Search Results | AttackerKB

104 Total Results

Displaying 71-80 of 104

Attacker Value

Unknown

CVE-2020-29368

Disclosure Date: November 28, 2020 (last updated February 22, 2025)

An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.

Attacker Value

Unknown

CVE-2019-20921

Disclosure Date: September 30, 2020 (last updated February 22, 2025)

bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). It does not escape title values in OPTION elements. This may allow attackers to execute arbitrary JavaScript in a victim's browser.

Attack Vector: Network Privileges: None User Interaction: Required

Attacker Value

Unknown

CVE-2020-11683

Disclosure Date: September 14, 2020 (last updated February 22, 2025)

A timing side channel was discovered in AT91bootstrap before 3.9.2. It can be exploited by attackers with physical access to forge CMAC values and subsequently boot arbitrary code on an affected system.

Attack Vector: Physical Privileges: None User Interaction: None

Attacker Value

Unknown

CVE-2020-11684

Disclosure Date: September 14, 2020 (last updated February 22, 2025)

AT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory before passing control to a less privileged software component. This can be exploited to disclose these keys and subsequently encrypt and sign the next boot stage (such as the bootloader).

Attack Vector: Network Privileges: None User Interaction: None

Attacker Value

Unknown

CVE-2020-25093

Disclosure Date: September 03, 2020 (last updated February 22, 2025)

Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in blog.php. within application/views/templates/clothesshop, application/views/templates/onepage, and application/views/templates/redlabel.

Attack Vector: Network Privileges: None User Interaction: Required