Lucene search
K

18 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/25 4:14 p.m.3 views

CVE-2026-27084

Deserialization of Untrusted Data vulnerability in ThemeREX Buisson buisson allows Object Injection.This issue affects Buisson: from n/a through = 1.1.11...

5.8AI score0.00476EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-27084

Malicious code in bioql PyPI...

6.9CVSS7.1AI score0.00656EPSS
Exploits0References2
NVD
NVD
added 2025/04/08 5:15 p.m.9 views

CVE-2025-27084

A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting XSS attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the...

6.1CVSS0.00239EPSS
Exploits0References1
Circl
Circl
added 2025/04/08 4:46 p.m.3 views

CVE-2025-27084

creationtimestamp| type| source ---|---|--- 2025-04-08 16:46:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10936 2025-04-08 19:51:32+00:00| seen| https://t.me/cvedetector/22482...

6.1CVSS4.8AI score0.00239EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/04/08 4:32 p.m.6 views

CVE-2025-27084 Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal (CP) of an AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-based Management Interface

A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting XSS attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the...

5.4CVSS5.3AI score0.00239EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/08 4:32 p.m.15 views

CVE-2025-27084 Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal (CP) of an AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-based Management Interface

A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting XSS attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the...

5.4CVSS0.00239EPSS
Exploits0References1
CVE
CVE
added 2025/04/08 4:32 p.m.61 views

CVE-2025-27084

The CVE-2025-27084 issue concerns the Captive Portal in HPE AOS devices (AOS-10 GW and AOS-8 Controller/Mobility Conductor). Connected sources confirm a reflected cross-site scripting (XSS) vulnerability that could allow a remote attacker to execute arbitrary script code in a victim’s browser wit...

6.1CVSS6.3AI score0.00239EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2024/02/26 7:26 p.m.4 views

CVE-2024-27084

creationtimestamp| type| source ---|---|--- 2024-02-26 19:26:47+00:00| seen| https://t.me/ctinow/193675...

4.8AI score
Exploits0References1
Circl
Circl
added 2023/03/28 8:9 p.m.5 views

CVE-2023-27084

creationtimestamp| type| source ---|---|--- 2023-03-28 20:09:09+00:00| seen| https://t.me/cibsecurity/60106 2025-02-26 20:24:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5602...

5.3CVSS5.5AI score0.0018EPSS
Exploits1References2
CVE
CVE
added 2023/03/16 12:0 a.m.81 views

CVE-2023-27084

CVE-2023-27084 concerns a permissions issue in isoftforce Dreamer CMS v4.0.1 that lets a local attacker access sensitive data via the AttachmentController parameter. The vulnerability is described as a local-attack, high confidentiality impact with medium overall CVSS (5.3) and no user interactio...

5.3CVSS4.9AI score0.0018EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/16 12:0 a.m.7 views

CVE-2023-27084

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

5AI score0.0018EPSS
Exploits1References2
Check Point Advisories
Check Point Advisories
added 2022/09/20 12:0 a.m.4 views

Microsoft Visual Studio Code Remote Code Execution (CVE-2021-27084)

A remote code execution vulnerability exists in the Maven for Java Extension for Microsoft Visual Studio Code. The vulnerability is due to a design weakness. A remote attacker can exploit this vulnerability by enticing a user to open a maliciously crafted Java Maven project folder...

9.3CVSS3.9AI score0.61357EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/03/12 12:0 a.m.45 views

Security Update for Microsoft Visual Studio Code Java Extension Pack Extension (March 2021)

Microsoft Visual Studio Code Java Extension Pack could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the victim. Not...

9.3CVSS8.1AI score0.61357EPSS
Exploits0References3
Circl
Circl
added 2021/03/11 6:54 p.m.7 views

CVE-2021-27084

creationtimestamp| type| source ---|---|--- 2021-03-11 18:54:28+00:00| seen| https://t.me/cibsecurity/24761...

9.3CVSS7.4AI score0.61357EPSS
Exploits0References1
OSV
OSV
added 2021/03/11 4:15 p.m.4 views

CVE-2021-27084

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

7.8CVSS7.2AI score0.61357EPSS
Exploits0References1
CVE
CVE
added 2021/03/11 3:47 p.m.81 views

CVE-2021-27084

CVE-2021-27084 affects Visual Studio Code Java Extension Pack. The data in connected docs confirms a Remote Code Execution vulnerability tied to this extension pack, with remediation by Microsoft updates. The CVSS/metrics indicate HIGH impact with local attack vector and user interaction required...

9.3CVSS7.8AI score0.61357EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/11 3:47 p.m.21 views

CVE-2021-27084 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

...

7.8CVSS8AI score0.61357EPSS
Exploits0References1
Kaspersky
Kaspersky
added 2021/03/09 12:0 a.m.46 views

KLA12110 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code ESLint Extension can be exploited remotely to...

9.3CVSS8.9AI score0.88644EPSS
Exploits5References9
Rows per page
Query Builder