CVE-2021-27654

Forgotten password reset functionality for local accounts can be used to bypass local authentication checks...

CVE-2022-27654

When a user opens a manipulated Photoshop Document .psd, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2025-27654

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Cross Site Scripting XSS V-2023-017...

CVE-2025-27654

creationtimestamp| type| source ---|---|--- 2025-03-06 02:16:26+00:00| seen| Telegram/vYAys4OoqUz2BTXBm6vR6DpOar5qII0e3eTcF6fZRCF94pO...

CVE-2025-27654

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Cross Site Scripting XSS V-2023-017...

CVE-2025-27654

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Cross Site Scripting XSS V-2023-017...

CVE-2025-27654

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Cross Site Scripting XSS V-2023-017...

CVE-2025-27654

CVE-2025-27654 affects Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862, Application 20.0.2014, with Cross Site Scripting (XSS) identified. The CVSSv3.1 base score is 6.1 (MEDIUM) with network attack vector, no privileges required, user interaction required, and changed...

CVE-2023-27654

creationtimestamp| type| source ---|---|--- 2023-04-15 00:26:07+00:00| seen| https://t.me/cibsecurity/62185...

CVE-2023-27654

An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a escalation of privileges via the TTMultiProvider component...

CVE-2023-27654

An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a escalation of privileges via the TTMultiProvider component...

CVE-2023-27654

CVE-2023-27654 affects WHO versions 1.0.28, 1.0.30, and 1.0.32 via the TTMultiProvider component, enabling privilege escalation. The issue is described with a high-severity impact (CVSS 3.1: CRITICAL, exploitability network, no user interaction). Details on root cause, affected subsystems, and co...

CVE-2020-27654

creationtimestamp| type| source ---|---|--- 2022-05-27 01:29:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2005...

CVE-2022-27654

When a user opens a manipulated Photoshop Document .psd, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2022-27654

SAP 3D Visual Enterprise Viewer (v9.0) is affected by CVE-2022-27654 through PSD file parsing, where a manipulated PSD/file can trigger a crash and potential code execution. The ZDI advisory specifies an out-of-bounds write during PSD parsing that allows remote code execution; user interaction is...

CVE-2021-27654

Forgotten password reset functionality for local accounts can be used to bypass local authentication checks...

CVE-2021-27654

CVE-2021-27654 affects Pegasystems Pega. The vulnerability arises from a forgotten password reset functionality for local accounts that can bypass local authentication checks. Public data shows CVSS details: CVSS v3.1 base score 7.8 (HIGH) with LOCAL access, LOW attack complexity, privileges requ...

CVE-2020-27654

Improper access control vulnerability in lbd in Synology Router Manager SRM before 1.2.4-8081 allows remote attackers to execute arbitrary commands via port 1 7786/tcp or 2 7787/tcp...

CVE-2020-27654

Improper access control vulnerability in lbd in Synology Router Manager SRM before 1.2.4-8081 allows remote attackers to execute arbitrary commands via port 1 7786/tcp or 2 7787/tcp...

CVE-2020-27654

CVE-2020-27654 relates to Synology Router Manager (SRM) where the Qualcomm lbd service (two instances, port 7786 and 7787) lacks authentication. The flaw allows remote attackers to execute arbitrary commands as root due to improper access control, enabling remote code execution via the lbd dbg me...