Lucene search
+L

114 matches found

Circl
Circl
•added 2026/09/19 5:32 a.m.•20 views

GHSA-4227-9989-JRHX

creationtimestamp| type| source ---|---|--- 2026-09-19 05:32:22+00:00| seen| https://gist.github.com/alon710/de46e4b55e23d058335a512366f2ab2a...

5.7AI score
SaveExploits0References1
osv_mini
osv_mini
•added 2026/05/17 12:32 p.m.•9 views

MINI-C966-MM7H-4227

Bulletin has no description...

9CVSS7.6AI score0.00658EPSS
SaveExploits0
Circl
Circl
•added 2026/03/16 12:01 p.m.•17 views

CVE-2026-4227

creationtimestamp| type| source ---|---|--- 2026-03-16 12:01:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116238743317716735 2026-03-21 03:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhk4bi22lq2a...

9CVSS7.8AI score0.0115EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/03/16 8:02 a.m.•62 views

CVE-2026-4227 LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow

A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9. The impacted element is the function sub44D844 of the file /goform/gethidessidcfg. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be...

9CVSS0.0115EPSS
SaveExploits1References4
osv_oesa
osv_oesa
•added 2026/01/23 11:10 a.m.•31 views

OESA-2026-1189 gsoap security update

The gSOAP Web services development toolkit offers an XML to C/C++ language binding to ease the development of SOAP/XML Web services in C and C/C++. Security Fixes: In Genivia gSOAP with a specific configuration an unauthenticated remote attacker can generate a high CPU load when forcing to parse ...

7.5CVSS7.3AI score0.00719EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/23 12:00 a.m.•25 views

EUVD-2026-4227

Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access sensitive department data...

7.5CVSS5.8AI score0.00436EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2024-4227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Genivia gSOAP with a specific configuration an unauthenticated remote attacker can generate a high CPU load when forcing to parse an XML having duplicate ID...

7.5CVSS7.2AI score0.00719EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/06/23 12:00 a.m.•19 views

Palo Alto GlobalProtect App Windows 6.x < 6.2.8-h2 / 6.3.x < 6.3.3-650-650 Improper Access Control (CVE-2025-4227)

The version of Palo Alto GlobalProtect App installed on the remote Windows host is 6.x prior to 6.2.8-h2 or 6.3.x prior to 6.3.3-650. It is, therefore, affected by a improper access control vulnerability: - An improper access control vulnerability in the Endpoint Traffic Policy Enforcement featur...

3.5CVSS5.5AI score0.00164EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/06/23 12:00 a.m.•90 views

Palo Alto GlobalProtect App MacOS 6.x < 6.2.8-h2 / 6.3.x < 6.3.3-650 Improper Access Control (CVE-2025-4227)

The version of Palo Alto GlobalProtect App installed on the remote macOS host is 6.x prior to 6.2.8-h2 or 6.3.x prior to 6.3.3-650. It is, therefore, affected by a improper access control vulnerability: - An improper access control vulnerability in the Endpoint Traffic Policy Enforcement feature ...

3.5CVSS5.5AI score0.00164EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/06/13 5:50 a.m.•9 views

CVE-2025-4227 GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement

An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows...

1CVSS6.9AI score0.00164EPSS
SaveExploits0References1
Circl
Circl
•added 2025/06/11 2:00 p.m.•31 views

CVE-2025-4227

creationtimestamp| type| source ---|---|--- 2025-06-11 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-4227 2025-06-11 19:03:24+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lre3vtimqu22 2025-06-13 09:03:40+00:00| seen|...

3.5CVSS6.7AI score0.00164EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/05/22 11:47 p.m.•23 views

CVE-2022-4227

The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site...

6.1CVSS6.7AI score0.00417EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/03 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2009-4227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the read13textobject function in freadold.c in Xfig 3.2.5b and earlier, and in the readtextobject function in read13.c in fig2dev...

6.8CVSS7AI score0.11499EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2025/02/05 12:17 a.m.•19 views

CVE-2024-4227

In Genivia gSOAP with a specific configuration an unauthenticated remote attacker can generate a high CPU load when forcing to parse an XML having duplicate ID attributes which can lead to a DoS...

7.5CVSS7AI score0.00719EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/15 8:15 a.m.•24 views

CVE-2024-4227

In Genivia gSOAP with a specific configuration an unauthenticated remote attacker can generate a high CPU load when forcing to parse an XML having duplicate ID attributes which can lead to a DoS...

7.5CVSS0.00719EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2025/01/15 8:15 a.m.•5 views

CVE-2024-4227

In Genivia gSOAP with a specific configuration an unauthenticated remote attacker can generate a high CPU load when forcing to parse an XML having duplicate ID attributes which can lead to a DoS...

7.5CVSS7.1AI score0.00719EPSS
SaveExploits0References3
Circl
Circl
•added 2025/01/15 8:02 a.m.•22 views

CVE-2024-4227

creationtimestamp| type| source ---|---|--- 2025-01-15 08:02:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113831321598371688 2025-01-15 08:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrd6dtktz2r 2025-01-15 08:27:49+00:00| seen|...

7.5CVSS7.1AI score0.00719EPSS
SaveExploits0References5
CVE
CVE
•added 2025/01/15 8:00 a.m.•138 views

CVE-2024-4227

CVE-2024-4227 affects Genivia gSOAP. A specific configuration allows an unauthenticated remote attacker to cause high CPU load by forcing the XML parser to process duplicate ID attributes, leading to a DoS. The vulnerability is tied to the gSOAP XML parsing behavior; impact is denial of service w...

7.5CVSS7.5AI score0.00719EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/07/15 12:00 a.m.•17 views

Rocky Linux 8 : python-pillow (RLSA-2024:4227)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:4227 advisory. python-pillow: buffer overflow in imagingcms.c CVE-2024-28219 Tenable has extracted the preceding description block directly from the Rocky Linux security...

6.7CVSS6.6AI score0.00997EPSS
SaveExploits0References3
Citrix
Citrix
•added 2024/07/13 12:00 a.m.•35 views

TCP Ports get exhausted on the StoreFront server

StoreFront refuses to create connections and we get below events : Event ID 4231 : Request to allocate an ephemeral port number from the global TCP port space has failed due to all such ports being in use. Event ID 4227 : TCP/IP failed to establish an outgoing connection because the selected loca...

7AI score
SaveExploits0
Rows per page
Query Builder