Lucene search
K

18 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/25 4:14 p.m.1 views

CVE-2026-27084

Deserialization of Untrusted Data vulnerability in ThemeREX Buisson buisson allows Object Injection.This issue affects Buisson: from n/a through = 1.1.11...

5.8AI score0.00022EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-27084

Malicious code in bioql PyPI...

6.9CVSS7.1AI score0.01507EPSS
Exploits0References2
NVD
NVD
added 2025/04/08 5:15 p.m.5 views

CVE-2025-27084

A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting XSS attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the...

6.1CVSS0.00256EPSS
Exploits0References1
Circl
Circl
added 2025/04/08 4:46 p.m.1 views

CVE-2025-27084

creationtimestamp| type| source ---|---|--- 2025-04-08 16:46:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10936 2025-04-08 19:51:32+00:00| seen| https://t.me/cvedetector/22482...

6.1CVSS4.8AI score0.00256EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/04/08 4:32 p.m.12 views

CVE-2025-27084 Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal (CP) of an AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-based Management Interface

A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting XSS attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the...

5.4CVSS0.00256EPSS
Exploits0References1
CVE
CVE
added 2025/04/08 4:32 p.m.58 views

CVE-2025-27084

The CVE-2025-27084 issue concerns the Captive Portal in HPE AOS devices (AOS-10 GW and AOS-8 Controller/Mobility Conductor). Connected sources confirm a reflected cross-site scripting (XSS) vulnerability that could allow a remote attacker to execute arbitrary script code in a victim’s browser wit...

6.1CVSS6.3AI score0.00256EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/08 4:32 p.m.5 views

CVE-2025-27084 Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal (CP) of an AOS-10 GW and AOS-8 Controller/Mobility Conductor Web-based Management Interface

A vulnerability in the Captive Portal of an AOS-10 GW and AOS-8 Controller/Mobility Conductor could allow a remote attacker to conduct a reflected cross-site scripting XSS attack. Successful exploitation could enable the attacker to execute arbitrary script code in the victim's browser within the...

5.4CVSS5.3AI score0.00256EPSS
Exploits0References1
Circl
Circl
added 2024/02/26 7:26 p.m.1 views

CVE-2024-27084

creationtimestamp| type| source ---|---|--- 2024-02-26 19:26:47+00:00| seen| https://t.me/ctinow/193675...

4.8AI score
Exploits0References1
Circl
Circl
added 2023/03/28 8:9 p.m.1 views

CVE-2023-27084

creationtimestamp| type| source ---|---|--- 2023-03-28 20:09:09+00:00| seen| https://t.me/cibsecurity/60106 2025-02-26 20:24:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5602...

5.3CVSS5.5AI score0.00035EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/03/16 12:0 a.m.5 views

CVE-2023-27084

Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter...

5AI score0.00035EPSS
Exploits1References2
CVE
CVE
added 2023/03/16 12:0 a.m.78 views

CVE-2023-27084

CVE-2023-27084 concerns a permissions issue in isoftforce Dreamer CMS v4.0.1 that lets a local attacker access sensitive data via the AttachmentController parameter. The vulnerability is described as a local-attack, high confidentiality impact with medium overall CVSS (5.3) and no user interactio...

5.3CVSS4.9AI score0.00035EPSS
Exploits1References2Affected Software1
Check Point Advisories
Check Point Advisories
added 2022/09/20 12:0 a.m.4 views

Microsoft Visual Studio Code Remote Code Execution (CVE-2021-27084)

A remote code execution vulnerability exists in the Maven for Java Extension for Microsoft Visual Studio Code. The vulnerability is due to a design weakness. A remote attacker can exploit this vulnerability by enticing a user to open a maliciously crafted Java Maven project folder...

9.3CVSS3.9AI score0.14463EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/03/12 12:0 a.m.45 views

Security Update for Microsoft Visual Studio Code Java Extension Pack Extension (March 2021)

Microsoft Visual Studio Code Java Extension Pack could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the victim. Not...

9.3CVSS8AI score0.14463EPSS
Exploits0References3
Circl
Circl
added 2021/03/11 6:54 p.m.4 views

CVE-2021-27084

creationtimestamp| type| source ---|---|--- 2021-03-11 18:54:28+00:00| seen| https://t.me/cibsecurity/24761...

9.3CVSS7.4AI score0.14463EPSS
Exploits0References1
OSV
OSV
added 2021/03/11 4:15 p.m.3 views

CVE-2021-27084

Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability...

7.8CVSS7.2AI score0.14463EPSS
Exploits0References1
CVE
CVE
added 2021/03/11 3:47 p.m.80 views

CVE-2021-27084

CVE-2021-27084 affects Visual Studio Code Java Extension Pack. The data in connected docs confirms a Remote Code Execution vulnerability tied to this extension pack, with remediation by Microsoft updates. The CVSS/metrics indicate HIGH impact with local attack vector and user interaction required...

9.3CVSS7.8AI score0.14463EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/11 3:47 p.m.16 views

CVE-2021-27084 Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability

...

7.8CVSS8AI score0.14463EPSS
Exploits0References1
Kaspersky
Kaspersky
added 2021/03/09 12:0 a.m.42 views

KLA12110 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code ESLint Extension can be exploited remotely to...

9.3CVSS8.9AI score0.58284EPSS
Exploits5References9
Rows per page
Query Builder