Lucene search
+L

92 matches found

OSV
OSV
added 2026/06/22 5:17 p.m.8 views

MINI-G6M5-4272-HMC5

Bulletin has no description...

8.8CVSS7AI score0.00258EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2026/04/05 10:00 p.m.4 views

CVE-2026-4272

Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 BaseIngenic x1000 before GK000432BAA, from D1 BaseIngenic x1600 before HE000085BAA, from A1/B1 BaseIMX25 before...

8.1CVSS6AI score0.00453EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/05 12:00 a.m.11 views

PT-2026-30510

Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 BaseIngenic x1000 before GK000432BAA, from D1 BaseIngenic x1600 before HE000085BAA, from A1/B1 BaseIMX25 before BK000763BAA BK000765B...

8.1CVSS6AI score0.00453EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/14 12:00 a.m.7 views

DLA-4272-1 aide - security update

Bulletin has no description...

6.2CVSS7.2AI score0.0023EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/05/22 12:06 p.m.11 views

CVE-2012-4272

Multiple cross-site scripting XSS vulnerabilities in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "processing of the buttons of Xing and Pinterest"...

4.3CVSS6AI score0.01637EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/05 11:15 a.m.22 views

CVE-2025-4272

A vulnerability was found in Mechrevo Control Console 1.0.2.70. It has been rated as critical. Affected by this issue is some unknown functionality in the library C:\Program Files\OEM\MECHREVO Control Center\UniwillService\MyControlCenter\csCAPI.dll of the component GCUService. The manipulation...

7.3CVSS0.00188EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/05/05 11:00 a.m.39 views

CVE-2025-4272 Mechrevo Control Console GCUService csCAPI.dll uncontrolled search path

A vulnerability was found in Mechrevo Control Console 1.0.2.70. It has been rated as critical. Affected by this issue is some unknown functionality in the library C:\Program Files\OEM\MECHREVO Control Center\UniwillService\MyControlCenter\csCAPI.dll of the component GCUService. The manipulation...

7.3CVSS0.00188EPSS
SaveExploits0References5
CVE
CVE
added 2025/05/05 11:00 a.m.73 views

CVE-2025-4272

CVE-2025-4272 affects Mechrevo Control Console 1.0.2.70; vulnerable component is the library csCAPI.dll under GCUService. Reported issue: uncontrolled search path leading to local exploitation. Documents consistently describe local attack requirements with high impact per CVSS vectors (local acce...

7.3CVSS6.9AI score0.00188EPSS
SaveExploits0References5
Patchstack
Patchstack
added 2024/07/15 12:00 a.m.19 views

WordPress Support SVG Plugin < 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Support SVG Type Plugin Vulnerable versions 1.1.0 Fixed in 1.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4272 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 9c36e42fd0ca Credits Rayhan Ramdhany Hanaputra...

6.1CVSS6AI score0.00396EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/13 6:00 a.m.14 views

CVE-2024-4272 Support SVG < 1.1.0 - Stored XSS via SVG Upload

The Support SVG WordPress plugin before 1.1.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks...

5.8AI score0.00396EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/07/13 6:00 a.m.38 views

CVE-2024-4272 Support SVG < 1.1.0 - Stored XSS via SVG Upload

The Support SVG WordPress plugin before 1.1.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks...

0.00396EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/06 12:22 p.m.23 views

CGA-48FX-4272-C6M9

Bulletin has no description...

5.9CVSS6.7AI score0.93305EPSS
SaveExploits4
Circl
Circl
added 2024/02/15 11:16 p.m.13 views

CVE-2009-4272

creationtimestamp| type| source ---|---|--- 2024-02-15 23:16:21+00:00| seen| https://t.me/ctinow/185964...

7.8CVSS7.4AI score0.11051EPSS
SaveExploits3References1
NVD
NVD
added 2023/11/07 4:15 p.m.25 views

CVE-2023-4272

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

5.5CVSS0.0034EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/07 3:18 p.m.53 views

CVE-2023-4272 Mali GPU Kernel Driver exposes sensitive data from freed memory

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

5.7AI score0.0034EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/07 3:18 p.m.134 views

CVE-2023-4272

CVE-2023-4272 affects ARM Mali GPU kernel drivers (Midgard, Bifrost, Valhall families) exposing sensitive data from freed memory via local GPU processing operations. Public documents link Mali kernel-driver variants (r8p0–r32p0, r0p0–r41p0, etc.) and describe the vulnerability as local with low a...

5.5CVSS5.4AI score0.0034EPSS
SaveExploits0References1Affected Software4
Circl
Circl
added 2022/12/21 10:13 p.m.10 views

CVE-2021-4272

creationtimestamp| type| source ---|---|--- 2022-12-21 22:13:13+00:00| seen| https://t.me/cibsecurity/55082 2025-04-14 17:54:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11671...

6.1CVSS6.1AI score0.00385EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/12/21 12:00 a.m.34 views

CVE-2021-4272 studygolang topics.js cross site scripting

A vulnerability classified as problematic has been found in studygolang. This affects an unknown part of the file static/js/topics.js. The manipulation of the argument contentHtml leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is...

3.5CVSS6.2AI score0.00385EPSS
SaveExploits0References2
CVE
CVE
added 2022/12/21 12:00 a.m.74 views

CVE-2021-4272

CVE-2021-4272 affects the studygolang project, specifically the file static/js/topics.js . The vulnerability arises from how the argument contentHtml is handled, allowing a cross-site scripting (XSS) condition. It is stated that the issue can be triggered remotely. The patch referenced is the com...

6.1CVSS4.8AI score0.00385EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/21 12:00 a.m.5 views

CVE-2021-4272 studygolang topics.js cross site scripting

A vulnerability classified as problematic has been found in studygolang. This affects an unknown part of the file static/js/topics.js. The manipulation of the argument contentHtml leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is...

3.5CVSS6AI score0.00385EPSS
SaveExploits0References2
Rows per page
Query Builder