CVE-2020-20697

CVE-2020-20697 affects the NodCMS v3.0 product, with a Cross-Site Scripting vulnerability in the address parameter that can allow an attacker to execute arbitrary code and access sensitive information. Several connected sources (e.g., Red Hat, CNVD, GHSA, OSV) describe the issue as XSS with poten...

CVE-2023-20697

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07589148; Issue ID: ALPS07589148...

CVE-2023-20697

CVE-2023-20697 affects MediaTek devices via the keyinstall module, due to a missing bounds check that enables an out-of-bounds read. This can lead to local information disclosure with System privileges required; exploitation does not require user interaction. The patch referenced is ALPS07589148 ...

CVE-2022-20697

The CVE-2022-20697 issue affects Cisco IOS Software and Cisco IOS XE Software web services. The vulnerability stems from improper resource management in the HTTP server code, enabling an authenticated, remote attacker to trigger a DoS by sending a large volume of HTTP requests, which can cause th...

CVE-2021-20697

Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors...

CVE-2021-20697

Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors...

CVE-2021-20697

Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors...

CVE-2021-20697

CVE-2021-20697 affects the D-Link DAP-1880AC firmware, where Missing authentication for a critical function allows a remote attacker to login as a low-privileged user without the access privilege via unspecified vectors. The issue is documented across multiple sources, noting that firmware versio...

CVE-2019-20697

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects GS728TPPv2 before 6.0.0.48, GS728TPv2 before 6.0.0.48, GS750E before 1.0.1.4, GS752TPP before 6.0.0.48, and GS752TPv2 before 6.0.0.48...

CVE-2019-20697

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects GS728TPPv2 before 6.0.0.48, GS728TPv2 before 6.0.0.48, GS750E before 1.0.1.4, GS752TPP before 6.0.0.48, and GS752TPv2 before 6.0.0.48...

CVE-2019-20697

CVE-2019-20697 affects NETGEAR switches: GS728TPPv2 and GS728TPv2 prior to 6.0.0.48, GS750E prior to 1.0.1.4, GS752TPP and GS752TPv2 prior to 6.0.0.48. The issue is a stack-based buffer overflow exploitable by an unauthenticated attacker. The documented remediation is to upgrade to the fixed vers...