Linux Distros Unpatched Vulnerability : CVE-2023-20917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. This could lead to local escalatio...

MAL-2025-20917 Malicious code in fpa-pso (npm)

The package fpa-pso was found to contain malicious code...

CVE-2022-20917

A vulnerability in the Extensible Messaging and Presence Protocol XMPP message processing feature of Cisco Jabber could allow an authenticated, remote attacker to manipulate the content of XMPP messages that are used by the affected application. This vulnerability is due to the improper handling ...

CVE-2018-20917

cPanel before 70.0.23 allows any user to disable Solr SEC-371...

CVE-2019-20917

An issue was discovered in InspIRCd 2 before 2.0.28 and 3 before 3.3.0. The mysql module contains a NULL pointer dereference when built against mariadb-connector-c 3.0.5 or newer. When combined with the sqlauth or sqloper modules, this vulnerability can be used for remote crashing of an InspIRCd...

CVE-2025-20917

Out-of-bounds read in applying binary of pdf content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory...

CVE-2025-20917

Samsung Notes contains an out-of-bounds read vulnerability (CVE-2025-20917) in the way it applies binary of PDF content. Affected versions are prior to 4.4.26.71. By exploiting this issue, an attacker could read out-of-bounds memory from the PDF processing path. The issue is confirmed by multiple...

CVE-2024-20917

...

CVE-2024-20917

...

CVE-2024-20917

Oracle Enterprise Manager Base Platform, Log Management component, version 13.5.0.0 is affected by CVE-2024-20917. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Base Platform, with human interaction required, and can lead to unauthorized data ...

CVE-2024-20917

creationtimestamp| type| source ---|---|--- 2024-02-08 09:41:23+00:00| seen| https://t.me/ctinow/181243 2024-02-17 03:26:45+00:00| seen| https://t.me/ctinow/186748 2025-03-27 15:26:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9117...

CVE-2022-20917

CVE-2022-20917 describes a vulnerability in the XMPP message processing feature of Cisco Jabber. The issue arises from improper handling of nested XMPP messages in requests, enabling an authenticated, remote attacker to manipulate the content of XMPP messages used by the Jabber client and potenti...

CVE-2023-20917

creationtimestamp| type| source ---|---|--- 2023-03-24 23:50:44+00:00| seen| https://t.me/cibsecurity/60704...

CVE-2023-20917

In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-20917

In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-20917

In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-20917

CVE-2023-20917 affects Android 11–13 and is related to a logic error in ResolverActivity.java (onTargetSelected) that could allow a local escalation of privilege by sharing the wrong file. The exploit requires local access with no user interaction; impact is described as high (C/H/I/A). The provi...

Cisco Jabber Client For MacOS XMPP Stanza Smuggling (cisco-sa-jabber-xmpp-Ne9SCM)

According to its self-reported version, Cisco Jabber for MacOS is affected by a stanza smuggling vulnerability due to improper handling of nested XMPP requests. An authenticated, remote attacker can send specially crafted XMPP messages to an affected client causing the client to perform unsafe...

KLA20106 ACE vulnerability in Cisco Jabber

XMPP message smuggling vulnerability was found in Cisco Jabber. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Cisco Jabber Client Software Extensible Messaging and Presence Protocol Stanza Smuggling Vulnerability Related products Cisco-Jabber CVE li...

Debian DSA-4764-1 : inspircd - security update

Two security issues were discovered in the pgsql and mysql modules of the InspIRCd IRC daemon, which could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4764. The text itself is...