25 matches found
CVE-2022-27279
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub177E0...
CVE-2023-27279
IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting. IBM X-Force ID: 248533...
CVE-2021-27279
MyBB before 1.8.25 allows stored XSS via nested email tags with MyCode aka BBCode...
CVE-2025-27279
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lynk Flashfader flashfader allows Reflected XSS.This issue affects Flashfader: from n/a through = 1.1.1...
CVE-2025-27279
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lynk Flashfader flashfader allows Reflected XSS.This issue affects Flashfader: from n/a through = 1.1.1...
CVE-2025-27279 WordPress Flashfader Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lynk Flashfader flashfader allows Reflected XSS.This issue affects Flashfader: from n/a through = 1.1.1...
CVE-2025-27279
CVE-2025-27279 is a Reflected XSS in the WordPress Flashfader plugin (affected: NotFound Flashfader; versions up to and including 1.1.1). It arises from improper input neutralization during web page generation, enabling reflected cross-site scripting. Public records in the connected documents ide...
CVE-2025-27279 WordPress Flashfader Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lynk Flashfader flashfader allows Reflected XSS.This issue affects Flashfader: from n/a through = 1.1.1...
Security Bulletin: IBM Aspera Faspex is vulnerable to multiple encryption vulnerabilities.
Summary IBM Aspera Faspex 5.0.8 has addressed multiple encryption vulnerabilities CVE-2023-22869, CVE-2023-37396, CVE-2023-27279, CVE-2023-37395, CVE-2023-37397, CVE-2022-40745 Vulnerability Details CVEID:CVE-2023-22869 DESCRIPTION: IBM Aspera Faspex stores potentially sensitive information in lo...
CVE-2024-27279
creationtimestamp| type| source ---|---|--- 2024-03-12 10:26:54+00:00| seen| https://t.me/ctinow/205488...
CVE-2024-27279
Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier, Ver.2.10.x series Ver.2.10.51 and earlier, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a use...
CVE-2024-27279
Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier, Ver.2.10.x series Ver.2.10.51 and earlier, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a use...
CVE-2024-27279
CVE-2024-27279 describes a directory traversal vulnerability in a-blog cms affecting multiple release branches: 3.1.x (up to 3.1.9), 3.0.x (up to 3.0.30), 2.11.x (up to 2.11.59), 2.10.x (up to 2.10.51), and 2.9 and earlier. A user with editor or higher privileges who can log in may obtain arbitra...
CVE-2022-27279
InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file read via the function sub177E0...
CVE-2022-27279
InHand Networks InRouter 900 Industrial 4G Router is affected by CVE-2022-27279. The vulnerability allows an arbitrary file read via the function sub_177E0 in firmware prior to version 1.0.0.r11700. Affected product is the InRouter 900 Industrial 4G Router; the underlying root cause is an insecur...
CVE-2021-27279
creationtimestamp| type| source ---|---|--- 2021-02-22 22:33:45+00:00| seen| https://t.me/cibsecurity/23945 2021-08-12 15:53:02+00:00| seen| https://t.me/ptswarm/62 2021-12-07 13:52:25+00:00| published-proof-of-concept| https://t.me/ptswarm/96 2022-09-24 18:28:05+00:00| published-proof-of-concept...
CVE-2020-27279
creationtimestamp| type| source ---|---|--- 2021-01-06 18:39:33+00:00| seen| https://t.me/cibsecurity/21676...
CVE-2020-27279
A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 Build versions prior to 3119.001...
CVE-2020-27279
CVE-2020-27279 is a NULL pointer dereference in the Crimson 3.1 protocol converter. A specially crafted packet can reboot Crimson 3.1 devices (Build versions prior to 3119.001). Affected product: Red Lion Crimson 3.1 for the DA10D Protocol Converter. Impact: potential denial-of-service via reboot...
CVE-2020-27279
A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 Build versions prior to 3119.001...