Lucene search
+L

48 matches found

Circl
Circl
added 2026/04/10 3:45 p.m.12 views

CVE-2026-34477

creationtimestamp| type| source ---|---|--- 2026-04-10 15:45:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mj5o3zfi6q26 2026-05-13 16:36:23+00:00| seen| https://gist.github.com/ppkarwasz/53b0a3c07a9e44aa945726138f67d11c...

6.3CVSS6.3AI score0.0041EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/10 3:36 p.m.343 views

CVE-2026-34477

CVE-2025-68161 (and CVE-2026-34477) affect Apache Log4j Core Socket Appender where TLS hostname verification was silently ignored when configured via verifyHostName, leaving potential MITM scenarios under SMTP, Socket, or Syslog Appenders using a nested element. The issue spans versions 2.0-beta...

6.3CVSS6.6AI score0.0041EPSS
SaveExploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:36 a.m.24 views

CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share because of norootsquash and insecure. In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In...

7.8CVSS6.7AI score0.00266EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:04 p.m.9 views

CVE-2022-34477

The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could have leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox 102...

7.5CVSS5.8AI score0.00551EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/27 2:15 p.m.37 views

CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share because of norootsquash and insecure. In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In...

7.8CVSS6.4AI score0.00266EPSS
SaveExploits1References3
CVE
CVE
added 2024/05/27 2:00 p.m.576 views

CVE-2024-34477

Summary (CVE-2024-34477) : In FOG projects, the function configureNFS in lib/common/functions.sh up to version 1.5.10 allows local privilege escalation by mounting a crafted NFS share, due to insecure settings (no_root_squash). To exploit, an attacker must mount an NFS share, place an executable ...

7.8CVSS6.6AI score0.00266EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/05/27 2:00 p.m.34 views

CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share because of norootsquash and insecure. In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In...

7.8CVSS7AI score
SaveExploits0References5
Cvelist
Cvelist
added 2024/05/27 2:00 p.m.62 views

CVE-2024-34477

configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share because of norootsquash and insecure. In order to exploit the vulnerability, someone needs to mount an NFS share in order to add an executable file as root. In...

6.4AI score0.00266EPSS
SaveExploits1References3
Circl
Circl
added 2023/08/07 8:18 p.m.11 views

CVE-2023-34477

creationtimestamp| type| source ---|---|--- 2023-08-07 20:18:33+00:00| seen| https://t.me/cibsecurity/67898...

9.8CVSS8.7AI score0.00602EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/07 5:15 p.m.26 views

CVE-2023-34477

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

9.8CVSS9.8AI score0.00602EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/08/07 4:50 p.m.16 views

CVE-2023-34477 Extension - braincert.com - SQLi in Virtual Classroom component for Joomla <= 1.6.0

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

7.9AI score0.00602EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/07 4:50 p.m.54 views

CVE-2023-34477

CVE-2023-34477 affects Braincert’s Joomla Online Virtual Classroom extension (VCE) for Joomla, specifically the Virtual Classroom component, with affected versions listed as Joomla

9.8CVSS9.8AI score0.00602EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2022/12/22 8:15 p.m.18 views

CVE-2022-34477

The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could have leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox 102...

7.5CVSS0.00551EPSS
SaveExploits0References2
OSV
OSV
added 2022/12/22 8:15 p.m.8 views

CVE-2022-34477

The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could have leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox 102...

7.5CVSS7.3AI score0.00551EPSS
SaveExploits0References2
CVE
CVE
added 2022/12/22 12:00 a.m.189 views

CVE-2022-34477

CVE-2022-34477 describes a vulnerability in Mozilla Firefox where the MediaError message could leak information for same-site cross-origin resources, enabling XS-Leaks. Affected product: Firefox earlier than 102. The underlying issue is inconsistent MediaError messaging, which could disclose sens...

7.5CVSS7.5AI score0.00551EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2022/12/22 12:00 a.m.75 views

CVE-2022-34477

The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could have leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox 102...

7.5CVSS8.6AI score0.00551EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2022/12/22 12:00 a.m.5 views

CVE-2022-34477

The MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could have leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox 102...

6.7AI score0.00551EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/09/15 12:00 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2022:3273-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.23941EPSS
SaveExploits2References6
Tenable Nessus
Tenable Nessus
added 2022/09/15 12:00 a.m.58 views

SUSE SLES12: MozillaFirefox / MozillaFirefox-branding-SLE / MozillaFirefox-devel / etc (SUSE-SU-2022:3273-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3273-1 advisory. Mozilla Firefox was updated to 102.2.0esr ESR: Fixed: Various stability, functionality, and security fixes. - MFSA 2022-34 bsc12026...

9.8CVSS6.6AI score0.23941EPSS
SaveExploits2References60
OpenVAS
OpenVAS
added 2022/08/26 12:00 a.m.26 views

Ubuntu: Security Advisory (USN-5504-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.23941EPSS
SaveExploits1References2
Rows per page
Query Builder