Lucene search
K

27 matches found

OSV
OSV
added 2026/01/13 6:16 p.m.2 views

CVE-2026-20962

Use of uninitialized resource in Dynamic Root of Trust for Measurement DRTM allows an authorized attacker to disclose information locally...

4.4CVSS5.8AI score0.00244EPSS
Exploits0References1
Circl
Circl
added 2026/01/13 6:1 p.m.2 views

CVE-2026-20962

creationtimestamp| type| source ---|---|--- 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:16:30+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007 2026-04-10 10:53:42+00:00| seen|...

4.4CVSS5.7AI score0.00244EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/13 5:56 p.m.3 views

CVE-2026-20962

Use of uninitialized resource in Dynamic Root of Trust for Measurement DRTM allows an authorized attacker to disclose information locally...

4.4CVSS5.4AI score0.00244EPSS
Exploits0References2Affected Software13
Tenable Nessus
Tenable Nessus
added 2025/12/03 12:0 a.m.3 views

AlmaLinux 9 : pcs (ALSA-2025:20962)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:20962 advisory. rubygem-rack: Rack QueryParser has an unsafe default allowing paramslimit bypass via semicolon- separated parameters CVE-2025-59830 rack: Rack's unbounde...

7.5CVSS7.3AI score0.00324EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/12/03 12:0 a.m.2 views

Oracle Linux 9 : pcs (ELSA-2025-20962)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20962 advisory. - Fixed CVE-2025-59830, CVE-2025-61770, CVE-2025-61771, CVE-2025-61772, CVE-2025-61919 by updating bundled rubygem rack Resolves: RHEL-120945,...

7.5CVSS7.2AI score0.00324EPSS
Exploits0References6
OSV
OSV
added 2025/11/12 10:28 a.m.3 views

RHSA-2025:20962 Red Hat Security Advisory: pcs security update

Bulletin has no description...

7.5CVSS6.8AI score0.00324EPSS
Exploits0References35
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2024-20962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and...

6.5CVSS6.1AI score0.00325EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.8 views

TencentOS Server 4: mysql (TSSA-2024:0671)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0671 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

6.5CVSS5.4AI score0.00638EPSS
Exploits0References56
RedhatCVE
RedhatCVE
added 2025/05/23 12:50 a.m.4 views

CVE-2022-20962

A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to make unauthorized changes to the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this...

8.8CVSS7.4AI score0.00179EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:59 p.m.6 views

CVE-2018-20962

The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type...

6.1CVSS5.8AI score0.00302EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/09 9:44 a.m.10 views

CVE-2025-20962

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position...

4CVSS6.6AI score0.00096EPSS
Exploits0References1
Circl
Circl
added 2025/05/07 1:9 p.m.2 views

CVE-2025-20962

creationtimestamp| type| source ---|---|--- 2025-05-07 13:09:28+00:00| seen| https://t.me/cvedetector/24706...

4CVSS4.8AI score0.00096EPSS
Exploits0References1
NVD
NVD
added 2025/05/07 9:15 a.m.11 views

CVE-2025-20962

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position...

4CVSS0.00096EPSS
Exploits0References1
CVE
CVE
added 2025/05/07 8:24 a.m.52 views

CVE-2025-20962

The CVE-2025-20962 entry concerns Samsung’s SpenGesture service. Affected: SpenGesture service versions prior to SMR May-2025 Release 1. Cause: improper handling of insufficient permissions. Effect: local attackers could track the S Pen position. Mitigation: update to SMR May-2025 Release 1 or la...

4CVSS4.1AI score0.00096EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/07 8:24 a.m.6 views

CVE-2025-20962

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position...

4CVSS4.2AI score0.00096EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/08/23 12:0 a.m.15 views

Fedora: Security Advisory (FEDORA-2024-c611359ae1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.8AI score0.00515EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2024/05/01 3:25 a.m.1 views

SUSE CVE-2024-20962

unknown...

6.5CVSS8.5AI score0.00325EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/02/22 12:0 a.m.80 views

Oracle Linux 8 : mysql:8.0 (ELSA-2024-0894)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0894 advisory. mecab mecab-ipadic mysql 8.0.36-1 - Update to MySQL 8.0.36 8.0.35-2 - Fix int-conversion type error in memcached 8.0.35-1 - Update to MySQL 8.0.35 -...

7.5CVSS6.2AI score0.06984EPSS
Exploits0References76
OSV
OSV
added 2024/02/17 2:15 a.m.4 views

CVE-2024-20962

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

6.5CVSS6.5AI score
Exploits0References2
CVE
CVE
added 2024/02/17 1:50 a.m.321 views

CVE-2024-20962

CVE-2024-20962 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.35 and earlier, and 8.2.0 and earlier. The vulnerability is exploitable over the network with low privileges via multiple protocols and can cause a hang or frequent crash (DoS) of MySQL Server. Th...

6.5CVSS6.3AI score0.00325EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder