Lucene search
+L

30 matches found

Vulnrichment
Vulnrichment
added 2023/06/20 12:0 a.m.14 views

CVE-2020-20697

Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter...

7.1AI score0.00546EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/05/15 12:0 a.m.5 views

CVE-2023-20697

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07589148; Issue ID: ALPS07589148...

6.3AI score0.00091EPSS
Exploits0References1
CVE
CVE
added 2023/05/15 12:0 a.m.108 views

CVE-2023-20697

CVE-2023-20697 affects MediaTek devices via the keyinstall module, due to a missing bounds check that enables an out-of-bounds read. This can lead to local information disclosure with System privileges required; exploitation does not require user interaction. The patch referenced is ALPS07589148 ...

4.4CVSS4.2AI score0.00091EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/04/15 2:15 p.m.111 views

CVE-2022-20697

The CVE-2022-20697 issue affects Cisco IOS Software and Cisco IOS XE Software web services. The vulnerability stems from improper resource management in the HTTP server code, enabling an authenticated, remote attacker to trigger a DoS by sending a large volume of HTTP requests, which can cause th...

8.6CVSS8.3AI score0.0111EPSS
Exploits0References1Affected Software2
NVD
NVD
added 2021/04/26 1:15 a.m.27 views

CVE-2021-20697

Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors...

9.8CVSS0.01706EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/04/26 12:20 a.m.26 views

CVE-2021-20697

Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors...

9.6AI score0.01706EPSS
Exploits0References2
CVE
CVE
added 2021/04/26 12:20 a.m.45 views

CVE-2021-20697

CVE-2021-20697 affects the D-Link DAP-1880AC firmware, where Missing authentication for a critical function allows a remote attacker to login as a low-privileged user without the access privilege via unspecified vectors. The issue is documented across multiple sources, noting that firmware versio...

9.8CVSS9.2AI score0.01706EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2020/04/16 7:15 p.m.5 views

CVE-2019-20697

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects GS728TPPv2 before 6.0.0.48, GS728TPv2 before 6.0.0.48, GS750E before 1.0.1.4, GS752TPP before 6.0.0.48, and GS752TPv2 before 6.0.0.48...

8.8CVSS7.7AI score0.00537EPSS
Exploits0References1
NVD
NVD
added 2020/04/16 7:15 p.m.13 views

CVE-2019-20697

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects GS728TPPv2 before 6.0.0.48, GS728TPv2 before 6.0.0.48, GS750E before 1.0.1.4, GS752TPP before 6.0.0.48, and GS752TPv2 before 6.0.0.48...

8.8CVSS9.1AI score0.00537EPSS
Exploits0References1
CVE
CVE
added 2020/04/16 2:33 p.m.49 views

CVE-2019-20697

CVE-2019-20697 affects NETGEAR switches: GS728TPPv2 and GS728TPv2 prior to 6.0.0.48, GS750E prior to 1.0.1.4, GS752TPP and GS752TPv2 prior to 6.0.0.48. The issue is a stack-based buffer overflow exploitable by an unauthenticated attacker. The documented remediation is to upgrade to the fixed vers...

8.8CVSS8.9AI score0.00537EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder