Lucene search
+L

6774 matches found

Prion
Prion
•added 2020/03/24 8:15 p.m.•35 views

Double free

An issue was discovered on Samsung mobile devices with N7.X and O8.X Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets software. A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution. The Samsung ID is SVE-2019-13910 April 2019...

9.3CVSS8.3AI score0.00581EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/03/24 7:23 p.m.•75 views

CVE-2019-20610

The CVE-2019-20610 entry describes a double-fetch vulnerability in Trustlet on Samsung mobile devices running N(7.X) and O(8.X) with Exynos 7570/7870/7880/7885/8890/8895/9810 chipsets, enabling arbitrary TEE code execution. Affected component: Trustlet in the TEE. Root cause: double-fetch window ...

9.3CVSS8.2AI score0.00581EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/03/24 7:23 p.m.•54 views

CVE-2019-20610

An issue was discovered on Samsung mobile devices with N7.X and O8.X Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets software. A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution. The Samsung ID is SVE-2019-13910 April 2019...

8.3AI score0.00581EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•12 views

CVE-2019-20610: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue was discovered on Samsung mobile devices with N7.X and O8.X Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets software. A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution. The Samsung ID is SVE-2019-13910 April 2019...

9.3CVSS7.8AI score0.00581EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/03/24 12:00 a.m.•9 views

PT-2020-10586

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N7.X and O8.X software Description A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution on Samsung mobile devices with Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets...

9.3CVSS0.00581EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2020/03/16 4:15 p.m.•10 views

DEBIAN-CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.7AI score0.00472EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/03/16 4:15 p.m.•26 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS4.5AI score
SaveExploits0References7
NVD
NVD
•added 2020/03/16 4:15 p.m.•21 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS5.4AI score0.00472EPSS
SaveExploits1References7
Prion
Prion
•added 2020/03/16 4:15 p.m.•31 views

Design/Logic Flaw

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

3.6CVSS5.5AI score0.00472EPSS
SaveExploits1References7Affected Software6
UbuntuCve
UbuntuCve
•added 2020/03/16 4:15 p.m.•30 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.7AI score0.00472EPSS
SaveExploits1References2
PyPA
PyPA
•added 2020/03/16 4:15 p.m.•15 views

PYSEC-2020-7

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.5AI score0.00472EPSS
SaveExploits1References7Affected Software1
osv_pysec
osv_pysec
•added 2020/03/16 4:15 p.m.•20 views

PYSEC-2020-7

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.7AI score0.00472EPSS
SaveExploits1References7
osv_ubuntu
osv_ubuntu
•added 2020/03/16 4:15 p.m.•16 views

UBUNTU-CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.7AI score0.00472EPSS
SaveExploits1References3
CVE
CVE
•added 2020/03/16 3:05 p.m.•262 views

CVE-2020-1735

CVE-2020-1735 is a vulnerability in the Ansible Engine where the fetch module can be intercepted, enabling an attacker to inject a new path and choose a different destination path on the controller. The issue affects all 2.7.x, 2.8.x and 2.9.x branches. Connected advisories confirm multiple vendo...

4.6CVSS5.2AI score0.00472EPSS
SaveExploits1References7Affected Software4
Debian CVE
Debian CVE
•added 2020/03/16 3:05 p.m.•32 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.6AI score0.00472EPSS
SaveExploits1
Mend
Mend
•added 2020/03/16 3:05 p.m.•4 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS0.00472EPSS
SaveExploits1References21
Cvelist
Cvelist
•added 2020/03/16 3:05 p.m.•34 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.2CVSS5.6AI score0.00472EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2020/03/16 12:00 a.m.•19 views

PT-2020-6580

Name of the Vulnerable Software and Affected Versions Ansible Engine versions 2.7.x through 2.9.x Description A flaw was found in the Ansible Engine when the fetch module is used, allowing an attacker to intercept the module, inject a new path, and choose a new destination path on the controller...

4.6CVSS7.1AI score0.00472EPSS
SaveExploits1References200
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/16 12:00 a.m.•6 views

CVE-2020-1735: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.1AI score0.00472EPSS
SaveExploits1References3
CNVD
CNVD
•added 2020/03/11 12:00 a.m.•20 views

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-16693)

Mozilla Firefox Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An information disclosure vulnerability exists in Mozilla Firefox versions prior to 74. The vulnerability can be exploited to read local files via a fetch request from a web extension with all-urls...

7.5CVSS8.1AI score0.01484EPSS
SaveExploits0References1
Rows per page
Query Builder