15 matches found
CVE-2018-13277
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none...
CVE-2025-13277
A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...
CVE-2025-13277
creationtimestamp| type| source ---|---|--- 2025-11-17 13:51:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5temzwm3i2x...
CVE-2025-13277
A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...
CVE-2025-13277 code-projects Nero Social Networking Site friendsphoto.php sql injection
A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...
CVE-2019-13277
TRENDnet TEW-827DRU with firmware up to and including 2.04B03 allows an unauthenticated attacker to execute setup wizard functionality, giving this attacker the ability to change configuration values, potentially leading to a denial of service. The request can be made on the local intranet or...
CVE-2024-13277
creationtimestamp| type| source ---|---|--- 2025-01-09 19:33:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113800066962592374 2025-01-09 20:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdiny3nob25 2025-01-10 17:04:48+00:00| seen|...
CVE-2024-13277
CVE-2024-13277 affects the Drupal Smart IP Ban module (versions 7.X-1.0 through 7.X-1.1). The issue is improper/incorrect authorization enabling forceful browsing to view/modify module settings or restricted paths. Root cause: insufficient authorization controls in the Smart IP Ban plugin. Impact...
GitLab 10.6 < 12.9.10 / 12.10 < 12.10.11 / 13.0 < 13.0.6 (CVE-2020-13277)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5 CVE-2020-13277 Note that Nessus has not tested for this issue bu...
CVE-2020-13277
The CVE-2020-13277 issue is a real authorization flaw in GitLab’s repository mirroring logic that allowed read access to private repositories in CE/EE. Affected versions span GitLab CE/EE 10.6 through 13.0.5. Remediation per connected details: upgrade to GitLab fixes for the applicable lines (e.g...
CVE-2019-13277
The CVE-2019-13277 entry affects TRENDnet TEW-827DRU devices with firmware up to 2.04B03. An unauthenticated attacker can trigger the setup wizard functionality, enabling changes to configuration values. This can potentially lead to a denial of service. The attack is possible from the local intra...
CVE-2018-13277
CVE-2018-13277 entry is rejected and not used as stated in the description.
CVE-2017-13277
In ihevcdfmtconv of ihevcdfmtconv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1,...
CVE-2017-13277
CVE-2017-13277 affects Android’s ihevcd_fmt_conv.c, with an out-of-bounds write due to a missing bounds check. This could enable remote code execution and requires user interaction to exploit. Affected versions include Android 6.0 through 8.1. The issue is documented in multiple sources, all attr...