Lucene search
K

15 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/18 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-23927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an...

5CVSS5.8AI score0.00047EPSS
Exploits0References3
Circl
Circl
added 2026/05/06 10:36 a.m.3 views

CVE-2026-23927

creationtimestamp| type| source ---|---|--- 2026-05-06 10:36:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6iz62mv72t 2026-05-06 14:30:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2c6y7n2q...

5CVSS5.8AI score0.00047EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2026/05/06 8:16 a.m.3 views

CVE-2026-23927

A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session...

5CVSS5.8AI score0.00047EPSS
Exploits0References2
OSV
OSV
added 2025/12/23 10:6 a.m.4 views

RHSA-2025:23927 Red Hat Security Advisory: ruby security update

Bulletin has no description...

8.1CVSS6.9AI score0.00268EPSS
Exploits0References23
RedhatCVE
RedhatCVE
added 2025/05/23 11:37 a.m.9 views

CVE-2025-23927

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in massimo.serpilli Incredible Font Awesome incredible-font-awesome allows Stored XSS.This issue affects Incredible Font Awesome: from n/a through = 1.0...

6.5CVSS7.2AI score0.00152EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:19 p.m.3 views

CVE-2021-23927

OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request...

6.4CVSS6.9AI score0.00129EPSS
Exploits0References1
NVD
NVD
added 2025/01/16 9:15 p.m.9 views

CVE-2025-23927

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in massimo.serpilli Incredible Font Awesome incredible-font-awesome allows Stored XSS.This issue affects Incredible Font Awesome: from n/a through = 1.0...

6.5CVSS0.00152EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/16 8:7 p.m.16 views

CVE-2025-23927 WordPress Incredible Font Awesome plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in massimo.serpilli Incredible Font Awesome incredible-font-awesome allows Stored XSS.This issue affects Incredible Font Awesome: from n/a through = 1.0...

6.5CVSS0.00152EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/16 8:7 p.m.10 views

CVE-2025-23927 WordPress Incredible Font Awesome plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in massimo.serpilli Incredible Font Awesome incredible-font-awesome allows Stored XSS.This issue affects Incredible Font Awesome: from n/a through = 1.0...

6.5CVSS7.2AI score0.00152EPSS
Exploits0References1
Circl
Circl
added 2023/03/04 12:35 a.m.1 views

CVE-2023-23927

creationtimestamp| type| source ---|---|--- 2023-03-04 00:35:26+00:00| seen| https://t.me/cibsecurity/59402 2025-02-25 15:23:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5303...

6.1CVSS5.5AI score0.02749EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/03/03 9:58 p.m.11 views

CVE-2023-23927 Craft CMS stored cross-site scripting vulnerability

Craft is a platform for creating digital experiences. When you insert a payload inside a label name or instruction of an entry type, an cross-site scripting XSS happens in the quick post widget on the admin dashboard. This issue has been fixed in version 4.3.7...

6.1CVSS6.2AI score0.02749EPSS
Exploits1References3
CVE
CVE
added 2023/03/03 9:58 p.m.70 views

CVE-2023-23927

Craft CMS is vulnerable to a stored XSS in the quick post widget on the admin dashboard when a payload is inserted into a label name or an entry type instruction. The issue affects Craft CMS prior to version 4.3.7 and has been fixed in 4.3.7. The CVE entry is supported by multiple connected sourc...

6.1CVSS5.5AI score0.02749EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2022/03/11 5:54 p.m.98 views

CVE-2022-23927

The CVE-2022-23927 entry concerns system BIOS vulnerabilities in HP PC products. Connected documents confirm the affected component is the HP BIOS and indicate potential impact includes Escalation of Privilege, Arbitrary Code Execution, Denial of Service, and Information Disclosure. The Red Hat a...

8.2CVSS8.4AI score0.00062EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2021/01/13 12:47 a.m.1 views

CVE-2021-23927

creationtimestamp| type| source ---|---|--- 2021-01-13 00:47:30+00:00| seen| https://t.me/cibsecurity/22068...

6.4CVSS6.3AI score0.00129EPSS
Exploits0References1
CVE
CVE
added 2021/01/12 9:26 p.m.57 views

CVE-2021-23927

OX App Suite up to version 7.10.4 is vulnerable to server-side request forgery (SSRF) when a URL containing an @ character is used in a PUT request to appsuite/api/oauth/proxy. The root cause is described as an SSRF flaw in the handling of such URLs, exposing potential unintended requests from th...

6.4CVSS6.3AI score0.00129EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder