Lucene search
K

40 matches found

Nuclei
Nuclei
added yesterday23 views

Aruba Airwave <8.2.3.1 - Cross-Site Scripting

Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting. id: CVE-2016-8527 info: name: Aruba Airwave 8.2.3.1 - Cross-Site Scripting author: pikpikcu severity: medium description: Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting...

6.1CVSS6.3AI score0.55809EPSS
Exploits5References5
Wolfi
Wolfi
added 2026/05/20 7:55 a.m.6 views

CVE-2026-8527 vulnerabilities

Vulnerabilities for packages: chromium...

8.8CVSS5.8AI score0.00148EPSS
Exploits0
Chainguard
Chainguard
added 2026/05/20 7:17 a.m.6 views

CVE-2026-8527 vulnerabilities

Vulnerabilities for packages: chromium...

8.8CVSS5.8AI score0.00148EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2026/05/16 12:20 a.m.5 views

Chromium: CVE-2026-8527 Insufficient validation of untrusted input in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS5.8AI score0.00148EPSS
Exploits0
NVD
NVD
added 2026/05/14 8:17 p.m.2 views

CVE-2026-8527

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00148EPSS
Exploits0References2
OSV
OSV
added 2026/05/14 8:17 p.m.2 views

DEBIAN-CVE-2026-8527

Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.2AI score0.00148EPSS
Exploits0References1
CVE
CVE
added 2026/05/14 7:52 p.m.14 views

CVE-2026-8527

CVE-2026-8527 : In Google Chrome, insufficient validation of untrusted input in Downloads allows a remote attacker to execute arbitrary code via a crafted HTML page. Affected: Chrome (Chromium-based) prior to 148.0.7778.168. Root cause: input validation in the Downloads path. Impact: high severit...

8.8CVSS6.2AI score0.00148EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2025/09/15 1:12 a.m.1 views

ECHO-C3A8-8527-D760

Bulletin has no description...

5.5CVSS8.8AI score0.00092EPSS
Exploits0References1
OSV
OSV
added 2025/08/04 10:15 p.m.1 views

CVE-2025-8527

A vulnerability was found in Exrick xboot up to 3.3.4. It has been rated as critical. This issue affects some unknown processing of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/SecurityController.java of the component Swagger. The manipulation of the argument...

8.8CVSS7.2AI score
Exploits0References5
Cvelist
Cvelist
added 2025/08/04 9:32 p.m.7 views

CVE-2025-8527 Exrick xboot Swagger SecurityController.java server-side request forgery

A vulnerability was found in Exrick xboot up to 3.3.4. It has been rated as critical. This issue affects some unknown processing of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/SecurityController.java of the component Swagger. The manipulation of the argument...

6.5CVSS0.00293EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/08/04 9:32 p.m.3 views

CVE-2025-8527 Exrick xboot Swagger SecurityController.java server-side request forgery

A vulnerability was found in Exrick xboot up to 3.3.4. It has been rated as critical. This issue affects some unknown processing of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/SecurityController.java of the component Swagger. The manipulation of the argument...

6.5CVSS7.1AI score0.00293EPSS
Exploits1References5
CVE
CVE
added 2025/08/04 9:32 p.m.14 views

CVE-2025-8527

CVE-2025-8527 affects Exrick xboot up to version 3.3.4, involving the Swagger component. The root cause is server-side request forgery triggered by manipulation of the loginUrl parameter in SecurityController.java (xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/). This Vu...

8.8CVSS6.5AI score0.00293EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 9:9 a.m.7 views

CVE-2014-8527

McAfee Network Data Loss Prevention NDLP before 9.3 allows local users to obtain sensitive information and affect integrity via vectors related to a "plain text password."...

3.6CVSS6AI score0.00131EPSS
Exploits0References1
OSV
OSV
added 2024/09/19 6:6 a.m.7 views

CGA-8527-GX23-82M6

Bulletin has no description...

7.5CVSS7.1AI score0.00163EPSS
Exploits0
CVE
CVE
added 2019/12/18 5:33 p.m.76 views

CVE-2019-8527

CVE-2019-8527 involves a buffer overflow that Apple addressed by improving size validation. Affected platforms include iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, and watchOS 5.2. Root cause: insufficient size validation leading to memory corruption. Impact per description: a remote attacker could...

9.4CVSS8AI score0.01605EPSS
Exploits0References4Affected Software4
Tenable Nessus
Tenable Nessus
added 2019/04/17 12:0 a.m.31 views

Apple iOS < 12.2 Multiple Vulnerabilities (APPLE-SA-2019-3-25-1)

Binary data 700558.prm...

9.6CVSS8.8AI score0.418EPSS
Exploits9References51
Tenable Nessus
Tenable Nessus
added 2019/03/26 12:0 a.m.37 views

Apple iOS < 12.2 Multiple Vulnerabilities

Binary data appleios122check.nbin...

9.6CVSS8.8AI score0.418EPSS
Exploits9References51
Check Point Advisories
Check Point Advisories
added 2018/11/18 12:0 a.m.4 views

Microsoft SQL Server Management Studio XXE Injection Information Disclosure (CVE-2018-8527; CVE-2018-8532; CVE-2018-8533)

Multiple information disclosure vulnerabilities exist in Microsoft SQL Server Management Studio. The vulnerabilities are due to a flaw when parsing a malicious XEL/XML/XMLA file containing a reference to an external entity. A remote authenticated attacker could exploit these vulnerabilities by...

4.3CVSS1.4AI score0.4785EPSS
Exploits15
Tenable Nessus
Tenable Nessus
added 2018/10/12 12:0 a.m.94 views

Microsoft SQL Server Management Studio Multiple vulnerabilities (October 2018)

The version of Microsoft SQL Server Management Studio installed on the remote Windows host is a version prior or equal to 17.9, 18.0 Preview 4. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...

5.5CVSS5.9AI score0.4785EPSS
Exploits15References4
Circl
Circl
added 2018/10/11 12:0 a.m.10 views

CVE-2018-8527

creationtimestamp| type| source ---|---|--- 2018-10-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45585 2018-10-17 15:32:59+00:00| seen| MISP/5bc75546-5b4c-4811-b692-070d0a021402...

5.5CVSS6.8AI score0.4785EPSS
Exploits13References1
Rows per page
Query Builder