Lucene search
K

14 matches found

Circl
Circl
added 2025/10/14 1:44 p.m.2 views

CVE-2025-20722

creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...

5.5CVSS4.8AI score0.00006EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:44 a.m.6 views

CVE-2023-20722

In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07771518; Issue ID: ALPS07680084...

6.7CVSS7.1AI score0.00016EPSS
Exploits0References1
Circl
Circl
added 2025/01/24 7:5 p.m.1 views

CVE-2023-20722

creationtimestamp| type| source ---|---|--- 2025-01-24 19:05:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2994...

6.7CVSS6.4AI score0.00016EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/02/16 12:0 a.m.169 views

Adobe Substance 3D Painter < 9.1.2 Multiple Vulnerabilities (APSB24-04) (macOS)

The version of Adobe Substance 3D Painter installed on the remote macOS host is prior to 9.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-04 advisory. Successful exploitation could lead to arbitrary code execution and memory leak in the context of the...

7.8CVSS7.1AI score0.00194EPSS
Exploits0References10
Circl
Circl
added 2024/02/15 12:26 p.m.2 views

CVE-2024-20722

creationtimestamp| type| source ---|---|--- 2024-02-15 12:26:10+00:00| seen| https://t.me/ctinow/185449 2024-03-06 08:41:48+00:00| seen| https://t.me/ctinow/201117...

5.5CVSS5.5AI score0.00016EPSS
Exploits0References2
CVE
CVE
added 2024/02/15 10:12 a.m.50 views

CVE-2024-20722

CVE-2024-20722 affects Substance3D Painter versions 9.1.1 and earlier. The issue is an out-of-bounds read in memory that could lead to disclosure of sensitive memory and potentially bypass mitigations such as ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected p...

5.5CVSS5.3AI score0.00016EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/02/15 10:12 a.m.22 views

CVE-2024-20722 Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability III

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS5.9AI score0.00016EPSS
Exploits0References1
CVE
CVE
added 2023/05/15 12:0 a.m.45 views

CVE-2023-20722

CVE-2023-20722 affects the m4u component with an out-of-bounds write caused by improper input validation. This can lead to local privilege escalation requiring System execution privileges, with no user interaction needed. A patch is available (Patch ID: ALPS07771518; Issue ID: ALPS07680084). Conn...

6.7CVSS6.7AI score0.00016EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/15 12:0 a.m.8 views

CVE-2023-20722

In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07771518; Issue ID: ALPS07680084...

7.2AI score0.00016EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/04/15 2:21 p.m.8 views

CVE-2022-20722 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

5.5CVSS6.6AI score0.00553EPSS
Exploits0References2
CVE
CVE
added 2022/04/15 2:21 p.m.96 views

CVE-2022-20722

Cisco IOx Application Hosting Environment on multiple Cisco platforms contains multiple vulnerabilities (CVE-2022-20722 among others) related to insufficient path validation and other issues that could allow an attacker to inject commands, execute arbitrary code as root on the host OS, or perform...

6.8CVSS5.9AI score0.00553EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/05/24 3:20 a.m.69 views

CVE-2021-20722

The CVE-2021-20722 issue affects Fujitsu ScanSnap Manager installers prior to version 7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe. The root cause is an insecure DLL search path, allowing a Trojan horse DLL in an unspecified directory to be loade...

7.8CVSS8AI score0.0024EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2020/04/16 7:15 p.m.14 views

CVE-2019-20722

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before...

6.8CVSS6.9AI score0.00116EPSS
Exploits0References1
CVE
CVE
added 2020/04/16 5:4 p.m.48 views

CVE-2019-20722

CVE-2019-20722 affects multiple NETGEAR devices (e.g., D7800, DM200, R7500v2, R7800, R8900, R9000, RBK/RBR/RBS series, WNDR devices, XR500) with a command injection vulnerability that can be exploited by an authenticated user. The affected ranges specify specific firmware versions prior to listed...

6.8CVSS6.8AI score0.00116EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder