Lucene search
K

21 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/27 7:31 p.m.1 views

CVE-2026-27583

Further research determined the situation described is not a vulnerability...

5.9AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:30 a.m.3 views

CVE-2021-27583

In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password reset feature. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

5.3CVSS7AI score0.00232EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:2 a.m.4 views

CVE-2023-27583

PanIndex is a network disk directory index. In Panindex prior to version 3.1.3, a hard-coded JWT key PanIndex is used. An attacker can use the hard-coded JWT key to sign JWT token and perform any actions as a user with admin privileges. Version 3.1.3 has a patch for the issue. As a workaround, on...

9.8CVSS7AI score0.00521EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:37 p.m.6 views

CVE-2022-27583

A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected firmware version to potentially impact the availability of the FlexiCompact...

9.1CVSS7.1AI score0.00335EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/05 1:5 a.m.5 views

CVE-2025-27583

Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows create and modify user accounts, including an Administrator account...

9.1CVSS6.9AI score0.00079EPSS
Exploits0References1
Circl
Circl
added 2025/03/03 1:29 a.m.2 views

CVE-2025-27583

creationtimestamp| type| source ---|---|--- 2025-03-03 01:29:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6121 2025-03-03 02:58:36+00:00| seen| https://t.me/cvedetector/19275 2025-03-03 04:39:17+00:00| seen|...

9.1CVSS4.8AI score0.00079EPSS
Exploits0References3
NVD
NVD
added 2025/03/03 1:15 a.m.7 views

CVE-2025-27583

Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows create and modify user accounts, including an Administrator account...

9.1CVSS0.00079EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/03 12:0 a.m.5 views

CVE-2025-27583

Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows create and modify user accounts, including an Administrator account...

7.2AI score0.00079EPSS
Exploits0References1
CVE
CVE
added 2025/03/03 12:0 a.m.59 views

CVE-2025-27583

CVE-2025-27583 concerns Serosoft Solutions Academia Student Information System EagleR v1.0.118. The issue is incorrect access control in the REST endpoints /rest/staffResource/findAllUsersAcrossOrg (and related /create path) that allows creating and modifying user accounts, including Administrato...

9.1CVSS6.6AI score0.00079EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/03/13 9:15 p.m.7 views

CVE-2023-27583

PanIndex is a network disk directory index. In Panindex prior to version 3.1.3, a hard-coded JWT key PanIndex is used. An attacker can use the hard-coded JWT key to sign JWT token and perform any actions as a user with admin privileges. Version 3.1.3 has a patch for the issue. As a workaround, on...

9.8CVSS9.6AI score0.00521EPSS
Exploits0References3
CVE
CVE
added 2023/03/13 8:33 p.m.63 views

CVE-2023-27583

CVE-2023-27583 affects PanIndex prior to version 3.1.3, where a hard-coded JWT signing key named “PanIndex” enables an attacker to forge tokens and perform admin actions. The issue is mitigated by upgrading to 3.1.3, which ships a patch. As a temporary workaround, the source code can be modified ...

9.8CVSS9.6AI score0.00521EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/03/13 8:33 p.m.11 views

CVE-2023-27583 Panindex uses hard coded cyptographic key

PanIndex is a network disk directory index. In Panindex prior to version 3.1.3, a hard-coded JWT key PanIndex is used. An attacker can use the hard-coded JWT key to sign JWT token and perform any actions as a user with admin privileges. Version 3.1.3 has a patch for the issue. As a workaround, on...

9.8CVSS9.7AI score0.00521EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/03/13 8:33 p.m.7 views

CVE-2023-27583 Panindex uses hard coded cyptographic key

PanIndex is a network disk directory index. In Panindex prior to version 3.1.3, a hard-coded JWT key PanIndex is used. An attacker can use the hard-coded JWT key to sign JWT token and perform any actions as a user with admin privileges. Version 3.1.3 has a patch for the issue. As a workaround, on...

9.8CVSS9.5AI score0.00521EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2022/10/31 12:0 a.m.4 views

CVE-2022-27583

A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected firmware version to potentially impact the availability of the FlexiCompact...

9.2AI score0.00335EPSS
Exploits0References1
CVE
CVE
added 2022/10/31 12:0 a.m.46 views

CVE-2022-27583

CVE-2022-27583 concerns a vulnerability in the configuration interface of SICK FlexiCompact FLX3-CPUC1 and FLX3-CPUC2. The available documents indicate a remote, unprivileged attacker could interact with the affected firmware’s configuration interface and potentially impact the FlexiCompact’s ava...

9.1CVSS9AI score0.00335EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2021/02/23 10:35 p.m.0 views

CVE-2021-27583

creationtimestamp| type| source ---|---|--- 2021-02-23 22:35:20+00:00| seen| https://t.me/cibsecurity/24029...

5.3CVSS5.5AI score0.00232EPSS
Exploits1References1
CVE
CVE
added 2021/02/23 6:54 p.m.40 views

CVE-2021-27583

Directus 8.x–8.8.1 is affected by a vulnerability where the password reset feature can be leveraged to determine if a given user exists in the database. The issue is confirmed across multiple sources (NVD/Red Hat/OSV/etc.) and is constrained to products no longer supported by the maintainer. The ...

5.3CVSS5.3AI score0.00232EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2021/01/26 8:46 p.m.3 views

CVE-2020-27583

creationtimestamp| type| source ---|---|--- 2021-01-26 20:46:33+00:00| seen| https://t.me/cibsecurity/22637...

9.8CVSS8.7AI score0.04233EPSS
Exploits1References1
CVE
CVE
added 2021/01/21 12:0 a.m.42 views

CVE-2020-27583

CVE-2020-27583 affects IBM InfoSphere Information Server 8.5.0.0. The vulnerability is due to deserialization of untrusted data, which could allow remote unauthenticated attackers to execute arbitrary code. The affected product is noted as no longer supported by the maintainer. The Red Hat/Redund...

9.8CVSS9.6AI score0.04233EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 1976/01/01 12:0 a.m.15 views

CVE-2026-27583

...

Exploits0
Rows per page
Query Builder