Lucene search
K

63 matches found

EUVD
EUVD
added 2026/01/13 3:29 p.m.2 views

EUVD-2026-2277

In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100i2cmsg rlen value is a user-controlled value, but dtv5100i2cmsg does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeofst-data, an...

6AI score0.00068EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/01/09 10:14 a.m.6 views

CVE-2019-2277

Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, ...

7.8CVSS7.3AI score0.00042EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:21 p.m.7 views

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS6.6AI score0.02226EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:30 p.m.5 views

CVE-2020-2277

Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller...

6.5CVSS6.7AI score0.01482EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 4:29 a.m.6 views

CVE-2010-2277

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...

4.3CVSS5.8AI score0.00463EPSS
Exploits0References1
Circl
Circl
added 2025/03/13 3:36 p.m.3 views

CVE-2025-2277

creationtimestamp| type| source ---|---|--- 2025-03-13 15:36:59+00:00| seen| https://t.me/cvedetector/20206 2025-03-18 16:51:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7928...

7.5CVSS4.8AI score0.00304EPSS
Exploits0References2
OSV
OSV
added 2025/03/13 1:15 p.m.1 views

CVE-2025-2277

Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user to unadvertently leak his SSH password due to missing password masking...

7.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/03/13 1:15 p.m.7 views

CVE-2025-2277

Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user to unadvertently leak his SSH password due to missing password masking...

7.5CVSS0.00304EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/13 12:47 p.m.10 views

CVE-2025-2277

Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user to unadvertently leak his SSH password due to missing password masking...

0.00304EPSS
Exploits0References1
CVE
CVE
added 2025/03/13 12:47 p.m.45 views

CVE-2025-2277

CVE-2025-2277 affects Devolutions Server

7.5CVSS6.9AI score0.00304EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/13 12:47 p.m.9 views

CVE-2025-2277

Exposure of password in web-based SSH authentication component in Devolutions Server 2024.3.13 and earlier allows a user to unadvertently leak his SSH password due to missing password masking...

7.2AI score0.00304EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2014-2277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The maketemporaryfilename function in perltidy 20120701-1 and earlier allows local users to obtain sensitive information or write to arbitrary files via a symli...

7.1CVSS7.2AI score0.0006EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.14 views

RHEL 6 : perltidy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - perltidy: insecure temporary file creation CVE-2014-2277 - perltidy through 20160302, as used by...

7.1CVSS6.6AI score0.0006EPSS
Exploits0References2
Circl
Circl
added 2023/06/13 7:14 a.m.1 views

CVE-2023-2277

creationtimestamp| type| source ---|---|--- 2023-06-13 07:14:54+00:00| seen| https://t.me/cibsecurity/65150...

6.1CVSS4.7AI score0.00179EPSS
Exploits1References1
CVE
CVE
added 2023/06/13 1:48 a.m.42 views

CVE-2023-2277

The CVE-2023-2277 issue affects the WP Directory Kit WordPress plugin (versions up to 1.1.9). It is a Cross-Site Request Forgery (CSRF) vulnerability caused by missing/incorrect nonce validation on the insert function. This allows unauthenticated attackers to alter plugin settings and inject mali...

6.1CVSS4.4AI score0.00179EPSS
Exploits1References3Affected Software1
Circl
Circl
added 2022/09/14 10:31 p.m.3 views

CVE-2022-2277

creationtimestamp| type| source ---|---|--- 2022-09-14 22:31:46+00:00| seen| https://t.me/cibsecurity/49792...

7.5CVSS7.3AI score0.00433EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/09/14 5:2 p.m.5 views

CVE-2022-2277 A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-service when ICCP of SYS600 is request to forward any da ...

Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establishment causes a denial-of-service when ICCP of SYS600 is request to forward any data item updates with timestamps too distant in the future to any remote ICCP...

7.5CVSS7.5AI score0.00433EPSS
Exploits0References1
CVE
CVE
added 2022/09/14 5:2 p.m.47 views

CVE-2022-2277

Hitachi Energy MicroSCADA X SYS600 ICCP stack vulnerability (CVE-2022-2277) allows remote DoS during ICCP establishment when forwarding data item updates with far-future timestamps. Affected products: SYS600 10.2–10.3.1; default ICCP not configured/enabled. CVSS v3.1 base score 7.5 (Network, Low ...

7.5CVSS7.7AI score0.00433EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.18 views

Rockwell (CVE-2016-2277) (deprecated)

Plugin deprecated because integratedarchitecturebuilder is not detectable in this way This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2023/03/10...

0.2AI score0.0001EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.12 views

Mageia: Security Advisory (MGASA-2014-0147)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7AI score0.0006EPSS
Exploits0References4
Rows per page
Query Builder