CVE-2026-27009

OpenClaw is a personal AI assistant. Prior to version 2026.2.15, a atored XSS issue in the OpenClaw Control UI when rendering assistant identity name/avatar into an inline could break out of the script tag and execute attacker-controlled JavaScript in the Control UI origin. Version 2026.2.15...

vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-27009 via openclaw (=0.0.1)

openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-27009 Source advisory: OSV:GHSA-37GC-85XM-2WW6...

Linux Distros Unpatched Vulnerability : CVE-2024-27009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix race condition during online processing A race condition exists in...

CVE-2025-27009

creationtimestamp| type| source ---|---|--- 2025-04-14 11:53:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11598 2025-04-14 12:33:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl34dhmr24 2025-04-14 13:30:26+00:00| seen|...

CVE-2025-27009 WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Stored XSS.This issue affects My auctions allegro: from n/a through = 3.6.33...

CVE-2025-27009

CVE-2025-27009 affects WordPress plugin My auctions allegro-free-edition (3.6.33 to remediate.

CVE-2025-27009 WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Stored XSS.This issue affects My auctions allegro: from n/a through = 3.6.33...

WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin My auctions allegro versions = 3.6.33...

CVE-2024-27009 affecting package hyperv-daemons for versions less than 6.6.35.1-1

CVE-2024-27009 affecting package hyperv-daemons for versions less than 6.6.35.1-1. An upgraded version of the package is available that resolves this issue...

Fedora: Security Advisory (FEDORA-2024-bc0db39a14)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5680-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-27009

In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix race condition during online processing A race condition exists in ccwdevicesetonline that can cause the online process to fail, leaving the affected device in an inconsistent state. As a result, subsequent attempts...

CVE-2021-27009

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-27009

CVE-2021-27009 entry is rejected and not active per the Initial Description.

CVE-2021-27009

...

CVE-2021-38086

Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking...

CVE-2021-38087

Reflected cross-site scripting XSS was possible on the login page in Acronis Cyber Protect 15 prior to build 27009...

CVE-2021-38088

Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking...

CVE-2021-38087

Reflected cross-site scripting XSS was possible on the login page in Acronis Cyber Protect 15 prior to build 27009...

CVE-2021-38087

Reflected cross-site scripting XSS was possible on the login page in Acronis Cyber Protect 15 prior to build 27009...