Lucene search
K

42 matches found

OSV
OSV
added 2 days ago3 views

ROOT-OS-DEBIAN-12-CVE-2025-37777 CVE-2025-37777 in rootio-linux - Patched by Root

Root has patched CVE-2025-37777 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

7.8CVSS5.4AI score0.00049EPSS
Exploits0
OSV
OSV
added 6 days ago4 views

ROOT-OS-UBUNTU-2204-CVE-2025-37777 CVE-2025-37777 in rootio-linux - Patched by Root

Root has patched CVE-2025-37777 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

7.8CVSS5.4AI score0.00049EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/09 10:50 a.m.8 views

CVE-2022-37777

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote command execution RCE vulnerability via the trHops parameter of the tracert function...

7.2CVSS7.8AI score0.02965EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/05 9:27 a.m.3 views

EUVD-2025-37777

The Graphina – Elementor Charts and Graphs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple chart widgets in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping on data attributes. This makes it possible for authenticat...

6.4CVSS4.7AI score0.0005EPSS
Exploits0References7
CBLMariner
CBLMariner
added 2025/10/01 7:21 p.m.3 views

CVE-2025-37777 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-37777 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

7.1AI score0.00049EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/08/30 6:20 p.m.3 views

CVE-2024-37777

O2OA v9.0.3 was discovered to contain a remote code execution RCE vulnerability via the mainOutput function...

8.8CVSS8.6AI score0.00534EPSS
Exploits1References1
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-37777 Malicious code in uniform-cherry-ukvf (npm)

The package uniform-cherry-ukvf was found to contain malicious code...

7.2AI score
Exploits0
Circl
Circl
added 2025/05/02 7:16 a.m.1 views

CVE-2025-37777

creationtimestamp| type| source ---|---|--- 2025-05-02 07:16:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14457 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

7.8CVSS6.2AI score0.00049EPSS
Exploits0References2
NVD
NVD
added 2025/05/01 2:15 p.m.11 views

CVE-2025-37777

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2leasebreaknoti Move tcptransport free to ksmbdconnfree. If ksmbd connection is referenced when ksmbd server thread terminates, It will not be freed, but conn-tcptransport is freed...

7.8CVSS0.00049EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2025/05/01 2:15 p.m.0 views

CVE-2025-37777

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2leasebreaknoti Move tcptransport free to ksmbdconnfree. If ksmbd connection is referenced when ksmbd server thread terminates, It will not be freed, but conn-tcptransport is freed...

7.8CVSS6.3AI score0.00049EPSS
Exploits0References24
CVE
CVE
added 2025/05/01 1:7 p.m.88 views

CVE-2025-37777

CVE-2025-37777: In the Linux kernel ksmbd path, a use-after-free could occur in __smb2_lease_break_noti() when the connection is disconnected, because ksmbd_conn_write may touch freed structures if conn->ksmbd_transport is already freed. The fix moves the tcp_transport free to ksmbd_conn_free,...

7.8CVSS6.6AI score0.00049EPSS
Exploits0References4Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2025/02/27 12:0 a.m.3 views

VulnCheck KEV: CVE-2013-6117

Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credentials, change user passwords, clear log files, and perform other actions via a request to TCP port 37777...

7.5CVSS5.8AI score0.8998EPSS
Exploits6References1
Vulnrichment
Vulnrichment
added 2025/01/22 12:0 a.m.6 views

CVE-2023-37777

A SQL injection vulnerability exists in Synnefo Internet Management Software IMS version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation coul...

9.7AI score0.00148EPSS
Exploits0References2
CVE
CVE
added 2025/01/22 12:0 a.m.66 views

CVE-2023-37777

CVE-2023-37777 affects Synnefo Internet Management Software (IMS) up to version 2023 and earlier. Root cause: improper input validation in a specific API endpoint parameter enables SQL injection. Exploitation could reveal database records with DB administrator privileges and may enable privilege ...

9.8CVSS9.7AI score0.00148EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/22 12:0 a.m.11 views

CVE-2023-37777

A SQL injection vulnerability exists in Synnefo Internet Management Software IMS version 2023 and earlier. This vulnerability occurs due to improper input validation in a specific API endpoint parameter allowing an attacker to manipulate SQL queries via crafted input. Successful exploitation coul...

0.00148EPSS
Exploits0References2
CVE
CVE
added 2022/09/07 11:14 p.m.54 views

CVE-2022-37777

CVE-2022-37777 affects Phicomm FIR151B A2, FIR302E A2, FIR300B A2, and FIR303B A2 routers with firmware versions 3.0.1.17 and earlier. The issue is a remote command execution via the trHops parameter of the tracert function. Red Hat and other sources corroborate this vulnerability across the same...

7.2CVSS7.2AI score0.02965EPSS
Exploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.4 views

The vulnerability arises from the implementation of the automatic update method for server names in the Dynamic DNS system for domain names in systems using Amcrest IP cameras. This allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the implementation of the automatic update method for domain names in Dynamic DNS systems of Amcrest IP cameras relates to the writing of data beyond the buffer boundaries in memory when using the 0x62 command with the 0x04 subcommand. Exploiting this vulnerability allows a...

8.8CVSS8.3AI score0.49541EPSS
Exploits4References5Affected Software17
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.15 views

Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability

Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code...

8.8CVSS8.9AI score0.49541EPSS
In wildExploits4
VulnCheck KEV
VulnCheck KEV
added 2021/11/03 12:0 a.m.2 views

VulnCheck KEV: CVE-2020-5735

Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code...

8.8CVSS7.7AI score0.49541EPSS
Exploits4References1
Circl
Circl
added 2021/10/04 6:18 p.m.0 views

CVE-2021-37777

creationtimestamp| type| source ---|---|--- 2021-10-04 18:18:43+00:00| seen| https://t.me/cibsecurity/29871...

7.5CVSS7.3AI score0.0029EPSS
Exploits1References1
Rows per page
Query Builder