Lucene search
K

17 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/21 10:33 a.m.2 views

CVE-2026-27531

Not used...

5.4AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 2:55 p.m.3 views

CVE-2025-27531 Apache InLong: An arbitrary file read vulnerability for JDBC

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 before 2.1.0, this issue would allow an authenticated attacker to read arbitrary files by double writing the param. Users are recommended to upgrade to version 2.1.0, which fixes the...

9.3AI score0.00496EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:15 a.m.3 views

CVE-2023-27531

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code...

5.3CVSS6.8AI score0.00095EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:31 p.m.3 views

CVE-2021-27531

A cross-site scripting XSS vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "query" parameter...

4.8CVSS5.8AI score0.00179EPSS
Exploits1References1
Circl
Circl
added 2025/02/28 4:24 a.m.5 views

CVE-2025-27531

creationtimestamp| type| source ---|---|--- 2025-02-28 04:24:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lj7kruepf32q 2025-06-06 15:39:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114637169259974567...

9.8CVSS6.7AI score0.00496EPSS
Exploits0References2
CVE
CVE
added 2025/01/09 12:33 a.m.73 views

CVE-2023-27531

CVE-2023-27531 affects the Kredis JSON deserialization path. Vulnerable: Kredis versions prior to 1.3.0.1 where untrusted JSON data can be deserialized, potentially leading to deserialization of unexpected objects. Impact: any applications using Kredis with JSON are affected. Mitigation: upgrade ...

5.3CVSS6.6AI score0.00095EPSS
Exploits0References1
Circl
Circl
added 2023/08/16 3:18 p.m.5 views

CVE-2023-27531

creationtimestamp| type| source ---|---|--- 2023-08-16 15:18:00+00:00| seen| https://t.me/ctinow/130894 2025-01-09 00:56:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113795675424067393 2025-01-09 01:14:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/865 2025-01-09...

5.3CVSS5.4AI score0.00095EPSS
Exploits0References6
Hacker One
Hacker One
added 2023/07/17 4:50 a.m.71 views

Internet Bug Bounty: [CVE-2023-27531] Possible Deserialization of Untrusted Data vulnerability in Kredis JSON

A deserialization vulnerability was discovered in the Kredis JSON deserialization code, allowing for the potential deserialization of untrusted data. This could result in unexpected objects being deserialized in the system. The vulnerability has been assigned the CVE identifier CVE-2023-27531...

5.3CVSS5.2AI score0.00095EPSS
Exploits0
OSV
OSV
added 2023/06/09 10:40 p.m.18 views

GHSA-H2WM-P2VG-6PW4 Kredis JSON Possible Deserialization of Untrusted Data Vulnerability

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code. This vulnerability has been assigned the CVE identifier CVE-2023-27531. 'Not affected: None.' 'Versions Affected: All.' 'Fixed Versions: 1.3.0.1' Impact Carefully crafted JSON data processed by...

5.3CVSS5.2AI score0.00095EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2023/06/09 10:40 p.m.22 views

Kredis JSON Possible Deserialization of Untrusted Data Vulnerability

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code. This vulnerability has been assigned the CVE identifier CVE-2023-27531. 'Not affected: None.' 'Versions Affected: All.' 'Fixed Versions: 1.3.0.1' Impact Carefully crafted JSON data processed by...

5.3CVSS6.7AI score0.00095EPSS
Exploits0References7Affected Software1
RubySec
RubySec
added 2023/03/13 12:0 a.m.22 views

Possible Deserialization of Untrusted Data Vulnerability in Kredis JSON

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code. This vulnerability has been assigned the CVE identifier CVE-2023-27531. 'Not affected: None.' 'Versions Affected: All.' 'Fixed Versions: 1.3.0.1' Impact Carefully crafted JSON data processed by...

5.3CVSS6.3AI score0.00095EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2022/06/17 7:14 a.m.0 views

CVE-2022-27531

creationtimestamp| type| source ---|---|--- 2022-06-17 07:14:25+00:00| seen| https://t.me/cibsecurity/44652...

7.8CVSS7.5AI score0.00343EPSS
Exploits0References1
CVE
CVE
added 2022/06/16 3:46 p.m.60 views

CVE-2022-27531

CVE-2022-27531 affects Autodesk 3ds Max 2022 and 2021, where a maliciously crafted TIFF file can cause a read beyond allocated boundaries during TIFF parsing. This can allow code execution within the current process. The linked records consistently describe the issue as a boundary-read vulnerabil...

7.8CVSS7.7AI score0.00343EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2021/03/23 5:38 p.m.0 views

CVE-2021-27531

creationtimestamp| type| source ---|---|--- 2021-03-23 17:38:18+00:00| seen| https://t.me/cibsecurity/25307...

4.8CVSS4.9AI score0.00179EPSS
Exploits1References1
CVE
CVE
added 2021/03/23 1:16 p.m.41 views

CVE-2021-27531

CVE-2021-27531 describes a cross-site scripting (XSS) vulnerability in DynPG 4.9.2 where an attacker can inject JavaScript via the URL-parameter "query". The issue is documented in multiple sources (NVD and vendor trackers) as a DynPG XSS vulnerability affecting version 4.9.2, with impact describ...

4.8CVSS4.9AI score0.00179EPSS
Exploits1References1Affected Software1
CVE
CVE
added 1976/01/01 12:0 a.m.2 views

CVE-2026-27531

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

5.4AI score
Exploits0
Cvelist
Cvelist
added 1976/01/01 12:0 a.m.19 views

CVE-2026-27531

...

Exploits0
Rows per page
Query Builder