44 matches found
RHSA-2026:7477 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
MiracleLinux 9 : php:8.1 (AXSA:2024-7477:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-7477:01 advisory. php: 1-byte array overrun in common path resolve code CVE-2023-0568 php: DoS vulnerability when parsing multipart request body CVE-2023-0662 php:...
CVE-2020-7477
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 Versions 7.0 and prior, Quantum processors with integrated Ethernet – 140CPU65xxxxx all Versions, and Premium processors with integrated Ethernet all Versions, which...
CVE-2019-7477
A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0...
Linux Distros Unpatched Vulnerability : CVE-2016-7477
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ffputpixels8xy2mmx function in rndtemplate.c in Libav 11.7 allows remote attackers to cause a denial of service invalid memory access and crash via a crafte...
CVE-2025-7477 code-projects Simple Car Rental System add_cars.php unrestricted upload
A vulnerability, which was classified as critical, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addcars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. Th...
Ubuntu 24.10 / 25.04 : c-ares vulnerability (USN-7477-1)
The remote Ubuntu 24.10 / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7477-1 advisory. It was discovered that c-ares incorrectly handled re-enqueuing certain queries. A remote attacker could possibly use this issue to cause c-ares to crash,...
CVE-2024-7477
creationtimestamp| type| source ---|---|--- 2024-08-08 18:54:40+00:00| seen| https://t.me/cvedetector/2798...
CVE-2024-7477 Avaya Aura System Manager SQL injection vulnerability
A SQL injection vulnerability was found which could allow a command line interface CLI user with administrative privileges to execute arbitrary queries against the Avaya Aura System Manager database. Affected versions include 10.1.x.x and 10.2.x.x. Versions prior to 10.1 are end of manufacturer...
CVE-2024-7477
CVE-2024-7477 documents a SQL injection vulnerability in Avaya Aura System Manager. An CLI user with administrative privileges can trigger arbitrary SQL queries against the System Manager database. Affected versions: 10.1.x.x and 10.2.x.x; versions prior to 10.1 are end of manufacturer support. R...
K55347921: Linux kernel vulnerability CVE-2017-7477
Security Advisory Description Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a MAXSKBFRAGS+1 size in conjunction with the...
CVE-2020-7477
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 Versions 7.0 and prior, Quantum processors with integrated Ethernet – 140CPU65xxxxx all Versions, and Premium processors with integrated Ethernet all Versions, which...
CVE-2020-7477
CVE-2020-7477 affects Schneider Electric/Quantum hardware: Quantum Ethernet Network module 140NOE771x1 (versions 7.0 and prior); Quantum processors with integrated Ethernet 140CPU65xxxxx (all versions); and Premium processors with integrated Ethernet (all versions). The vulnerability is a CWE-754...
CVE-2013-7477
creationtimestamp| type| source ---|---|--- 2019-08-22 16:43:10+00:00| seen| https://t.me/cibsecurity/6294...
CVE-2013-7477
The CVE-2013-7477 entry concerns the WordPress Events Manager plugin, with an XSS flaw in the booking form present in versions prior to 5.5.2. Affected software: events-manager plugin for WordPress; vulnerable component: booking form input handling. Root cause per sources is an XSS vulnerability,...
CVE-2019-6742
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to 1.4.20.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the GameServiceReceiver update mechanism. An...
CVE-2019-6742
Samsung Galaxy S9 devices running versions before 1.4.20.2 are affected by CVE-2019-6742 due to a flaw in the GameServiceReceiver update handling that allows remote code execution without authentication. The vulnerability enables code execution in the context of the current process and is exploit...
SonicOS & SonicOSv CBC Cipher TLS Padding Vulnerability
A vulnerability in SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8,...
