Lucene search
K

53 matches found

Circl
Circl
added 2026/01/27 11:0 a.m.2 views

CVE-2022-27377

creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

7.5CVSS8.3AI score0.00323EPSS
Exploits1References1
Circl
Circl
added 2026/01/22 1:34 a.m.4 views

CVE-2025-27377

creationtimestamp| type| source ---|---|--- 2026-01-22 01:34:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcy275dade2g...

5.3CVSS5AI score0.00013EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/22 12:16 a.m.22 views

CVE-2025-27377 Missing Validation of Self-Signed Certificates in Altium Designer Allows Man-in-the-Middle Attacks

Altium Designer version 24.9.0 does not validate self-signed server certificates for cloud connections. An attacker capable of performing a man-in-the-middle MITM attack could exploit this issue to intercept or manipulate network traffic, potentially exposing authentication credentials or sensiti...

5.3CVSS0.00013EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-27377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Itemfuncin::cleanup, which is exploited via specially crafted SQL...

7.5CVSS7.8AI score0.00323EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:17 p.m.3 views

CVE-2020-27377

A cross-site scripting XSS vulnerability was discovered in the Administrator panel on the 'Setting News' module on CMS Made Simple 2.2.14 which allows an attacker to execute arbitrary web scripts...

4.8CVSS5.9AI score0.0031EPSS
Exploits1
Circl
Circl
added 2025/03/28 11:29 p.m.1 views

CVE-2024-27377

creationtimestamp| type| source ---|---|--- 2025-03-28 23:29:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9503...

7.8CVSS4.8AI score0.00058EPSS
Exploits0References1
NVD
NVD
added 2024/06/05 7:15 p.m.15 views

CVE-2024-27377

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsinangetsecurityinfonl, there is no input validation check on secinfo-keyinfo.body.pmkinfo.pmklen coming from userspace, which can lead to a heap overwrite...

7.8CVSS6.5AI score0.00058EPSS
Exploits0References1
CVE
CVE
added 2024/06/05 6:36 p.m.71 views

CVE-2024-27377

The CVE-2024-27377 entry concerns Samsung Mobile Processors (Exynos 980/850/1280/1380/1330). The root cause is missing input validation in slsi_nan_get_security_info_nl() for sec_info->key_info.body.pmk_info.pmk_len coming from userspace, which can trigger a heap overwrite. Documents identify ...

7.8CVSS6.8AI score0.00058EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/05 6:36 p.m.20 views

CVE-2024-27377

An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsinangetsecurityinfonl, there is no input validation check on secinfo-keyinfo.body.pmkinfo.pmklen coming from userspace, which can lead to a heap overwrite...

6.7CVSS6.9AI score0.00058EPSS
Exploits0References1
Circl
Circl
added 2023/10/25 10:45 p.m.2 views

CVE-2023-27377

creationtimestamp| type| source ---|---|--- 2023-10-25 22:45:28+00:00| seen| https://t.me/cibsecurity/72856...

7.5CVSS7.3AI score0.00307EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/25 10:20 a.m.13 views

CVE-2023-27377 Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the StudentPopupDetailsEmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS7.9AI score0.00307EPSS
Exploits0References1
CVE
CVE
added 2023/10/25 10:20 a.m.40 views

CVE-2023-27377

CVE-2023-27377 affects IDAttend’s IDWeb app (versions 3.1.052 and earlier). The root cause is missing authentication in the StudentPopupDetails_EmergencyContactDetails method, enabling unauthenticated attackers to exfiltrate sensitive student data over the network. The cvss 3.1 data indicates hig...

7.5CVSS7.7AI score0.00307EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/25 10:20 a.m.11 views

CVE-2023-27377 Missing Authentication In IDAttend’s IDWeb Application

Missing authentication in the StudentPopupDetailsEmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS7.7AI score0.00307EPSS
Exploits0References1
Rosalinux
Rosalinux
added 2023/10/21 3:31 p.m.32 views

Advisory ROSA-SA-2023-2253

software: mariadb 10.5.20 OS: ROSA-CHROME packageevrstring: mariadb-10.5.20-1.src.rpm CVE-ID: CVE-2022-21595 BDU-ID: 2022-06420 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability exists in the C API component of the MySQL Server database management system due to insufficient input validation. Exploitati...

7.8CVSS8AI score0.00323EPSS
Exploits11
OSV
OSV
added 2023/08/31 12:15 p.m.0 views

BELL-CVE-2022-27377 CVE-2022-27377 does not affect BellSoft software

Bulletin has no description...

7.5CVSS5.8AI score0.00323EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2023/03/20 12:0 a.m.36 views

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27377)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27377 advisory. - MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component...

7.5CVSS8AI score0.00323EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/11/24 12:0 a.m.26 views

Ubuntu: Security Advisory (USN-5739-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.4AI score0.00952EPSS
Exploits34References2
Tenable Nessus
Tenable Nessus
added 2022/11/16 12:0 a.m.32 views

AlmaLinux 9 : galera, mariadb, and mysql-selinux (ALSA-2022:5948)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5948 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

7.8CVSS6.8AI score0.00472EPSS
Exploits29References37
RedHat Linux
RedHat Linux
added 2022/09/13 9:57 a.m.55 views

Moderate: Red Hat Security Advisory: mariadb:10.3 security and bug fix update

An update for the mariadb:10.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.8CVSS7.2AI score0.00952EPSS
Exploits27References36
Rockylinux
Rockylinux
added 2022/09/13 7:36 a.m.40 views

mariadb:10.3 security and bug fix update

An update is available for Judy, mariadb, galera. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MariaDB is a multi-user, multi-threaded SQL database server tha...

7.8CVSS8AI score0.00952EPSS
Exploits27
Rows per page
Query Builder