19 matches found
CVE-2023-20641
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629574; Issue ID: ALPS07629574...
CVE-2023-20641
creationtimestamp| type| source ---|---|--- 2025-03-08 04:34:11+00:00| seen| Telegram/SjJRwOIO-2l2MGhUwK8xhVBgnqsRXdFLrmnMbZ7xBOWENmPq...
CVE-2025-20641
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146;...
CVE-2025-20641
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146;...
CVE-2025-20641
A buffer error vulnerability exists in the DA module of MediaTek Chipsets due to a missing bounds check , which can result in an out-of-bounds write . This flaw could allow an attacker with physical access to the device to achieve local escalation of privilege without additional execution privile...
CVE-2025-20641
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146;...
CVE-2023-20641
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629574; Issue ID: ALPS07629574...
CVE-2023-20641
The CVE-2023-20641 vulnerability affects the ril module in MediaTek chips, caused by a missing bounds check that enables an out-of-bounds write. It can lead to local escalation of privilege with System execution privileges required, and no user interaction is needed. A patch is available (ALPS076...
CVE-2022-20641
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...
CVE-2022-20641
CVE-2022-20641 affects Cisco Security Manager’s web-based management interface. The vulnerabilities stem from insufficient input validation, enabling an unauthenticated attacker to perform cross-site scripting by tricking a user into clicking a crafted link. Impact described: execution of arbitra...
CVE-2021-20641
creationtimestamp| type| source ---|---|--- 2021-02-12 12:43:37+00:00| seen| https://t.me/cibsecurity/23530...
CVE-2021-20641
Cross-site request forgery CSRF vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted...
CVE-2021-20641
Cross-site request forgery CSRF vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted...
CVE-2021-20641
CVE-2021-20641 is a CSRF vulnerability in LOGITEC LAN-W300N/RS that lets an attacker spoof an admin session and perform unintended device changes via a crafted URL. Public sources describe the impact as affecting administrative web access, enabling authentication hijacking and potentially changin...
CVE-2019-20641
creationtimestamp| type| source ---|---|--- 2020-04-16 00:14:21+00:00| seen| https://t.me/cibsecurity/11308...
CVE-2019-20641
NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level...
CVE-2019-20641
CVE-2019-20641 affects NETGEAR RAX40 firmware prior to 1.0.3.64, with a lack of function-level access control. The issue enables an adjacent-network attacker to achieve partial confidentiality, integrity, and availability impacts. Remediation is to upgrade to firmware 1.0.3.64 or later (Netgear P...