Lucene search
K

25 matches found

Circl
Circl
added 2026/01/13 6:1 p.m.1 views

CVE-2026-20925

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

6.5CVSS5.7AI score0.00157EPSS
Exploits0References2
CVE
CVE
added 2026/01/13 5:56 p.m.11 views

CVE-2026-20925

CVE-2026-20925 affects Windows NTLM and is described as an external control of the file name or path that enables spoofing (pretend to be another user) over a network. The vulnerability is assigned a CVSS v3.1 base score of 6.5 (Medium) with network attack vector and required user interaction. Co...

6.5CVSS6.4AI score0.00157EPSS
Exploits0References1Affected Software14
RedhatCVE
RedhatCVE
added 2025/05/23 9:36 a.m.6 views

CVE-2024-20925

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

3.1CVSS2.4AI score0.00238EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:50 a.m.6 views

CVE-2022-20925

A vulnerability in the web management interface of the Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The vulnerability is due to insufficient validation of user-supplied parameters for...

7.2CVSS7.7AI score0.0039EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/08 6:24 a.m.5 views

CVE-2025-20925

Out-of-bounds read in applying binary of text data in Samsung Notes prior to version 4.4.26.71 allows local attackers to potentially read memory...

5.5CVSS6.5AI score0.00107EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/06 5:4 a.m.6 views

CVE-2025-20925

Out-of-bounds read in applying binary of text data in Samsung Notes prior to version 4.4.26.71 allows local attackers to potentially read memory...

5.5CVSS0.00107EPSS
Exploits0References1
NVD
NVD
added 2024/05/03 3:15 a.m.8 views

CVE-2023-42052

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

5.5CVSS3.3AI score0.00523EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 2:12 a.m.11 views

CVE-2023-42052 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS6.1AI score0.00523EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/03 2:12 a.m.17 views

CVE-2023-42052 PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

3.3CVSS3.7AI score0.00523EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2024/02/17 3:30 a.m.1 views

be.yildiz-games:module-window-javafx (>=3.2.2 <=3.5.4), com.acrolinx.client:sidebar-sdk-java (>=2.5.21 <=2.8.1) +146 more potentially affected by CVE-2024-20925 via org.openjfx:javafx-media (>=18 <=21.0.11)

org.openjfx:javafx-media MAVEN version =18, =3.2.2, =2.5.21, =3.1.0, =1.8.0, =1.2.0, =17.1, =17.1, =17.1, =17.1, =17.1, =17.1, =17.1, =2022.2023, =2022.2023.beta1 and more Source cves: CVE-2024-20925 Source advisory: OSV:GHSA-47G3-MF24-6559...

3.1CVSS6.7AI score0.00238EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2024/02/17 2:15 a.m.27 views

CVE-2024-20925

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

3.1CVSS6.8AI score0.00238EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/02/17 1:50 a.m.18 views

CVE-2024-20925

...

3.1CVSS6.8AI score0.00238EPSS
Exploits0References1
CVE
CVE
added 2024/02/17 1:50 a.m.309 views

CVE-2024-20925

CVE-2024-20925 is a vulnerability affecting Oracle Java SE (JavaFX) and Oracle GraalVM Enterprise Edition (JavaFX). Affected versions include Oracle Java SE 8u391 and GraalVM EE 20.3.12 / 21.3.8. The issue is described as difficult to exploit, requiring network access via multiple protocols and u...

3.1CVSS3.6AI score0.00238EPSS
Exploits0References2Affected Software3
Debian CVE
Debian CVE
added 2024/02/17 1:50 a.m.43 views

CVE-2024-20925

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

3.1CVSS4AI score0.00238EPSS
Exploits0
Cvelist
Cvelist
added 2024/02/17 1:50 a.m.23 views

CVE-2024-20925

...

3.1CVSS5.8AI score0.00238EPSS
Exploits0References1
Circl
Circl
added 2024/02/09 5:21 p.m.0 views

CVE-2024-20925

creationtimestamp| type| source ---|---|--- 2024-02-09 17:21:57+00:00| seen| https://t.me/ctinow/182156 2024-02-17 03:26:49+00:00| seen| https://t.me/ctinow/186752...

3.1CVSS6.2AI score0.00238EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.56 views

Amazon Corretto Java 8.x < 8.402.06.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 8 8.402.06.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2024-Jan-16 advisory. - hotspot/compiler CVE-2024-20918, CVE-2024-20921 - hotspot/runtime CVE-2024-20919 -...

7.4CVSS6.6AI score0.00344EPSS
Exploits0References9
Vulnrichment
Vulnrichment
added 2023/01/24 12:0 a.m.4 views

CVE-2023-20925

In setUclampMinLocked of PowerSessionManager.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.4AI score0.00019EPSS
Exploits0References1
CVE
CVE
added 2023/01/24 12:0 a.m.69 views

CVE-2023-20925

CVE-2023-20925 affects the Android kernel, specifically the use-after-free in the PowerSessionManager.cpp function setUclampMinLocked. This memory corruption can lead to local escalation of privilege without extra execution privileges and requires local access, with no user interaction needed. Th...

7.8CVSS7.6AI score0.00019EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/11/10 5:36 p.m.66 views

CVE-2022-20925

Summary (CVE-2022-20925) : The Cisco Firepower Management Center (FMC) web management interface is affected by an API input validation vulnerability. An authenticated attacker with Device-permission credentials could exploit crafted input to API endpoints to execute arbitrary OS commands with low...

7.2CVSS7.3AI score0.0039EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder