148 matches found
CLEANSTART-2026-SE93018 Security fix for CVE-2021-3677 applied in: postgresql15 13.4-r0
Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101977
ghsa-3677-xxcr-wjqv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PYSEC-2026-3677 Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority
Summary Repo under test: https://github.com/Netflix/lemur When ADMINONLYAUTHORITYCREATION=False an explicitly supported and documented configuration, POST /api/1/authorities with type=subca never verifies that the caller holds AuthorityPermission on the supplied parent authority. The parent field...
MINI-3677-C4HV-7489
Bulletin has no description...
MINI-2R8V-3677-WHVR
Bulletin has no description...
CLEANSTART-2026-XZ85436 Security fixes in kafka-fips 4.0.1-r0
Package kafka-fips version 4.0.1-r0 fixes 2 vulnerabilities: ghsa-3677-xxcr-wjqv, ghsa-vc5p-v9hr-52mj...
CLEANSTART-2026-SJ62323 Security fixes in postgresql15 13.4-r0
Package postgresql15 version 13.4-r0 fixes 1 vulnerabilities: CVE-2021-3677...
CVE-2026-3677
A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be use...
CVE-2026-3677
A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be use...
CVE-2026-3677
creationtimestamp| type| source ---|---|--- 2026-03-07 21:15:50+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3677 2026-03-13 02:38:10+00:00| seen| https://bsky.app/profile/secqube.com/post/3mgvv3c7wyh2y...
GHSA-3677-XXCR-WJQV vulnerabilities
Vulnerabilities for packages: confluent-common-docker, strimzi-kafka-operator...
SUSE: Security Advisory (SUSE-SU-2025:3677-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-3677
The Ultimate 410 Gone Status Code plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 410 entries in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-leve...
Alibaba Cloud Linux 3 : 0136: postgresql:13 (ALINUX3-SA-2022:0136)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0136 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-23214: It was found that a...
CVE-2025-3677
A vulnerability classified as critical was found in lm-sys fastchat up to 0.2.36. This vulnerability affects the function splitfiles/applydeltalowcpumem of the file fastchat/model/applydelta.py. The manipulation leads to deserialization. An attack has to be approached locally...
CVE-2025-3677 lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserialization
A vulnerability classified as critical was found in lm-sys fastchat up to 0.2.36. This vulnerability affects the function splitfiles/applydeltalowcpumem of the file fastchat/model/applydelta.py. The manipulation leads to deserialization. An attack has to be approached locally...
CVE-2025-3677 lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserialization
A vulnerability classified as critical was found in lm-sys fastchat up to 0.2.36. This vulnerability affects the function splitfiles/applydeltalowcpumem of the file fastchat/model/applydelta.py. The manipulation leads to deserialization. An attack has to be approached locally...
CVE-2025-3677
CVE-2025-3677 affects lm-sys fastchat up to 0.2.36. A vulnerability in fastchat/model/apply_delta.py -> split_files/apply_delta_low_cpu_mem allows deserialization when manipulated locally. The connected docs specify a local-access exploitation vector; no exploit details are provided and no rem...
K000149918: PostgresQL vulnerability CVE-2021-3677
Security Advisory Description A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server...
CVE-2024-3677
The Ultimate 410 Gone Status Code plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 410 entries in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-leve...