UBUNTU-CVE-2026-42477

A heap-based out-of-bounds read vulnerability in RWObjReader::read in the OBJ file parser in Open CASCADE Technology OCCT V800rc5 allows user-assisted attackers to cause a denial of service or obtain sensitive information by persuading a victim to open a crafted OBJ file. The issue occurs because...

CVE-2026-42477

creationtimestamp| type| source ---|---|--- 2026-04-30 08:49:09+00:00| seen| https://gist.github.com/sgInnora/dfba083d04906283e9c92aea78e2d94a...

CVE-2022-42477

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

CVE-2023-42477

SAP NetWeaver AS Java GRMG Heartbeat application - version 7.50, allows an attacker to send a crafted request from a vulnerable web application, causing limited impact on confidentiality and integrity of the application...

Fedora 41 : llama-cpp (2024-89c69bb9d3)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-89c69bb9d3 advisory. Update to b3561 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CVE-2024-42477

llama.cpp provides LLM inference in C/C++. The unsafe type member in the rpctensor structure can cause global-buffer-overflow. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b3561...

CVE-2024-42477

llama.cpp provides LLM inference in C/C++. The unsafe type member in the rpctensor structure can cause global-buffer-overflow. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b3561...

CVE-2023-42477

creationtimestamp| type| source ---|---|--- 2023-10-10 07:29:59+00:00| seen| https://t.me/cibsecurity/71884...

CVE-2023-42477 Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)

SAP NetWeaver AS Java GRMG Heartbeat application - version 7.50, allows an attacker to send a crafted request from a vulnerable web application, causing limited impact on confidentiality and integrity of the application...

CVE-2023-42477

CVE-2023-42477 affects SAP NetWeaver AS Java GRMG Heartbeat (version 7.50). The vulnerability permits an unauthenticated attacker to send a crafted request from a vulnerable web application, with limited impact on confidentiality and integrity (as described in multiple sources). The CVSS vector i...

CVE-2022-42477

creationtimestamp| type| source ---|---|--- 2023-04-11 20:23:35+00:00| seen| https://t.me/cibsecurity/61894...

CVE-2022-42477

Fortinet FortiAnalyzer is affected by CVE-2022-42477 due to an improper input validation vulnerability (CWE-20). The issue allows an authenticated attacker to disclose file system information via custom dataset SQL queries. Affected product versions include FortiAnalyzer 7.2.1 and earlier, 7.0.6 ...