Lucene search
K

15 matches found

NVD
NVD
added 2026/05/25 3:16 p.m.12 views

CVE-2026-47077

Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. hackneyh3:awaitresponseloop/6 accumulates the HTTP/3 response body in memory without any size cap. The after Timeout clause is a per-message inactivity timer that resets on every received chunk,...

8.2CVSS0.0067EPSS
Exploits1References4
Circl
Circl
added 2025/06/10 10:32 p.m.2 views

CVE-2025-47077

creationtimestamp| type| source ---|---|--- 2025-06-10 22:32:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18005...

5.4CVSS4.8AI score0.00293EPSS
Exploits0References1
CVE
CVE
added 2025/06/10 10:20 p.m.60 views

CVE-2025-47077

CVE-2025-47077 concerns Adobe Experience Manager (AEM) versions 6.5.22 and earlier. The vulnerability is a stored Cross-Site Scripting (XSS) issue caused by improper validation of user-supplied input in vulnerable form fields. A low-privileged attacker could inject malicious scripts, which may be...

5.4CVSS5AI score0.00293EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2024/09/27 7:14 p.m.3 views

CVE-2024-47077

creationtimestamp| type| source ---|---|--- 2024-09-27 19:14:38+00:00| seen| https://t.me/cvedetector/6550...

6.5CVSS4.8AI score0.00403EPSS
Exploits0References1
CVE
CVE
added 2024/09/27 3:26 p.m.60 views

CVE-2024-47077

CVE-2024-47077 affects authentik (open-source identity provider). The issue: access tokens issued to one application can be stolen by that application and used to impersonate users against other proxy providers, and tokens legitimately issued for one app can be used to access another app the user...

6.5CVSS6.3AI score0.00403EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2024/09/27 3:26 p.m.21 views

CVE-2024-47077 authentik cross-provider token validation problems

authentik is an open-source identity provider. Prior to versions 2024.8.3 and 2024.6.5, access tokens issued to one application can be stolen by that application and used to impersonate the user against any other proxy provider. Also, a user can steal an access token they were legitimately issued...

6.5CVSS0.00403EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2024/09/23 12:0 a.m.63 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2024-2476)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS9.9AI score0.23582EPSS
Exploits17References4
OpenVAS
OpenVAS
added 2024/05/07 12:0 a.m.44 views

SUSE: Security Advisory (SUSE-SU-2024:0975-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.6AI score0.01549EPSS
Exploits0References62
Circl
Circl
added 2024/03/01 11:26 p.m.7 views

CVE-2021-47077

creationtimestamp| type| source ---|---|--- 2024-03-01 23:26:52+00:00| seen| https://t.me/ctinow/198100 2024-03-01 23:31:57+00:00| seen| https://t.me/ctinow/198118 2024-03-03 11:11:26+00:00| seen| https://t.me/ctinow/198679 2025-12-03 14:14:49+00:00| seen|...

5.5CVSS6.1AI score0.00225EPSS
Exploits0References4
NVD
NVD
added 2024/03/01 10:15 p.m.15 views

CVE-2021-47077

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add pointer checks in qedfupdatelinkspeed The following trace was observed: 14.042059 Call Trace: 14.042061 14.042068 qedflinkupdate+0x144/0x1f0 qedf 14.042117 qedlinkupdate+0x5c/0x80 qed 14.042135...

5.5CVSS7.3AI score0.00225EPSS
Exploits0References3
CVE
CVE
added 2024/03/01 9:15 p.m.104 views

CVE-2021-47077

CVE-2021-47077 affects the Linux kernel scsi qedf driver. The vulnerability stems from qedf_update_link_speed() dereferencing shost_data when it has not been initialised, causing a NULL pointer dereference and potentially an impact on availability. The fix adds a NULL pointer check before using s...

5.5CVSS6.2AI score0.00225EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/01 9:15 p.m.11 views

CVE-2021-47077 scsi: qedf: Add pointer checks in qedf_update_link_speed()

In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add pointer checks in qedfupdatelinkspeed The following trace was observed: 14.042059 Call Trace: 14.042061 14.042068 qedflinkupdate+0x144/0x1f0 qedf 14.042117 qedlinkupdate+0x5c/0x80 qed 14.042135...

6.6AI score0.00225EPSS
Exploits0References3
Circl
Circl
added 2024/01/04 10:36 a.m.4 views

CVE-2023-47077

creationtimestamp| type| source ---|---|--- 2024-01-04 10:36:53+00:00| seen| https://t.me/ctinow/162890...

5.5CVSS5.5AI score0.00328EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/12/12 12:0 a.m.33 views

Adobe InDesign < 18.5.1 / 19.0 < 19.1.0 Multiple Vulnerabilities (APSB23-70)

The version of Adobe InDesign installed on the remote Windows host is prior to 18.5.1, 19.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-70 advisory. - Adobe InDesign versions 19.0 and earlier and 17.4.2 and earlier are affected by an out-of-bounds read...

5.5CVSS6.1AI score0.00328EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/12/12 12:0 a.m.20 views

Adobe InDesign < 18.5.1 / 19.0 < 19.1.0 Multiple Vulnerabilities (APSB23-70) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 18.5.1, 19.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-70 advisory. - Adobe InDesign versions 19.0 and earlier and 17.4.2 and earlier are affected by an out-of-bounds read...

5.5CVSS5.9AI score0.00328EPSS
Exploits0References3
Rows per page
Query Builder