Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 1:44 a.m.3 views

CVE-2023-20641

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629574; Issue ID: ALPS07629574...

6.7CVSS7.1AI score0.00015EPSS
Exploits0References1
Circl
Circl
added 2025/03/08 4:34 a.m.0 views

CVE-2023-20641

creationtimestamp| type| source ---|---|--- 2025-03-08 04:34:11+00:00| seen| Telegram/SjJRwOIO-2l2MGhUwK8xhVBgnqsRXdFLrmnMbZ7xBOWENmPq...

6.7CVSS4.8AI score0.00015EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/08 4:40 a.m.6 views

CVE-2025-20641

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146;...

7.3CVSS6.8AI score0.00027EPSS
Exploits0References1
OSV
OSV
added 2025/02/03 4:15 a.m.0 views

CVE-2025-20641

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146;...

6.6CVSS5.9AI score
Exploits0References1
CVE
CVE
added 2025/02/03 3:24 a.m.59 views

CVE-2025-20641

CVE-2025-20641 affects the DA module in MediaTek chipsets, where a missing bounds check can cause an out-of-bounds write. This could enable local privilege escalation if an attacker has physical access, with user interaction required for exploitation. The public description consistently notes the...

7.3CVSS6.6AI score0.00027EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/02/03 3:24 a.m.14 views

CVE-2025-20641

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146;...

0.00027EPSS
Exploits0References1
OSV
OSV
added 2023/03/07 9:15 p.m.2 views

CVE-2023-20641

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629574; Issue ID: ALPS07629574...

6.7CVSS5.9AI score
Exploits0References1
CVE
CVE
added 2023/03/07 12:0 a.m.34 views

CVE-2023-20641

The CVE-2023-20641 vulnerability affects the ril module in MediaTek chips, caused by a missing bounds check that enables an out-of-bounds write. It can lead to local escalation of privilege with System execution privileges required, and no user interaction is needed. A patch is available (ALPS076...

6.7CVSS6.7AI score0.00015EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2022/01/14 5:15 a.m.7 views

CVE-2022-20641

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

6.1CVSS0.0016EPSS
Exploits0References1
CVE
CVE
added 2022/01/14 5:0 a.m.110 views

CVE-2022-20641

CVE-2022-20641 affects Cisco Security Manager’s web-based management interface. The vulnerabilities stem from insufficient input validation, enabling an unauthenticated attacker to perform cross-site scripting by tricking a user into clicking a crafted link. Impact described: execution of arbitra...

6.1CVSS6.2AI score0.0016EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2021/02/12 12:43 p.m.0 views

CVE-2021-20641

creationtimestamp| type| source ---|---|--- 2021-02-12 12:43:37+00:00| seen| https://t.me/cibsecurity/23530...

6.5CVSS6.4AI score0.00092EPSS
Exploits0References1
NVD
NVD
added 2021/02/12 7:15 a.m.6 views

CVE-2021-20641

Cross-site request forgery CSRF vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted...

6.5CVSS0.00092EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/02/12 6:15 a.m.9 views

CVE-2021-20641

Cross-site request forgery CSRF vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted...

6.9AI score0.00092EPSS
Exploits0References2
CVE
CVE
added 2021/02/12 6:15 a.m.72 views

CVE-2021-20641

CVE-2021-20641 is a CSRF vulnerability in LOGITEC LAN-W300N/RS that lets an attacker spoof an admin session and perform unintended device changes via a crafted URL. Public sources describe the impact as affecting administrative web access, enabling authentication hijacking and potentially changin...

6.5CVSS6.6AI score0.00092EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2020/04/16 12:14 a.m.3 views

CVE-2019-20641

creationtimestamp| type| source ---|---|--- 2020-04-16 00:14:21+00:00| seen| https://t.me/cibsecurity/11308...

8.8CVSS8.1AI score0.00223EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 6:15 p.m.2 views

CVE-2019-20641

NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level...

8.8CVSS7.3AI score0.00223EPSS
Exploits0References1
CVE
CVE
added 2020/04/15 5:14 p.m.39 views

CVE-2019-20641

CVE-2019-20641 affects NETGEAR RAX40 firmware prior to 1.0.3.64, with a lack of function-level access control. The issue enables an adjacent-network attacker to achieve partial confidentiality, integrity, and availability impacts. Remediation is to upgrade to firmware 1.0.3.64 or later (Netgear P...

8.8CVSS8.6AI score0.00223EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2019/03/21 4:0 p.m.2 views

CVE-2018-20641

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

8.8CVSS5.8AI score0.00145EPSS
Exploits1References1
Cvelist
Cvelist
added 2019/03/20 7:0 p.m.12 views

CVE-2018-20641

PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has Cross-Site Request Forgery CSRF via the Edit Profile feature...

9AI score0.00145EPSS
Exploits1References1
Rows per page
Query Builder