CVE-2022-27864

A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file...

CVE-2020-27864

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HNAP service, which listens on TCP...

CVE-2023-27864

CVE-2023-27864 – IBM Maximo Asset Management HTML injection affects IBM Maximo Asset Management core product versions 7.6.1.2 and 7.6.1.3. The issue allows a remote attacker to inject malicious HTML that is rendered in the victim’s browser within the hosting site’s security context. CVSS base sco...

Security Bulletin: IBM Maximo Asset Management is vulnerable to HTML injection (CVE-2023-27864)

Summary IBM Maximo Asset Management is vulnerable to HTML injection. Vulnerability Details CVEID:CVE-2023-27864 DESCRIPTION: IBM Maximo Asset Management is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web...

CVE-2022-27864

creationtimestamp| type| source ---|---|--- 2022-07-30 00:13:50+00:00| seen| https://t.me/cibsecurity/47295...

CVE-2022-27864

A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file...

CVE-2022-27864

CVE-2022-27864 concerns Autodesk Design Review (DesignReview.exe). The issue is a Double Free vulnerability that allows remote code execution through PDFs opened in affected installations. Exploitation requires user interaction: the target must visit a malicious page or open a malicious file. Mul...

CVE-2020-27864

CVE-2020-27864 affects D-Link DAP-1860 WiFi extenders (firmware 1.04B03). The flaw is in the HNAP service listening on TCP port 80, where the Authorization header is parsed without proper validation and is used to invoke a system call, allowing remote, network-adjacent attackers to execute arbitr...