Lucene search
K

4364 matches found

Cvelist
Cvelist
added 2020/03/24 7:23 p.m.33 views

CVE-2019-20610

An issue was discovered on Samsung mobile devices with N7.X and O8.X Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets software. A double-fetch vulnerability in Trustlet allows arbitrary TEE code execution. The Samsung ID is SVE-2019-13910 April 2019...

8.3AI score0.00581EPSS
Exploits0References1
CVE
CVE
added 2020/03/24 7:23 p.m.55 views

CVE-2019-20610

The CVE-2019-20610 entry describes a double-fetch vulnerability in Trustlet on Samsung mobile devices running N(7.X) and O(8.X) with Exynos 7570/7870/7880/7885/8890/8895/9810 chipsets, enabling arbitrary TEE code execution. Affected component: Trustlet in the TEE. Root cause: double-fetch window ...

9.3CVSS8.2AI score0.00581EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2020/03/16 4:15 p.m.12 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS5.4AI score0.00487EPSS
Exploits1References7
OSV
OSV
added 2020/03/16 4:15 p.m.2 views

DEBIAN-CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.7AI score0.00487EPSS
Exploits1References1
OSV
OSV
added 2020/03/16 4:15 p.m.18 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS4.5AI score0.00487EPSS
Exploits1References7
PyPA
PyPA
added 2020/03/16 4:15 p.m.5 views

PYSEC-2020-7

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.5AI score0.00487EPSS
Exploits1References7Affected Software1
UbuntuCve
UbuntuCve
added 2020/03/16 4:15 p.m.19 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.7AI score0.00487EPSS
Exploits1References2
OSV
OSV
added 2020/03/16 4:15 p.m.0 views

UBUNTU-CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.7AI score0.00487EPSS
Exploits1References3
Prion
Prion
added 2020/03/16 4:15 p.m.21 views

Design/Logic Flaw

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

3.6CVSS5.5AI score0.00487EPSS
Exploits1References7Affected Software6
OSV
OSV
added 2020/03/16 4:15 p.m.4 views

PYSEC-2020-7

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.7AI score0.00487EPSS
Exploits1References7
CVE
CVE
added 2020/03/16 3:5 p.m.220 views

CVE-2020-1735

CVE-2020-1735 is a vulnerability in the Ansible Engine where the fetch module can be intercepted, enabling an attacker to inject a new path and choose a different destination path on the controller. The issue affects all 2.7.x, 2.8.x and 2.9.x branches. Connected advisories confirm multiple vendo...

4.6CVSS5.2AI score0.00487EPSS
Exploits1References7Affected Software4
Cvelist
Cvelist
added 2020/03/16 3:5 p.m.20 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.2CVSS5.6AI score0.00487EPSS
Exploits1References7
Debian CVE
Debian CVE
added 2020/03/16 3:5 p.m.19 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. All versions in 2.7.x, 2.8.x and 2.9.x branches are believed to be vulnerable...

4.6CVSS6.6AI score0.00487EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2020/03/16 12:0 a.m.9 views

PT-2020-6580

Name of the Vulnerable Software and Affected Versions Ansible Engine versions 2.7.x through 2.9.x Description A flaw was found in the Ansible Engine when the fetch module is used, allowing an attacker to intercept the module, inject a new path, and choose a new destination path on the controller...

4.6CVSS7.1AI score0.00487EPSS
Exploits1References200
CNVD
CNVD
added 2020/03/11 12:0 a.m.2 views

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2020-16693)

Mozilla Firefox Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. An information disclosure vulnerability exists in Mozilla Firefox versions prior to 74. The vulnerability can be exploited to read local files via a fetch request from a web extension with all-urls...

7.5CVSS8.1AI score0.01429EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2020/03/10 12:0 a.m.30 views

CVE-2020-6809

When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...

7.5CVSS7.1AI score0.01429EPSS
Exploits0References3
OSV
OSV
added 2020/03/10 12:0 a.m.3 views

UBUNTU-CVE-2020-6809

When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox 74...

7.5CVSS7.2AI score0.01429EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.5 views

The vulnerability of the __zzipFetchFetchDiskTrailer function in the ZZIPlib library allows a hacker to trigger a service failure.

The vulnerability of the zzipfetchdisktrailer function in the ZZIPlib compression library is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by using a specially created zip file...

7.1CVSS6.2AI score0.02285EPSS
Exploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.5 views

The vulnerability of the `__zzip_fetch_disk_trailer` function in the ZZIPlib compression library, which stems from insufficient validation of input data, allows attackers to trigger a service failure.

The vulnerability of the zzipfetchdisktrailer function in the ZZIPlib compression library is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures by using a specially created zip file...

6.5CVSS6.1AI score0.02305EPSS
Exploits1References7Affected Software4
RedhatCVE
RedhatCVE
added 2020/02/18 2:29 p.m.26 views

CVE-2020-1735

A flaw was found in the Ansible Engine when the fetch module is used. An attacker could intercept the module, inject a new path, and then choose a new destination path on the controller node. Mitigation Currently, there is no mitigation for this issue except avoid using the affected fetch module...

4.6CVSS2.1AI score0.00487EPSS
Exploits1References3
Rows per page
Query Builder