29 matches found
CVE-2026-20645
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, iOS 18.7.5 and iPadOS 18.7.5. An attacker with physical access to a locked device may be able to view sensitive user information...
CVE-2026-20645
CVE-2026-20645 is an Apple iOS/iPadOS vulnerability described as an inconsistent user interface issue addressed by improved state management. It affects locked devices where an attacker with physical access may view sensitive user information. The CVE is fixed in iOS 18.7.5 and iPadOS 18.7.5, and...
CVE-2019-20645
NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS...
CVE-2021-20645
Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors...
CVE-2023-20645
creationtimestamp| type| source ---|---|--- 2025-03-05 20:36:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6614 2025-03-06 02:17:23+00:00| seen| Telegram/BwYlTtFPmgQfNGrtw4dQpWbmoUzSIxQBFrlnpGmCl1U65...
CVE-2025-20645
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599...
CVE-2025-20645
creationtimestamp| type| source ---|---|--- 2025-03-03 03:33:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6142 2025-03-03 05:29:58+00:00| seen| https://t.me/cvedetector/19292...
CVE-2025-20645
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599...
CVE-2025-20645
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599...
CVE-2025-20645
In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599...
CVE-2025-20645
A security vulnerability exists in MediaTek Chipsets affecting the KeyInstall component. The flaw stems from a missing bounds check , which could lead to an out-of-bounds write . A malicious actor who has already obtained System privilege could exploit this to achieve local escalation of privileg...
CVE-2023-20645
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628609; Issue ID: ALPS07628609...
CVE-2023-20645
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628609; Issue ID: ALPS07628609...
CVE-2023-20645
CVE-2023-20645 affects the ril component in MediaTek-based devices. The vulnerability is an out-of-bounds read caused by a missing bounds check, potentially enabling local information disclosure with system execution privileges. Exploitation does not require user interaction. A patch is identifie...
CVE-2022-20645
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...
CVE-2022-20645 Cisco Security Manager Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...
CVE-2022-20645
CVE-2022-20645 concerns Cisco Security Manager. The issue is cross-site scripting via the web-based management interface caused by inadequate input validation. An unauthenticated, remote attacker can lure a user to click a crafted link to execute arbitrary script code in the interface context or ...
CVE-2020-20645
The CVE-2020-20645 entry refers to a Cross-Site Scripting (XSS) vulnerability in EyouCMS 1.3.6 within the basic_information area. The root cause is described in CNVD/CNNVD sources as insufficient validation/filtering of user input, enabling an attacker to lure users into sending malicious request...
