20 matches found
CVE-2025-8593
The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to authorization bypass in versions less than, or equal to, 1.3.27. This is due to a missing capability check on the 'installplugin' function. This makes it possible for authenticated attackers, with subscriber-level access...
EUVD-2025-33844
The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to authorization bypass in versions less than, or equal to, 1.3.27. This is due to a missing capability check on the 'installplugin' function. This makes it possible for authenticated attackers, with subscriber-level access...
CVE-2025-8593
CVE-2025-8593 affects the GSheetConnector For Gravity Forms WordPress plugin, with versions
CVE-2025-8593 GSheetConnector For Gravity Forms <= 1.3.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to authorization bypass in versions less than, or equal to, 1.3.27. This is due to a missing capability check on the 'installplugin' function. This makes it possible for authenticated attackers, with subscriber-level access...
WordPress plugin GSheetConnector For Gravity Forms 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2025-41677
Name of the Vulnerable Software and Affected Versions GSheetConnector For Gravity Forms plugin for WordPress versions prior to 1.3.28 Description The GSheetConnector For Gravity Forms plugin for WordPress is susceptible to an authorization bypass. This occurs because of a missing capability check...
EUVD-2002-1639
Malware in sbrugna...
SUSE CVE-2002-0843
Buffer overflows in the ApacheBench benchmark support program ab.c in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response...
CVE-2018-5360
LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27...
GraphicsMagick 'ReadBMPImage' function infinite loop vulnerability
GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadBMPImage' function of the coders/bmp.c file in GraphicsMagick version 1.3.27. A remote attacker can exploit this...
CVE-2018-5685
In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...
CVE-2018-5685
In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...
CVE-2018-5685
GraphicsMagick 1.3.27 is affected by CVE-2018-5685 due to a flaw in ReadBMPImage (coders/bmp.c) where processing a BMP image with a crafted bit-field mask value can cause an infinite loop, leading to denial of service. Public advisories note this affects GraphicsMagick and list fixed versions; De...
PT-2018-3224 · Graphicsmagick +3 · Graphicsmagick +3
Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.27 Description: The issue is related to an infinite loop in the ReadBMPImage function, which can cause an application hang. This can be exploited by remote attackers to cause a denial of service via a crafted image...
PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS
Exploit for php platform in category web applications PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities body bgcolo...
apache 1.3.27 命令执行
No description provided by source...
CVE-2002-2272
Tomcat 4.0 through 4.1.12, using modjk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service desynchronized communications via an HTTP GET request with a Transfer-Encoding chunked field with invalid values...
Apache < 1.3.27 Multiple Vulnerabilities
Binary data 1488.prm...
security flaw
Buffer overflows in the ApacheBench benchmark support program ab.c in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response...
security flaw
Buffer overflows in the ApacheBench benchmark support program ab.c in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response...