81 matches found
CVE-2023-4277
CVE-2023-4277: Realia WordPress plugin
WordPress Realia Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
Software Realia Type Plugin Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-4277 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 838637c6ad0b Credits Lana Codes Required privilege...
Cisco ASR 9000 Series Aggregation Services Routers tmp Files Denial of Service (CVE-2015-4277)
The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local users to cause a denial of service tmp/config file creation, memory consumption, and device hang via unspecified vectors,...
CVE-2021-4277
CVE-2021-4277 affects fredsmith utils, specifically the Filename Handler component’s handling of the file screenshot_sync. The vulnerability arises from how unknown processing leads to predictable data from observable state. A patch named dbab1b66955eeb3d76b34612b358307f5c4e3944 exists and is rec...
CVE-2021-4277 fredsmith utils Filename screenshot_sync predictable state
A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshotsync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is...
CVE-2022-4277
CVE-2022-4277 affects Shaoxing Background Management System. The vulnerability is a SQL injection in an unknown code path, triggered by manipulating the id parameter in /Default/Bd, exploitable remotely. Multiple sources indicate a critical/severe impact with potential confidentiality, integrity,...
Mageia: Security Advisory (MGASA-2013-0275)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-4277
CVE-2009-4277 is rejected and does not represent an active vulnerability entry.
Security Bulletin: IBM TRIRIGA Application Platform discloses error messages that could aid an attacker formulate future attacks (CVE-2020-4277)
Summary IBM TRIRIGA Application Platform discloses error messages that could aid an attacker formulate future attacks CVE-2020-4277. Vulnerability Details CVEID: CVE-2020-4277 DESCRIPTION: IBM TRIRIGA Application Platform discloses error messages that could aid an attacker formulate future attack...
Ubuntu 16.04 LTS / 18.04 LTS : libexif vulnerabilities (USN-4277-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4277-1 advisory. Liu Bingchang discovered that libexif incorrectly handled certain files. An attacker could possibly use this issue to access sensitive...
Ubuntu: Security Advisory (USN-4277-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-4277
CVE-2018-4277 is a URL spoofing vulnerability affecting Apple platforms (iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6). The issue arises from spoofing in URL handling and was addressed by improved input validation. Apple advis...
CVE-2018-4277
creationtimestamp| type| source ---|---|--- 2018-11-14 08:15:17+00:00| published-proof-of-concept| https://t.me/br0wsec/72 2018-11-14 08:38:32+00:00| published-proof-of-concept| https://t.me/antichat/2611 2018-11-21 13:54:59+00:00| seen| https://t.me/SecLabNews/3685...
macOS 10.13.x < 10.13.6 Multiple Vulnerabilities
The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6. It is, therefore, affected by multiple vulnerabilities. Note that successful exploitation of the most serious issues can result in arbitrary code execution. C Tenable Network Security, Inc...
Apple TV < 11.4.1 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 11.4.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208936 security advisory. Note that only 4th and 5th generation models are affected by these vulnerabilities. C Tenable Network...
About the security content of iOS 11.4.1
About the security content of iOS 11.4.1 This document describes the security content of iOS 11.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...