Lucene search
K

25 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:49 a.m.5 views

CVE-2022-27279

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub177E0...

7.5CVSS7.4AI score0.01442EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:31 a.m.6 views

CVE-2023-27279

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting. IBM X-Force ID: 248533...

6.5CVSS6.4AI score0.00709EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:31 p.m.18 views

CVE-2021-27279

MyBB before 1.8.25 allows stored XSS via nested email tags with MyCode aka BBCode...

5.4CVSS5.6AI score0.00959EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/03/05 1:51 p.m.17 views

CVE-2025-27279

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lynk Flashfader flashfader allows Reflected XSS.This issue affects Flashfader: from n/a through = 1.1.1...

7.1CVSS7.2AI score0.00224EPSS
Exploits0References1
NVD
NVD
added 2025/03/03 2:15 p.m.5 views

CVE-2025-27279

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lynk Flashfader flashfader allows Reflected XSS.This issue affects Flashfader: from n/a through = 1.1.1...

7.1CVSS0.00224EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/03 1:30 p.m.5 views

CVE-2025-27279 WordPress Flashfader Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lynk Flashfader flashfader allows Reflected XSS.This issue affects Flashfader: from n/a through = 1.1.1...

7.1CVSS8.6AI score0.00224EPSS
Exploits0References1
CVE
CVE
added 2025/03/03 1:30 p.m.56 views

CVE-2025-27279

CVE-2025-27279 is a Reflected XSS in the WordPress Flashfader plugin (affected: NotFound Flashfader; versions up to and including 1.1.1). It arises from improper input neutralization during web page generation, enabling reflected cross-site scripting. Public records in the connected documents ide...

7.1CVSS7.2AI score0.00224EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/03 1:30 p.m.12 views

CVE-2025-27279 WordPress Flashfader Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lynk Flashfader flashfader allows Reflected XSS.This issue affects Flashfader: from n/a through = 1.1.1...

7.1CVSS0.00224EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/04/18 5:58 p.m.26 views

Security Bulletin: IBM Aspera Faspex is vulnerable to multiple encryption vulnerabilities.

Summary IBM Aspera Faspex 5.0.8 has addressed multiple encryption vulnerabilities CVE-2023-22869, CVE-2023-37396, CVE-2023-27279, CVE-2023-37395, CVE-2023-37397, CVE-2022-40745 Vulnerability Details CVEID:CVE-2023-22869 DESCRIPTION: IBM Aspera Faspex stores potentially sensitive information in lo...

6.5CVSS5.1AI score0.00709EPSS
Exploits0Affected Software5
Circl
Circl
added 2024/03/12 10:26 a.m.3 views

CVE-2024-27279

creationtimestamp| type| source ---|---|--- 2024-03-12 10:26:54+00:00| seen| https://t.me/ctinow/205488...

6.5CVSS6.3AI score0.00832EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/12 8:19 a.m.19 views

CVE-2024-27279

Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier, Ver.2.10.x series Ver.2.10.51 and earlier, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a use...

6.8AI score0.00832EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/03/12 8:19 a.m.19 views

CVE-2024-27279

Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier, Ver.2.10.x series Ver.2.10.51 and earlier, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a use...

7.1AI score0.00832EPSS
Exploits0References2
CVE
CVE
added 2024/03/12 8:19 a.m.66 views

CVE-2024-27279

CVE-2024-27279 describes a directory traversal vulnerability in a-blog cms affecting multiple release branches: 3.1.x (up to 3.1.9), 3.0.x (up to 3.0.30), 2.11.x (up to 2.11.59), 2.10.x (up to 2.10.51), and 2.9 and earlier. A user with editor or higher privileges who can log in may obtain arbitra...

6.5CVSS7AI score0.00832EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/10 9:15 p.m.2 views

CVE-2022-27279

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub177E0...

7.5CVSS6AI score0.01442EPSS
Exploits1References4
CVE
CVE
added 2022/04/10 8:23 p.m.83 views

CVE-2022-27279

InHand Networks InRouter 900 Industrial 4G Router is affected by CVE-2022-27279. The vulnerability allows an arbitrary file read via the function sub_177E0 in firmware prior to version 1.0.0.r11700. Affected product is the InRouter 900 Industrial 4G Router; the underlying root cause is an insecur...

7.5CVSS7.5AI score0.01442EPSS
Exploits1References2Affected Software1
Circl
Circl
added 2021/02/22 10:33 p.m.2 views

CVE-2021-27279

creationtimestamp| type| source ---|---|--- 2021-02-22 22:33:45+00:00| seen| https://t.me/cibsecurity/23945 2021-08-12 15:53:02+00:00| seen| https://t.me/ptswarm/62 2021-12-07 13:52:25+00:00| published-proof-of-concept| https://t.me/ptswarm/96 2022-09-24 18:28:05+00:00| published-proof-of-concept...

5.4CVSS5.5AI score0.00959EPSS
Exploits1References3
Circl
Circl
added 2021/01/06 6:39 p.m.1 views

CVE-2020-27279

creationtimestamp| type| source ---|---|--- 2021-01-06 18:39:33+00:00| seen| https://t.me/cibsecurity/21676...

7.8CVSS7.3AI score0.01715EPSS
Exploits0References1
NVD
NVD
added 2021/01/06 4:15 p.m.12 views

CVE-2020-27279

A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 Build versions prior to 3119.001...

7.8CVSS7.7AI score0.01715EPSS
Exploits0References1
CVE
CVE
added 2021/01/06 3:3 p.m.47 views

CVE-2020-27279

CVE-2020-27279 is a NULL pointer dereference in the Crimson 3.1 protocol converter. A specially crafted packet can reboot Crimson 3.1 devices (Build versions prior to 3119.001). Affected product: Red Lion Crimson 3.1 for the DA10D Protocol Converter. Impact: potential denial-of-service via reboot...

7.8CVSS7.3AI score0.01715EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/06 3:3 p.m.11 views

CVE-2020-27279

A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 Build versions prior to 3119.001...

7.4AI score0.01715EPSS
Exploits0References1
Rows per page
Query Builder