Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:8 a.m.5 views

CVE-2019-20786

handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion...

9.8CVSS7AI score0.0122EPSS
Exploits1References1
Circl
Circl
added 2026/01/06 3:3 p.m.0 views

CVE-2025-20786

creationtimestamp| type| source ---|---|--- 2026-01-06 15:03:59+00:00| seen| Telegram/IzmJVDHIDu3u0Y8EmT2xTZPye35xj5uskV49q8qxzRHd0...

6.7CVSS4.8AI score0.00006EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 3:6 a.m.2 views

CVE-2023-20786

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767811; Issue ID: ALPS07767811...

6.7CVSS6.6AI score0.00026EPSS
Exploits0References1
Wolfi
Wolfi
added 2025/03/22 10:43 a.m.14 views

CVE-2018-20786 vulnerabilities

Vulnerabilities for packages: libvterm...

7.5CVSS7.1AI score0.00269EPSS
Exploits1
Chainguard
Chainguard
added 2025/03/22 10:12 a.m.21 views

CVE-2018-20786 vulnerabilities

Vulnerabilities for packages: libvterm...

7.5CVSS7.1AI score0.00269EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.65 views

RHEL 8 : vim (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - vim: buffer overflow CVE-2020-20703 - vim: use-after-free in skipwhite in charset.c CVE-2022-2345 -...

9.8CVSS8.7AI score0.03907EPSS
Exploits66References75
Circl
Circl
added 2023/08/07 7:19 a.m.1 views

CVE-2023-20786

creationtimestamp| type| source ---|---|--- 2023-08-07 07:19:02+00:00| seen| https://t.me/cibsecurity/67860...

6.7CVSS6.4AI score0.00026EPSS
Exploits0References1
CVE
CVE
added 2023/08/07 3:21 a.m.45 views

CVE-2023-20786

The CVE-2023-20786 entry concerns the MediaTek GPS component. A missing bounds check enables an out-of-bounds write, leading to local escalation of privilege with System execution privileges required. Exploitation does not require user interaction. A patch entry is noted as ALPS07767811 (Issue AL...

6.7CVSS6.7AI score0.00026EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/20 11:0 p.m.2 views

CVE-2022-20786

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of...

8.1CVSS7.3AI score0.00177EPSS
Exploits0References2
NVD
NVD
added 2021/07/30 2:15 p.m.9 views

CVE-2021-20786

Cross-site request forgery CSRF vulnerability in GroupSession GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0 allows a remote attacke...

4.3CVSS0.00092EPSS
Exploits0References2
CVE
CVE
added 2021/07/28 12:45 a.m.81 views

CVE-2021-20786

CVE-2021-20786 describes a cross-site request forgery (CSRF) in GroupSession products: Free edition (versions before 5.1.0), byCloud (before 5.1.0), and ZION (before 5.1.0). The issue allows a remote attacker to hijack administrator authentication via a specially crafted URL. The root cause is a ...

4.3CVSS5.2AI score0.00092EPSS
Exploits0References2Affected Software3
CVE
CVE
added 2020/04/19 7:57 p.m.71 views

CVE-2019-20786

CVE-2019-20786 (Pion DTLS) : The vulnerability exists in handleIncomingPacket (conn.go) of Pion DTLS prior to 1.5.2, which does not check application data with epoch 0. This allows remote attackers to inject arbitrary unencrypted data after the DTLS handshake. Affected software: Pion DTLS (versio...

9.8CVSS9.3AI score0.0122EPSS
Exploits1References4Affected Software1
Cloud Foundry
Cloud Foundry
added 2020/04/08 12:0 a.m.60 views

USN-4309-1: Vim vulnerabilities | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that Vim incorrectly handled certain sources. An attacker could possibly use this issue to cause a denial of service. This issue only affected...

9.8CVSS8.7AI score0.01106EPSS
Exploits1Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/03/24 12:0 a.m.33 views

Ubuntu 16.04 LTS / 18.04 LTS : Vim vulnerabilities (USN-4309-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4309-1 advisory. It was discovered that Vim incorrectly handled certain sources. An attacker could possibly use this issue to cause a denial of service. This...

9.8CVSS7.5AI score0.01106EPSS
Exploits1References7
Ubuntu
Ubuntu
added 2020/03/23 2:29 p.m.72 views

USN-4309-1: Vim vulnerabilities

It was discovered that Vim incorrectly handled certain sources. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and Ubuntu 16.04 LTS CVE-2017-11109 It was discovered that Vim incorrectly handled certain files. An...

9.8CVSS7.5AI score0.01106EPSS
Exploits1
OSV
OSV
added 2019/02/24 2:29 p.m.25 views

CVE-2018-20786

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service application crash, related to screen.c, state.c, and vterm.c...

7.5CVSS6.6AI score
Exploits0References3
CVE
CVE
added 2019/02/24 2:0 p.m.299 views

CVE-2018-20786

The CVE-2018-20786 issue affects libvterm (up to version 0+bzr726) as used by Vim and other products. The underlying flaw mishandles certain out-of-memory conditions, enabling a denial of service (application crash). Root cause references point to libvterm’s code areas screen.c, state.c, and vter...

7.5CVSS7.2AI score0.00269EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2019/02/24 2:0 p.m.28 views

CVE-2018-20786

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service application crash, related to screen.c, state.c, and vterm.c...

7.5CVSS7.4AI score0.00269EPSS
Exploits1
CNVD
CNVD
added 2018/10/09 12:0 a.m.1 views

FreeBSD Null Pointer Reference Vulnerability (CNVD-2018-20786)

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project, headed by the Core Team team, and is an important branch of Unix-like systems that have evolved through BSD, 386BSD, and 4.4BSD. A security vulnerability exists in FreeBSD, which stems from a program failure to properly...

5.5CVSS5.4AI score0.0004EPSS
Exploits0References1
Openbugbounty
Openbugbounty
added 2016/06/06 7:43 a.m.13 views

miamioh.edu XSS vulnerability

Vulnerable URL: http://miamioh.edu/ Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20786 VIP website status:| Yes Check miamioh.edu SSL connection:| Grade...

6.3AI score
Exploits0
Rows per page
Query Builder