Lucene search
K

145 matches found

EUVD
EUVD
added 2026/01/06 4:31 a.m.1 views

EUVD-2026-1077

The Xagio SEO – AI Powered SEO plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.1.0.30 via the 'pixabayDownloadImage' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests...

6.4CVSS5.3AI score0.00038EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 9:41 a.m.5 views

CVE-2024-1077

Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a malicious file. Chromium security severity: High...

8.8CVSS7AI score0.00794EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:5 p.m.7 views

CVE-2022-1077

A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any for...

7.5CVSS6.4AI score0.03176EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:10 p.m.6 views

CVE-2020-1077

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149, CVE-2020-1151,...

7.8CVSS6.7AI score0.12481EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:5 a.m.6 views

CVE-2009-1077

The Change My Password implementation in the admin interface in Sun Java System Identity Manager IdM 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the...

6.5CVSS6.7AI score0.01929EPSS
Exploits1References1
Circl
Circl
added 2025/04/15 2:55 p.m.0 views

CVE-2022-1077

creationtimestamp| type| source ---|---|--- 2025-04-15 14:55:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11835...

7.5CVSS7.3AI score0.03176EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2024-1077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a malicious file. Chromi...

8.8CVSS8.1AI score0.00794EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-1077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, picknextrtentity may return a type confused entry, not detected by the BUGON condition, as the confused entry will not be NULL, but...

7CVSS6.5AI score0.00024EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/09 9:25 a.m.6 views

CVE-2025-1077

A security vulnerability has been identified in the IBL Software Engineering Visual Weather and derived products NAMIS, Aero Weather, Satellite Weather. The vulnerability is present in the Product Delivery Service PDS component in specific server configurations where the PDS pipeline utilizes the...

9.5CVSS7.5AI score0.01124EPSS
Exploits0References1
NVD
NVD
added 2025/02/07 9:15 a.m.5 views

CVE-2025-1077

A security vulnerability has been identified in the IBL Software Engineering Visual Weather and derived products NAMIS, Aero Weather, Satellite Weather. The vulnerability is present in the Product Delivery Service PDS component in specific server configurations where the PDS pipeline utilizes the...

9.5CVSS0.01124EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/07 8:32 a.m.15 views

CVE-2025-1077 Remote Code Execution vulnerability in IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather)

A security vulnerability has been identified in the IBL Software Engineering Visual Weather and derived products NAMIS, Aero Weather, Satellite Weather. The vulnerability is present in the Product Delivery Service PDS component in specific server configurations where the PDS pipeline utilizes the...

9.5CVSS0.01124EPSS
Exploits0References1
CVE
CVE
added 2025/02/07 8:32 a.m.74 views

CVE-2025-1077

CVE-2025-1077 affects IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather) via the Product Delivery Service (PDS) when the PDS pipeline uses the IPDS pipeline with Message Editor Output Filters enabled. The vulnerability allows a remote, unauthenti...

9.5CVSS7.2AI score0.01124EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/07 8:32 a.m.12 views

CVE-2025-1077 Remote Code Execution vulnerability in IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather)

A security vulnerability has been identified in the IBL Software Engineering Visual Weather and derived products NAMIS, Aero Weather, Satellite Weather. The vulnerability is present in the Product Delivery Service PDS component in specific server configurations where the PDS pipeline utilizes the...

9.5CVSS7.5AI score0.01124EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/02/05 12:0 a.m.7 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2025-1077)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.6AI score0.00796EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2024/07/12 12:0 a.m.30 views

Amazon Linux 2 : kernel, --advisory ALAS2-2024-2588 (ALAS-2024-2588)

The version of kernel installed on the remote host is prior to 4.14.344-262.563. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2588 advisory. kernel: Type confusion in picknextrtentity, which can result in memory corruption. CVE-2023-1077 In the Linux...

7CVSS6.1AI score0.00046EPSS
Exploits0References6
Amazon
Amazon
added 2024/07/11 12:0 a.m.1 views

Important: kernel

Issue Overview: kernel: Type confusion in picknextrtentity, which can result in memory corruption. CVE-2023-1077 In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on dataavail and actual data CVE-2023-53998 Affected Packages: kernel Note: This advisory i...

7CVSS6AI score0.00046EPSS
Exploits0
Amazon
Amazon
added 2024/07/11 12:0 a.m.32 views

Important: kernel

Issue Overview: kernel: Type confusion in picknextrtentity, which can result in memory corruption. CVE-2023-1077 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories...

7CVSS7.8AI score0.00024EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/03/05 12:0 a.m.31 views

RHEL 9 : edk2 (RHSA-2024:1077)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1077 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware f...

8.8CVSS7.8AI score0.00334EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2024/03/05 12:0 a.m.39 views

OracleVM 3.4 : kernel-uek (OVMSA-2024-0002)

The remote OracleVM system is missing necessary patches to address security updates: - Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated nearby device to spoof the BDADDR of the peer device to complete pairing without knowledge...

7.8CVSS7AI score0.00124EPSS
Exploits2References11
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.30 views

openSUSE: Security Advisory for the Linux Kernel (Live Patch 11 for SLE 15 SP4) (SUSE-SU-2023:3647-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.02125EPSS
Exploits10References2
Rows per page
Query Builder