597)

Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions allows a remote unauthenticated attacker to login to the target unauthorizedly by sniffing network traffic and obtaining...

9.1CVSS8AI score0.0237EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.27 views

Mitsubishi Electric MELSEC iQ-R Series Exposure of Sensitive Information to an Unauthorized Actor (CVE-2021-20594)

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules R08/16/32/120SFCPU all versions, R08/16/32/120PSFCPU all versions allows a remote unauthenticated attacker to acquire legitimate user names registered in the module via...

9.1CVSS7.9AI score0.0237EPSS
Exploits0References4
Circl
Circl
added 2021/12/23 2:18 a.m.3 views

CVE-2020-20597

creationtimestamp| type| source ---|---|--- 2021-12-23 02:18:44+00:00| seen| https://t.me/cibsecurity/34555...

6.1CVSS6.1AI score0.00831EPSS
Exploits1References1
CVE
CVE
added 2021/12/22 10:40 p.m.46 views

CVE-2020-20597

The CVE-2020-20597 entry concerns a cross-site scripting (XSS) vulnerability in Lemon OA version 1.10.0, affecting the potrtalItemName parameter in webPortalController.java. Public descriptions across NVD/Red Hat CNVD/etc confirm the root cause is unescaped user input in that parameter, enabling ...

6.1CVSS6AI score0.00831EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2021/08/06 5:15 p.m.20 views

CVE-2021-20597

Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a...

9.1CVSS0.0222EPSS
Exploits0References3
Circl
Circl
added 2021/08/06 4:38 p.m.3 views

CVE-2021-20597

creationtimestamp| type| source ---|---|--- 2021-08-06 16:38:36+00:00| seen| https://t.me/truesecator/1979 2024-01-08 16:40:39+00:00| seen| https://t.me/arpsyndicate/2658...

9.1CVSS7.5AI score0.0222EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/08/06 12:0 a.m.24 views

CVE-2021-20597

Insufficiently Protected Credentials vulnerability in Mitsubishi Electric MELSEC iQ-R series Safety CPU modules R08/16/32/120SFCPU firmware versions "26" and prior and Mitsubishi Electric MELSEC iQ-R series SIL2 Process CPU modules R08/16/32/120PSFCPU firmware versions "11" and prior allows a...

9.3AI score0.0222EPSS
Exploits0References3
CVE
CVE
added 2021/08/06 12:0 a.m.173 views

CVE-2021-20597

CVE-2021-20597 concerns Mitsubishi Electric MELSEC iQ-R series CPU modules where firmware versions before the fixed releases allow a remote, unauthenticated attacker to login by sniffing network traffic and capturing credentials during user registration or password changes. The issue affects mult...

9.1CVSS9AI score0.0222EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2020/03/24 8:15 p.m.2 views

CVE-2019-20597

An issue was discovered on Samsung mobile devices with N7.1, O8.x, and P9.0 software. SPENgesture allows arbitrary applications to read or modify user-input logs. The Samsung ID is SVE-2019-14170 June 2019...

9.1CVSS7.4AI score
Exploits0References1
CVE
CVE
added 2020/03/24 7:7 p.m.43 views

CVE-2019-20597

CVE-2019-20597 affects Samsung mobile devices running N(7.1), O(8.x), and P(9.0). The vulnerability exists in the SPENgesture component, which can allow arbitrary applications to read or modify user-input logs. This impacts confidentiality and integrity (CVSSv3.1: 9.1, CRITICAL; CVSSv2: 6.4, MEDI...

9.1CVSS9AI score0.00253EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder