14 matches found
CVE-2025-20722
creationtimestamp| type| source ---|---|--- 2025-10-14 13:44:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115372817715516192...
CVE-2023-20722
In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07771518; Issue ID: ALPS07680084...
CVE-2023-20722
creationtimestamp| type| source ---|---|--- 2025-01-24 19:05:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2994...
Adobe Substance 3D Painter < 9.1.2 Multiple Vulnerabilities (APSB24-04) (macOS)
The version of Adobe Substance 3D Painter installed on the remote macOS host is prior to 9.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-04 advisory. Successful exploitation could lead to arbitrary code execution and memory leak in the context of the...
CVE-2024-20722
creationtimestamp| type| source ---|---|--- 2024-02-15 12:26:10+00:00| seen| https://t.me/ctinow/185449 2024-03-06 08:41:48+00:00| seen| https://t.me/ctinow/201117...
CVE-2024-20722
CVE-2024-20722 affects Substance3D Painter versions 9.1.1 and earlier. The issue is an out-of-bounds read in memory that could lead to disclosure of sensitive memory and potentially bypass mitigations such as ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected p...
CVE-2024-20722 Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability III
Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...
CVE-2023-20722
CVE-2023-20722 affects the m4u component with an out-of-bounds write caused by improper input validation. This can lead to local privilege escalation requiring System execution privileges, with no user interaction needed. A patch is available (Patch ID: ALPS07771518; Issue ID: ALPS07680084). Conn...
CVE-2023-20722
In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07771518; Issue ID: ALPS07680084...
CVE-2022-20722 Cisco IOx Application Hosting Environment Vulnerabilities
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...
CVE-2022-20722
Cisco IOx Application Hosting Environment on multiple Cisco platforms contains multiple vulnerabilities (CVE-2022-20722 among others) related to insufficient path validation and other issues that could allow an attacker to inject commands, execute arbitrary code as root on the host OS, or perform...
CVE-2021-20722
The CVE-2021-20722 issue affects Fujitsu ScanSnap Manager installers prior to version 7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe. The root cause is an insecure DLL search path, allowing a Trojan horse DLL in an unspecified directory to be loade...
CVE-2019-20722
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, DM200 before 1.0.0.58, R7500v2 before 1.0.3.38, R7800 before 1.0.2.52, R8900 before 1.0.4.2, R9000 before 1.0.4.2, RBK20 before 2.3.0.28, RBR20 before 2.3.0.28, RBS20 before...
CVE-2019-20722
CVE-2019-20722 affects multiple NETGEAR devices (e.g., D7800, DM200, R7500v2, R7800, R8900, R9000, RBK/RBR/RBS series, WNDR devices, XR500) with a command injection vulnerability that can be exploited by an authenticated user. The affected ranges specify specific firmware versions prior to listed...