Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:49 a.m.4 views

CVE-2022-27958

Insecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security v1.0 allows attackers to access and arbitrarily modify users' personal information...

5.5CVSS6.9AI score0.00167EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:33 p.m.5 views

CVE-2020-27958

The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template...

4.3CVSS6.6AI score0.00216EPSS
Exploits0
Cvelist
Cvelist
added 2024/03/17 4:24 p.m.17 views

CVE-2024-27958 WordPress Visualizer plugin <= 3.10.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle Visualizer allows Reflected XSS.This issue affects Visualizer: from n/a through 3.10.5...

7.1CVSS7.1AI score0.00179EPSS
Exploits0References1
CVE
CVE
added 2024/03/17 4:24 p.m.76 views

CVE-2024-27958

CVE-2024-27958 is a Reflected XSS in Themeisle Visualizer (Visualizer: Tables and Charts Manager for WordPress). Affected: Visualizer (n/a through 3.10.5). Root cause: improper neutralization of input during web page generation. Impact per description: Reflected XSS. Remediation: update to patche...

7.1CVSS8.6AI score0.00179EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/03/13 12:0 a.m.9 views

WordPress Visualizer Plugin <= 3.10.5 is vulnerable to Cross Site Scripting (XSS)

Software Visualizer Type Plugin Vulnerable versions = 3.10.5 Fixed in 3.10.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-27958 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID c3450277a0c7 Credits stealthcopter Required privilege...

7.1CVSS6.6AI score0.00179EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/05/09 12:48 a.m.1 views

CVE-2023-27958

creationtimestamp| type| source ---|---|--- 2023-05-09 00:48:11+00:00| seen| https://t.me/cibsecurity/63505...

9.1CVSS7.7AI score0.0046EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/08 12:0 a.m.16 views

CVE-2023-27958

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory...

8.4AI score0.0046EPSS
Exploits0References3
CVE
CVE
added 2023/05/08 12:0 a.m.107 views

CVE-2023-27958

CVE-2023-27958 concerns macOS kernel memory handling. The issue could allow a remote attacker to cause an unexpected system termination or corrupt kernel memory. Apple’s advisories and multiple sources confirm the vulnerability impacts macOS Big Sur (11.7.5), Monterey (12.6.4), and Ventura (13.3)...

9.1CVSS7.8AI score0.0046EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/08 12:0 a.m.5 views

CVE-2023-27958

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory...

8AI score0.0046EPSS
Exploits0References3
Apple
Apple
added 2023/03/27 12:0 a.m.75 views

About the security content of macOS Monterey 12.6.4

About the security content of macOS Monterey 12.6.4 This document describes the security content of macOS Monterey 12.6.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

9.8CVSS9.2AI score0.03098EPSS
Exploits3References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/03/27 12:0 a.m.71 views

macOS 12.x < 12.6.4 Multiple Vulnerabilities (HT213677)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.6.4. It is, therefore, affected by multiple vulnerabilities: - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. CVE-2023-0433 - Divide By Zero in GitHub repository vim/vim prior to 9.0.1247...

9.8CVSS7.7AI score0.03098EPSS
Exploits3References41
CVE
CVE
added 2022/04/10 9:1 p.m.69 views

CVE-2022-27958

Summary: CVE-2022-27958 affects FEBS-Security v1.0. The issue is insecure permissions configured in the userid parameter at /user/getuserprofile, enabling an attacker to access and arbitrarily modify users’ personal information. Details from connected sources: The Red Hat CVE reference corroborat...

5.5CVSS5.5AI score0.00167EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2022/02/26 10:21 p.m.1 views

CVE-2020-27958

creationtimestamp| type| source ---|---|--- 2022-02-26 22:21:45+00:00| seen| https://t.me/cibsecurity/38162...

4.3CVSS4.7AI score0.00216EPSS
Exploits0References1
NVD
NVD
added 2022/02/26 8:15 p.m.15 views

CVE-2020-27958

The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template...

4.3CVSS0.00216EPSS
Exploits0References3
CVE
CVE
added 2022/02/26 7:1 p.m.55 views

CVE-2020-27958

The CVE affects the Open OnDemand Open OnDemand Job Composer app used by Ohio Supercomputer Center, specifically versions before 1.7.19 (and 1.8.x before 1.8.18). The reported issue is that remote authenticated users can supply crafted input through a job template, potentially impacting how jobs ...

4.3CVSS4.4AI score0.00216EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2022/02/26 7:1 p.m.12 views

CVE-2020-27958

The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to provide crafted input in a job template...

4.4AI score0.00216EPSS
Exploits0References3
Rows per page
Query Builder