Mageia: Security Advisory (MGASA-2014-0147)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2277

CVE-2021-2277 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. It allows an unauthenticated attacker with network access via HTTP to access data, per CVSS 3.1 Base Score 7.5 (Confidentiality). The vulner...

Oracle Coherence (Apr 2021 CPU)

The version of the Oracle Coherence installed on the remote host is missing a critical patch update. It is, therefore, affected by a vulnerability, as referenced in the April 2021 CPU advisory. - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core...

CVE-2020-2277

Summary: CVE-2020-2277 affects Jenkins Storable Configs Plugin 1.0 and earlier. It allows users with Job/Read permission to read arbitrary files on the Jenkins controller. The issue is documented across multiple sources, with remediation guidance indicating to upgrade to a version later than 1.0....

Debian: Security Advisory (DLA-2277-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : kernel (RHSA-2020:2277)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2277 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: double free may be caused by t...

openSUSE Security Update : putty (openSUSE-2019-2277)

This update for putty to version 0.73 fixes the following issues : - CVE-2019-17068: Fixed the insufficient handling of terminal escape sequences, that should delimit the pasted data in bracketed paste mode boo1152753. - CVE-2019-17069: Fixed a possible information leak caused by SSH-1...

CVE-2019-2277

Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, ...

CVE-2019-2277

CVE-2019-2277 affects Qualcomm Snapdragon WLAN-related components (e.g., MSM8996AU and related SD/SDX devices). The issue is described as an out-of-bounds read caused by lack of NULL termination on user-controlled data in WLAN paths across numerous Snapdragon platforms. CVSS metrics in the Datapo...

CVE-2018-2277

CVE-2018-2277 entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-2277

...

CVE-2014-2277

The maketemporaryfilename function in perltidy 20120701-1 and earlier allows local users to obtain sensitive information or write to arbitrary files via a symlink attack, related to use of the tmpnam function...

CVE-2014-2277

The CVE-2014-2277 issue affects perltidy up to version 20120701-1, where the make_temporary_filename function can be exploited by local users to read sensitive data or replace arbitrary files via a symlink attack tied to the use of tmpnam. This is the explicit vulnerability detail in the provided...

CVE-2017-2277

CVE-2017-2277 affects Sony WG-C10 Portable Wireless Server, versions 3.0.79 and earlier. The vulnerability is a bypass of access restrictions that could allow an attacker to obtain or alter data stored on the external storage connected to the product. The root cause is inadequate access control (...

CVE-2016-2277

IAB.exe in Rockwell Automation Integrated Architecture Builder IAB before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to execute arbitrary code via a crafted project file...

CVE-2016-2277

CVE-2016-2277 affects Rockwell Automation’s Integrated Architecture Builder (IAB). Affected: IAB versions up to 9.6.0.8 and 9.7.x up to 9.7.0.2. The flaw allows execution of arbitrary code when a crafted project file is loaded. Exploitability evidence is mixed across sources: ICS-CERT indicates t...

CVE-2016-2277

IAB.exe in Rockwell Automation Integrated Architecture Builder IAB before 9.6.0.8 and 9.7.x before 9.7.0.2 allows remote attackers to execute arbitrary code via a crafted project file...

Amazon Linux AMI : perltidy (ALAS-2014-356)

It was discovered that perltidy's maketemporaryfilename function insecurely created temporary files via the use of the tmpnam function. A local attacker could use this flaw to perform a symbolic link attack. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Ubuntu 12.04 LTS / 13.10 : libav vulnerabilities (USN-2277-1)

It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Not...

Low: perltidy

Issue Overview: It was discovered that perltidy's maketemporaryfilename function insecurely created temporary files via the use of the tmpnam function. A local attacker could use this flaw to perform a symbolic link attack. Affected Packages: perltidy Issue Correction: Run yum update perltidy or...