Lucene search
+L

297 matches found

OSV
OSV
•added 2022/05/24 4:53 p.m.•21 views

GHSA-2VP2-8M5J-4RJX cnlh nps vulnerable to file overwrite by local user

lib/install/install.go in cnlh nps prior to 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user...

5.5CVSS5.3AI score0.00955EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2022/03/09 12:00 a.m.•78 views

RHEL 8 : kernel (RHSA-2022:0777)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0777 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Use After Free in unixgc which...

9.8CVSS7AI score0.6777EPSS
SaveExploits5References16
Circl
Circl
•added 2022/03/01 12:23 p.m.•16 views

CVE-2022-0777

creationtimestamp| type| source ---|---|--- 2022-03-01 12:23:57+00:00| seen| https://t.me/cibsecurity/38250...

7.5CVSS7.3AI score0.01241EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/03/01 8:50 a.m.•42 views

CVE-2022-0777 Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...

7.3CVSS7.8AI score0.01241EPSS
SaveExploits1References2
CVE
CVE
•added 2022/03/01 8:50 a.m.•147 views

CVE-2022-0777

CVE-2022-0777 affects microweber/microweber prior to version 1.3. The issue is a weak password recovery mechanism caused by a missing rate limit on password reset emails, as described by the connected advisories (e.g., GHSA-7R79-MRP6-8MHQ and related Red Hat/NVD entries). The documented impact is...

7.5CVSS7.3AI score0.01241EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/03/01 8:50 a.m.•38 views

CVE-2022-0777 Weak Password Recovery Mechanism for Forgotten Password in microweber/microweber

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3...

7.3CVSS7.5AI score
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2021/09/23 1:31 a.m.•50 views

Security Bulletin: Vulnerabilities in openssh affect Power Hardware Management Console (CVE-2016-0777, CVE-2016-0778)

Summary OpenSSH is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-0777 DESCRIPTION: OpenSSH could allow a remote attacker to obtain sensitive information, caused by a client information leak from using the roaming...

8.1CVSS0.5AI score0.63468EPSS
SaveExploits3Affected Software1
attackerkb
attackerkb
•added 2021/08/19 12:15 p.m.•8 views

CVE-2021-39273

In XeroSecurity Sn1per 9.0 free version, insecure permissions 0777 are set upon application execution, allowing an unprivileged user to modify the application, modules, and configuration files. This leads to arbitrary code execution with root privileges...

10CVSS7.7AI score0.03123EPSS
SaveExploits2References4
IBM Security Bulletins
IBM Security Bulletins
•added 2021/06/25 4:46 p.m.•45 views

Security Bulletin: Vulnerabilities in OpenSSH affect GPFS V3.5 for Windows (CVE-2016-0777, CVE-2016-0778)

Summary An information leak flaw and buffer overflow flaw in the way the OpenSSH client roaming feature was implemented affects OpenSSH for GPFS V3.5. Vulnerability Details CVEID: CVE-2016-0777 DESCRIPTION: OpenSSH could allow a remote attacker to obtain sensitive information, caused by a client...

8.1CVSS0.4AI score0.63468EPSS
SaveExploits3Affected Software1
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•35 views

SUSE: Security Advisory (SUSE-SU-2016:0777-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.1AI score0.30946EPSS
SaveExploits9References4
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•22 views

SUSE: Security Advisory (SUSE-SU-2021:0777-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS4.2AI score0.00315EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•50 views

SUSE: Security Advisory (SUSE-SU-2016:0119-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.9AI score0.63468EPSS
SaveExploits3References5
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•28 views

SUSE: Security Advisory (SUSE-SU-2015:1478-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.10108EPSS
SaveExploits11References46
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•58 views

SUSE: Security Advisory (SUSE-SU-2016:0120-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.9AI score0.63468EPSS
SaveExploits3References5
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•45 views

SUSE: Security Advisory (SUSE-SU-2016:0117-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.9AI score0.63468EPSS
SaveExploits3References5
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•19 views

SUSE: Security Advisory (SUSE-SU-2016:0118-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.9AI score0.63468EPSS
SaveExploits3References5
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•28 views

SUSE: Security Advisory (SUSE-SU-2015:0658-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.9CVSS6.8AI score0.00534EPSS
SaveExploits0References33
OSV
OSV
•added 2021/02/10 7:15 p.m.•11 views

CVE-2021-27142

An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hardcoded private key that has 0777 permissions...

7.5CVSS7.1AI score0.15745EPSS
SaveExploits1References1
NVD
NVD
•added 2021/02/10 7:15 p.m.•26 views

CVE-2021-27142

An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hardcoded private key that has 0777 permissions...

7.5CVSS0.15745EPSS
SaveExploits1References1
Prion
Prion
•added 2021/02/10 7:15 p.m.•32 views

Hardcoded credentials

An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hardcoded private key that has 0777 permissions...

5CVSS7.6AI score0.15745EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder