Lucene search
K

133 matches found

Circl
Circl
added 2026/02/03 9:30 a.m.8 views

CVE-2026-1777

creationtimestamp| type| source ---|---|--- 2026-02-03 09:30:51+00:00| seen| https://gist.github.com/alon710/34c4fe609720fe12fdd6c57b2bf9fe8f 2026-03-05 16:25:31+00:00| seen| https://bsky.app/profile/aihaberleri.bsky.social/post/3mgd7lcniab2q 2026-03-05 16:25:38+00:00| seen|...

8.5CVSS5.7AI score0.00022EPSS
Exploits0References3
vulnersOsv
vulnersOsv
added 2026/02/02 11:33 p.m.2 views

admet-workbench (>=0.1.0 <=0.1.1), agent-gpt-aws (>=0.4.4 <=0.9.5) +49 more potentially affected by CVE-2026-1777 via sagemaker (=3.10.1)

sagemaker PYPI version =3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - admet-workbench =0.1.0, =0.4.4, =1.3.24, =0.0.2, =0.1.13, =0.1.0, =0.4.0, =1.0.1, =0.4.0, =0.1.12, =0.1.0, =0.2.7 and more Source cves:...

8.5CVSS5.8AI score0.00022EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2026/02/02 11:33 p.m.5 views

admet-workbench (>=0.1.0 <=0.1.1), agent-gpt-aws (>=0.4.4 <=0.9.5) +49 more potentially affected by CVE-2026-1777 via sagemaker (=3.10.1)

sagemaker PYPI version =3.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - admet-workbench =0.1.0, =0.4.4, =1.3.24, =0.0.2, =0.1.13, =0.1.0, =0.4.0, =1.0.1, =0.4.0, =0.1.12, =0.1.0, =0.2.7 and more Source cves:...

8.5CVSS5.8AI score0.00022EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2026/02/02 11:33 p.m.3 views

amzn-nova-customization-sdk (>=1.0.29 <=1.0.72), anymodality (=0.1.0) +27 more potentially affected by CVE-2026-1777 via sagemaker (>=1.52.1 <=2.254.1)

sagemaker PYPI version =1.52.1, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.0, =0.1.1, =0.9.0, =0.2.8, =1.97.0.dev0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.7.3, =1.0.1 and more Source cves: CVE-2026-1777 Source advisory: OSV:GHSA-RJRP-M2JW-PV9C...

8.5CVSS5.8AI score0.00022EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2026/02/02 11:33 p.m.1 views

amzn-nova-customization-sdk (>=1.0.29 <=1.0.72), anymodality (=0.1.0) +26 more potentially affected by CVE-2026-1777 via sagemaker (>=2.0.0 <=2.254.1)

sagemaker PYPI version =2.0.0, =1.0.29, =0.1.1b20230324, =0.4.6, =0.1.0, =0.1.1, =0.9.0, =1.0.0, =1.97.0.dev0, =2.0.0, =1.0.0, =1.0.0, =0.4.0, =0.7.3, =1.0.1 and more Source cves: CVE-2026-1777 Source advisory: SNYK:PYTHON-SAGEMAKER-15182664...

8.5CVSS5.8AI score0.00022EPSS
Exploits0
Circl
Circl
added 2025/06/06 9:4 a.m.11 views

CVE-2025-1777

creationtimestamp| type| source ---|---|--- 2025-06-06 09:04:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqwi4tzrbu2m...

6.4CVSS7AI score0.0016EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/06 5:22 a.m.6 views

CVE-2025-1777 BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via ux_cb_page_options_save

The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the 'uxcbpageoptionssave' function in all versions up to, and including, 3.16.2.1. This makes it possible for authenticated attackers, with subscriber-level access and...

6.4CVSS0.0016EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/06 5:22 a.m.6 views

CVE-2025-1777 BM Content Builder <= 3.16.2.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via ux_cb_page_options_save

The BM Content Builder plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the 'uxcbpageoptionssave' function in all versions up to, and including, 3.16.2.1. This makes it possible for authenticated attackers, with subscriber-level access and...

6.4CVSS6.8AI score0.0016EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 10:13 p.m.5 views

CVE-2022-1777

The Filr WordPress plugin before 1.2.2.1 does not have authorisation check in two of its AJAX actions, allowing them to be called by any authenticated users, such as subscriber. They are are protected with a nonce, however the nonce is leaked on the dashboard. This could allow them to upload...

8.8CVSS6.5AI score0.00838EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:4 p.m.4 views

CVE-2021-1777

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

7.8CVSS6.6AI score0.00402EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:0 a.m.5 views

Ivanti Avalanche WLAvalancheService TV_FC Infinite Loop Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService service, which listens on TCP port 1777 by default...

7.5CVSS6.6AI score0.50583EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:0 a.m.6 views

Ivanti Avalanche WLAvalancheService TV_FP Infinite Loop Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService service, which listens on TCP port 1777 by default...

7.5CVSS6.6AI score0.07826EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/11/13 12:0 a.m.6 views

Ivanti Avalanche WLAvalancheService TV_FN Infinite Loop Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService service, which listens on TCP port 1777 by default...

7.5CVSS6.6AI score0.07826EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2024/06/05 12:0 a.m.11 views

openSUSE Security Advisory (SUSE-SU-2024:1777-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.3CVSS6.5AI score0.00263EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.15 views

RHEL 6 : rhn-client-tools (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - rhn-setup: rhnregks fails to properly validate SSL/TLS certificates CVE-2015-1777 Note that Nessus has not tested f...

5.9CVSS5.8AI score0.00195EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.12 views

Ivanti Avalanche WLAvalancheService Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue...

6.5CVSS6.5AI score0.03745EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.13 views

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue...

5.3CVSS5.3AI score0.01343EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.14 views

Ivanti Avalanche WLAvalancheService Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue...

5.3CVSS5.3AI score0.02878EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.18 views

Ivanti Avalanche WLAvalancheService Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue results from t...

8.8CVSS8.9AI score0.04892EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/04/23 12:0 a.m.12 views

Ivanti Avalanche WLAvalancheService Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the WLAvalancheService, which listens on TCP port 1777 by default. The issue...

6.5CVSS6.5AI score0.01759EPSS
Exploits0References1
Rows per page
Query Builder