29 matches found
CVE-2024-20950
...
CVE-2023-20950
In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restrictions via a pendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2023-20950
CVE-2023-20950 affects Android (Android-11, Android-12, Android-12L) in AlarmManagerActivity.java, enabling a bypass of background activity launch restrictions via a pendingIntent. This could cause local elevation of privilege with no additional privileges or user interaction required. The Androi...
CVE-2022-20950
Cisco Firepower Threat Defense (FTD) is affected by CVE-2022-20950 due to a lack of error-checking when SIP bidirectional flows are inspected by Snort 3. The vulnerability allows an unauthenticated, remote attacker to trigger a restart of the Snort 3 detection engine, causing a DoS condition. A c...
CVE-2020-20950
creationtimestamp| type| source ---|---|--- 2021-01-19 16:56:01+00:00| seen| https://t.me/cibsecurity/22260...
CVE-2020-20950
Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable...
CVE-2020-20950
CVE-2020-20950 describes Bleichenbacher’s attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications (2018-11-26). The vulnerability arises when the vulnerable library allows an oracle-like interaction, enabling an attacker to decrypt a ciphertext by iteratively querying the s...
CVE-2018-20950
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
CVE-2018-20950
CVE-2018-20950 affects cPanel before version 68.0.27, allowing a self-stored XSS in WHM Account Transfer (SEC-386). The vulnerability stems from insufficient input validation in the transfer workflow, enabling an attacker to inject and execute client-side script. Impact is limited to cross-site s...