CVE-2026-27678

Due to missing authorization checks in the SAP S/4HANA backend OData Service Manage Reference Structures, an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and...

EUVD-2025-205018

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on...

CVE-2025-14496

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on...

CVE-2025-27678

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6493 2025-03-05 08:34:49+00:00| seen| https://t.me/cvedetector/19595 2025-03-05 09:24:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuv4fsu2f 2025-03-06...

CVE-2025-27678

Vasion Print (formerly PrinterLogic) is affected by a Client Remote Code Execution vulnerability in versions prior to Virtual Appliance Host 22.0.843 and Application 20.0.1923 . The flaw allows for the execution of arbitrary code on the client side. While the technical root cause is not detailed ...

CVE-2025-27678

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001...

CVE-2021-27678

creationtimestamp| type| source ---|---|--- 2021-03-11 20:54:33+00:00| seen| https://t.me/cibsecurity/24798...

CVE-2021-27678

Cross-site scripting XSS vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name...

CVE-2021-27678

CVE-2021-27678 affects Batflat CMS 1.3.6 (Snippets) with a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the field name. Exploitation details, affected versions beyond 1.3.6, and remediation steps are not provided in the supplied ...

CVE-2021-27678

Cross-site scripting XSS vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name...

CVE-2020-27678

creationtimestamp| type| source ---|---|--- 2020-10-26 15:27:43+00:00| seen| https://t.me/cibsecurity/15572...

CVE-2020-27678

CVE-2020-27678 affects illumos up to 2020-10-22 (as used in OmniOS prior to r151030by, r151032ay, r151034y and SmartOS prior to 20201022). The issue is a buffer overflow in parse_user_name within lib/libpam/pam_framework.c. Connected records corroborate this across NVD and vendor pages, confirmin...