Lucene search
K

20 matches found

Circl
Circl
added 2025/08/21 2:22 a.m.10 views

CVE-2025-27217

creationtimestamp| type| source ---|---|--- 2025-08-21 02:22:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwuv33h6u42u...

9.1CVSS8.7AI score0.0021EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:26 a.m.2 views

CVE-2023-27217

A stack-based buffer overflow in the ChangeFriendlyName function of Belkin Smart Outlet V2 F7c063 firmware2.00.11420.OWRT.PVTSNSV2 allows attackers to cause a Denial of Service DoS via a crafted UPNP request...

9.8CVSS7.2AI score0.00657EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:33 p.m.7 views

CVE-2020-27217

In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may send messages that are bigger than the max-message-size that the protocol adapter has indicated during link establishment. While the AMQP...

7.5CVSS6.7AI score0.00325EPSS
Exploits0
CVE
CVE
added 2024/05/07 6:26 a.m.63 views

CVE-2024-27217

The CVE-2024-27217 entry concerns OpenHarmony v4.0.0 and earlier, where a use-after-free vulnerability in pre-installed apps could allow a local attacker to achieve arbitrary code execution. • Affected product: OpenHarmony (version 4.0.0 and before). • Root cause: use-after-free in pre-installed ...

7.8CVSS7.5AI score0.00107EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/07 6:26 a.m.12 views

CVE-2024-27217 MSDP has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free...

6.5CVSS7.5AI score0.00107EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/07 6:26 a.m.10 views

CVE-2024-27217 MSDP has a use after free vulnerability

in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free...

6.5CVSS7AI score0.00107EPSS
Exploits0References1
NVD
NVD
added 2023/05/18 3:15 a.m.14 views

CVE-2023-27217

A stack-based buffer overflow in the ChangeFriendlyName function of Belkin Smart Outlet V2 F7c063 firmware2.00.11420.OWRT.PVTSNSV2 allows attackers to cause a Denial of Service DoS via a crafted UPNP request...

9.8CVSS9.4AI score0.00657EPSS
Exploits1References1
OSV
OSV
added 2023/05/18 3:15 a.m.0 views

CVE-2023-27217

A stack-based buffer overflow in the ChangeFriendlyName function of Belkin Smart Outlet V2 F7c063 firmware2.00.11420.OWRT.PVTSNSV2 allows attackers to cause a Denial of Service DoS via a crafted UPNP request...

9.8CVSS7.9AI score
Exploits0References1
Cvelist
Cvelist
added 2023/05/18 12:0 a.m.9 views

CVE-2023-27217

A stack-based buffer overflow in the ChangeFriendlyName function of Belkin Smart Outlet V2 F7c063 firmware2.00.11420.OWRT.PVTSNSV2 allows attackers to cause a Denial of Service DoS via a crafted UPNP request...

9.5AI score0.00657EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/05/18 12:0 a.m.10 views

CVE-2023-27217

A stack-based buffer overflow in the ChangeFriendlyName function of Belkin Smart Outlet V2 F7c063 firmware2.00.11420.OWRT.PVTSNSV2 allows attackers to cause a Denial of Service DoS via a crafted UPNP request...

9.4AI score0.00657EPSS
Exploits1References1
CVE
CVE
added 2023/05/18 12:0 a.m.52 views

CVE-2023-27217

CVE-2023-27217 is a stack-based buffer overflow in Belkin Wemo/Smart Outlet V2 devices (F7C063) via the ChangeFriendlyName() function. Affected firmware: Belkin Smart Outlet V2 F7c063 2.00.11420.OWRT.PVT_SNSV2 and Wemo Mini Smart Plug V2 (F7C063). Impact: Denial of Service (DoS) through crafted U...

9.8CVSS9.2AI score0.00657EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2023/05/17 1:43 p.m.2 views

CVE-2023-27217

creationtimestamp| type| source ---|---|--- 2023-05-17 13:43:03+00:00| seen| https://t.me/KomunitiSiber/215 2023-05-17 14:21:35+00:00| published-proof-of-concept| Telegram/5V-V67RMgXe-KhRE3LhyfbBHMYLvSDTwmXRDr1uRtJiNIw 2023-05-17 19:20:05+00:00| published-proof-of-concept|...

9.8CVSS9.1AI score0.00657EPSS
Exploits1References5
The Hacker News
The Hacker News
added 2023/05/17 10:17 a.m.45 views

Serious Unpatched Vulnerability Uncovered in Popular Belkin Wemo Smart Plugs

The second generation version of Belkin's Wemo Mini Smart Plug has been found to contain a buffer overflow vulnerability that could be weaponized by a threat actor to inject arbitrary commands remotely. The issue, assigned the identifier CVE-2023-27217, was discovered and reported to Belkin on...

7.8AI score0.00657EPSS
Exploits1
NVD
NVD
added 2022/03/15 5:15 p.m.9 views

CVE-2022-27217

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

6.5CVSS0.00047EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/03/15 4:46 p.m.13 views

CVE-2022-27217

Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

7.2AI score0.00047EPSS
Exploits0References2
CVE
CVE
added 2022/03/15 4:46 p.m.168 views

CVE-2022-27217

CVE-2022-27217 affects Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier. The vulnerability is an information disclosure where passwords are stored unencrypted in job config.xml on the Jenkins controller and can be viewed by users with Extended Read permission or with access to the contro...

6.5CVSS6.6AI score0.00047EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2021/03/04 6:15 p.m.13 views

CVE-2021-27217

An issue was discovered in the sendsecuremsg function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length field of an authenticated message received from the device. Out-of-bounds reads performed by aesremovepadding can crash the running process,...

4.4CVSS6.5AI score
Exploits0References3
CVE
CVE
added 2021/03/04 5:45 p.m.110 views

CVE-2021-27217

CVE-2021-27217 affects yubihsm-shell up to version 2.0.3. The _send_secure_msg() function fails to properly validate the embedded length field of an authenticated device message, enabling out-of-bounds reads in aes_remove_padding() that can crash the process and cause a client-side denial of serv...

4.4CVSS4.5AI score0.00615EPSS
Exploits1References3Affected Software1
Circl
Circl
added 2020/11/13 10:34 p.m.0 views

CVE-2020-27217

creationtimestamp| type| source ---|---|--- 2020-11-13 22:34:02+00:00| seen| https://t.me/cibsecurity/16326...

7.5CVSS7.3AI score0.00325EPSS
Exploits0References1
CVE
CVE
added 2020/11/13 7:30 p.m.85 views

CVE-2020-27217

CVE-2020-27217 : In Eclipse Hono versions 1.3.0 and 1.4.0, the AMQP protocol adapter does not verify the size of AMQP messages from devices. A device could send messages larger than the max-message-size indicated during link establishment; an ill-intentioned AMQP 1.0 client could exploit this to ...

7.5CVSS7.4AI score0.00325EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder