CVE-2011-4277

Cross-site scripting XSS vulnerability in CourseForum ProjectForum 7.0.1.3038 allows remote attackers to inject arbitrary web script or HTML via a crafted name of an object within a more object on a wiki page...

RHSA-2024:4277

creationtimestamp| type| source ---|---|--- 2025-05-21 01:45:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17098...

Linux Distros Unpatched Vulnerability : CVE-2013-4277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary processes via a...

CVE-2024-4277 LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_html Parameter

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘layouthtml’ parameter in all versions up to, and including, 4.2.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress LearnPress Plugin <= 4.2.6.5 is vulnerable to Cross Site Scripting (XSS)

Software LearnPress Type Plugin Vulnerable versions = 4.2.6.5 Fixed in 4.2.6.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4277 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3ad5ee25dcd1 Credits stealthcopter Required...

CVE-2023-4277

creationtimestamp| type| source ---|---|--- 2023-08-10 12:15:35+00:00| seen| https://t.me/cibsecurity/68175...

CVE-2023-4277 Realia <= 1.4.0 - Cross-Site Request Forgery to User Email Change

The Realia plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.0. This is due to missing nonce validation on the 'processchangeprofileform' function. This makes it possible for unauthenticated attackers to change user email via a forged request...

CVE-2023-4277

CVE-2023-4277: Realia WordPress plugin

WordPress Realia Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Realia Type Plugin Vulnerable versions = 1.4.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-4277 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 838637c6ad0b Credits Lana Codes Required privilege...

Cisco ASR 9000 Series Aggregation Services Routers tmp Files Denial of Service (CVE-2015-4277)

The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commit/end operation, which allows local users to cause a denial of service tmp/config file creation, memory consumption, and device hang via unspecified vectors,...

CVE-2021-4277 fredsmith utils Filename screenshot_sync predictable state

A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshotsync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is...

CVE-2021-4277

CVE-2021-4277 affects fredsmith utils, specifically the Filename Handler component’s handling of the file screenshot_sync. The vulnerability arises from how unknown processing leads to predictable data from observable state. A patch named dbab1b66955eeb3d76b34612b358307f5c4e3944 exists and is rec...

CVE-2022-4277

CVE-2022-4277 affects Shaoxing Background Management System. The vulnerability is a SQL injection in an unknown code path, triggered by manipulating the id parameter in /Default/Bd, exploitable remotely. Multiple sources indicate a critical/severe impact with potential confidentiality, integrity,...

Mageia: Security Advisory (MGASA-2013-0275)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-4277

...

CVE-2009-4277

CVE-2009-4277 is rejected and does not represent an active vulnerability entry.

Security Bulletin: IBM TRIRIGA Application Platform discloses error messages that could aid an attacker formulate future attacks (CVE-2020-4277)

Summary IBM TRIRIGA Application Platform discloses error messages that could aid an attacker formulate future attacks CVE-2020-4277. Vulnerability Details CVEID: CVE-2020-4277 DESCRIPTION: IBM TRIRIGA Application Platform discloses error messages that could aid an attacker formulate future attack...

Ubuntu: Security Advisory (USN-4277-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : libexif vulnerabilities (USN-4277-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4277-1 advisory. Liu Bingchang discovered that libexif incorrectly handled certain files. An attacker could possibly use this issue to access sensitive...

CVE-2018-4277

CVE-2018-4277 is a URL spoofing vulnerability affecting Apple platforms (iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6). The issue arises from spoofing in URL handling and was addressed by improved input validation. Apple advis...