19 matches found
CVE-2026-27162
creationtimestamp| type| source ---|---|--- 2026-02-26 23:02:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfscizbf7m2n...
CVE-2026-27162
Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, postsnearby was checking topic access but then returning all posts regardless of type, including whispers that should only be visible to whisperers. Use Post.securedguardian to properly filter po...
CVE-2021-27162
An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / tattoo@home credentials for an ISP...
CVE-2021-27162
creationtimestamp| type| source ---|---|--- 2025-05-01 21:03:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lo57i25jcy23...
CVE-2025-27162
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus...
CVE-2025-27162
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus...
CVE-2025-27162
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus...
CVE-2025-27162 Acrobat Reader | Access of Uninitialized Pointer (CWE-824)
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus...
CVE-2025-27162 Acrobat Reader | Access of Uninitialized Pointer (CWE-824)
Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus...
CVE-2024-27162 DOM-based XSS
Toshiba printers provide a web interface that will load the JavaScript file. The file contains insecure codes vulnerable to XSS and is loaded inside all the webpages provided by the printer. An attacker can steal the cookie of an admin user. As for the affected products/models/versions, see the...
CVE-2023-27162
creationtimestamp| type| source ---|---|--- 2023-04-01 00:22:23+00:00| seen| https://t.me/cibsecurity/61285...
CVE-2023-27162
openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...
CVE-2023-27162
openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...
CVE-2023-27162
openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...
CVE-2023-27162
openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...
CVE-2023-27162
CVE-2023-27162 affects openapi-generator up to v6.4.0. Affected component: SSRF via /api/gen/clients/{language}, enabling an attacker to access network resources and sensitive information. CVSS v3.1 base score 9.1 (CRITICAL); attack vector network, low complexity, no privileges, no user interacti...
CVE-2022-27162
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminMemberseditUser...
CVE-2022-27162
CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcmsadminMemberseditUser...
CVE-2020-27162
creationtimestamp| type| source ---|---|--- 2020-10-23 21:06:54+00:00| seen| https://t.me/N0iSeBit/508 2020-10-27 03:51:47+00:00| published-proof-of-concept| https://t.me/binaryxor/447...