Lucene search
K

27 matches found

OSV
OSV
added 2026/01/06 2:15 a.m.1 views

CVE-2025-20795

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10276761; Issue ID: MSV-5141...

7.8CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/06 1:46 a.m.0 views

CVE-2025-20795

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10276761; Issue ID: MSV-5141...

7.8CVSS5.9AI score0.00006EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.3 views

Siemens SIMATIC S7-1500 Use After Free (CVE-2019-20795)

iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors such as C library...

4.4CVSS6.5AI score0.00126EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 2:59 a.m.2 views

CVE-2023-20795

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07864900; Issue ID: ALPS07864900...

6.7CVSS6.6AI score0.00026EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2019-20795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, althou...

4.4CVSS6AI score0.00126EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.12 views

RHEL 7 : iproute (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - iproute: use-after-free in getnetnsidfromname in ip/ipnetns.c CVE-2019-20795 Note that Nessus has not tested for th...

4.4CVSS7.4AI score0.00126EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/04/15 12:0 a.m.23 views

Adobe Animate Multiple Vulnerabilities (APSB24-26) - Windows

Adobe Animate is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:animate"; ifdescription...

7.8CVSS7AI score0.00194EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/11 10:53 a.m.14 views

CVE-2024-20795 Animate has an arbitrary code execution vulnerability when parsing svg files

Animate versions 23.0.4, 24.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS8AI score0.00148EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/11 10:53 a.m.15 views

CVE-2024-20795 Animate has an arbitrary code execution vulnerability when parsing svg files

Animate versions 23.0.4, 24.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.2AI score0.00148EPSS
Exploits0References1
OSV
OSV
added 2023/08/31 12:16 p.m.2 views

BELL-CVE-2019-20795 CVE-2019-20795 does not affect BellSoft software

Bulletin has no description...

4.4CVSS5.8AI score0.00126EPSS
Exploits0References1
OSV
OSV
added 2023/08/07 4:15 a.m.1 views

CVE-2023-20795

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07864900; Issue ID: ALPS07864900...

6.7CVSS5.9AI score0.00026EPSS
Exploits0References1
CVE
CVE
added 2023/08/07 3:21 a.m.43 views

CVE-2023-20795

The CVE-2023-20795 entry describes a vulnerability in the ril module (MediaTek-based environments) where a missing bounds check enables an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required, and exploitation does not require user interaction...

6.7CVSS6.7AI score0.00026EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/10/09 12:0 a.m.26 views

EulerOS Virtualization 3.0.6.6 : iproute (EulerOS-SA-2022-2507)

According to the versions of the iproute package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to...

4.4CVSS6.2AI score0.00126EPSS
Exploits0References2
Circl
Circl
added 2022/04/21 10:27 p.m.0 views

CVE-2022-20795

creationtimestamp| type| source ---|---|--- 2022-04-21 22:27:05+00:00| seen| https://t.me/cibsecurity/41248...

7.5CVSS7.3AI score0.00433EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/03/21 12:0 a.m.25 views

EulerOS 2.0 SP5 : iproute (EulerOS-SA-2022-1327)

According to the versions of the iproute package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of...

4.4CVSS6.2AI score0.00126EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/03/21 12:0 a.m.17 views

Huawei EulerOS: Security Advisory for iproute (EulerOS-SA-2022-1327)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.4CVSS5.3AI score0.00126EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/10/19 12:0 a.m.26 views

SUSE SLED12 / SLES12 Security Update : iproute2 (SUSE-SU-2021:3452-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3452-1 advisory. - iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to...

4.4CVSS6.1AI score0.00126EPSS
Exploits0References5
OSV
OSV
added 2021/10/18 7:29 a.m.3 views

SUSE-SU-2021:3452-1 Security update for iproute2

This update for iproute2 fixes the following issues: - CVE-2019-20795: Fixed a use-after-free vulnerability in getnetnsidfromname. bsc1171452...

4.4CVSS4.8AI score0.00126EPSS
Exploits0References4
CVE
CVE
added 2021/10/13 8:30 a.m.43 views

CVE-2021-20795

CVE-2021-20795 : Cybozu Remote Service has a CSRF vulnerability in the management screen that could allow an attacker to hijack an administrator’s session and perform unintended operations. Affected products are Cybozu Remote Service 3.1.8 to 3.1.9. Remediation per the package advisories is to up...

8.8CVSS8.9AI score0.00094EPSS
Exploits0References2Affected Software1
Cloud Foundry
Cloud Foundry
added 2020/06/24 12:0 a.m.30 views

USN-4357-1: IPRoute vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that IPRoute incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. CVEs contained in this USN include: CVE-2019-20795. Affected Cloud...

4.4CVSS5.7AI score0.00126EPSS
Exploits0Affected Software1
Rows per page
Query Builder