Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2025/10/12 10:5 a.m.6 views

CVE-2025-8593

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to authorization bypass in versions less than, or equal to, 1.3.27. This is due to a missing capability check on the 'installplugin' function. This makes it possible for authenticated attackers, with subscriber-level access...

8.8CVSS6.6AI score0.00111EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/11 12:30 p.m.3 views

EUVD-2025-33844

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to authorization bypass in versions less than, or equal to, 1.3.27. This is due to a missing capability check on the 'installplugin' function. This makes it possible for authenticated attackers, with subscriber-level access...

8.8CVSS6.1AI score0.00111EPSS
Exploits0References4
CVE
CVE
added 2025/10/11 9:28 a.m.20 views

CVE-2025-8593

CVE-2025-8593 affects the GSheetConnector For Gravity Forms WordPress plugin, with versions

8.8CVSS6.2AI score0.00111EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/11 9:28 a.m.10 views

CVE-2025-8593 GSheetConnector For Gravity Forms <= 1.3.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

The GSheetConnector For Gravity Forms plugin for WordPress is vulnerable to authorization bypass in versions less than, or equal to, 1.3.27. This is due to a missing capability check on the 'installplugin' function. This makes it possible for authenticated attackers, with subscriber-level access...

8.8CVSS0.00111EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/10/11 12:0 a.m.1 views

WordPress plugin GSheetConnector For Gravity Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.8CVSS7.4AI score0.00111EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/11 12:0 a.m.3 views

PT-2025-41677

Name of the Vulnerable Software and Affected Versions GSheetConnector For Gravity Forms plugin for WordPress versions prior to 1.3.28 Description The GSheetConnector For Gravity Forms plugin for WordPress is susceptible to an authorization bypass. This occurs because of a missing capability check...

8.8CVSS7.1AI score0.00111EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2002-1639

Malware in sbrugna...

4.6CVSS6.4AI score0.00163EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 6:21 a.m.2 views

SUSE CVE-2002-0843

Buffer overflows in the ApacheBench benchmark support program ab.c in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response...

7.5CVSS7.9AI score0.03769EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2018/01/17 2:23 p.m.26 views

CVE-2018-5360

LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27...

8.8CVSS5.7AI score0.00456EPSS
Exploits1References1
CNVD
CNVD
added 2018/01/15 12:0 a.m.1 views

GraphicsMagick 'ReadBMPImage' function infinite loop vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadBMPImage' function of the coders/bmp.c file in GraphicsMagick version 1.3.27. A remote attacker can exploit this...

6.5CVSS6.9AI score0.00563EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2018/01/14 2:0 a.m.26 views

CVE-2018-5685

In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...

6.5CVSS7.2AI score0.00563EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2018/01/14 2:0 a.m.38 views

CVE-2018-5685

In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...

6.5CVSS7.2AI score0.00563EPSS
Exploits1
CVE
CVE
added 2018/01/14 2:0 a.m.112 views

CVE-2018-5685

GraphicsMagick 1.3.27 is affected by CVE-2018-5685 due to a flaw in ReadBMPImage (coders/bmp.c) where processing a BMP image with a crafted bit-field mask value can cause an infinite loop, leading to denial of service. Public advisories note this affects GraphicsMagick and list fixed versions; De...

6.5CVSS6.4AI score0.00563EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2018/01/13 12:0 a.m.2 views

PT-2018-3224 · Graphicsmagick +3 · Graphicsmagick +3

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.27 Description: The issue is related to an infinite loop in the ReadBMPImage function, which can cause an application hang. This can be exploited by remote attackers to cause a denial of service via a crafted image...

9.8CVSS7.5AI score0.4848EPSS
Exploits35References249
0day.today
0day.today
added 2011/07/14 12:0 a.m.14 views

PG eLMS Pro vDEC_2007_01 (contact_us.php) Multiple POST XSS

Exploit for php platform in category web applications PG eLMS Pro vDEC200701 contactus.php Multiple POST XSS Vulnerabilities body bgcolo...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2009/12/25 12:0 a.m.15 views

apache 1.3.27 命令执行

No description provided by source...

7.1AI score
Exploits0
Cvelist
Cvelist
added 2007/10/18 10:0 a.m.20 views

CVE-2002-2272

Tomcat 4.0 through 4.1.12, using modjk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service desynchronized communications via an HTTP GET request with a Transfer-Encoding chunked field with invalid values...

6.6AI score0.31421EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2004/08/20 12:0 a.m.22 views

Apache < 1.3.27 Multiple Vulnerabilities

Binary data 1488.prm...

7.5CVSS7.3AI score0.90183EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2002/11/08 11:15 a.m.2 views

security flaw

Buffer overflows in the ApacheBench benchmark support program ab.c in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response...

7.5CVSS6.1AI score0.03769EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2002/11/07 5:42 p.m.3 views

security flaw

Buffer overflows in the ApacheBench benchmark support program ab.c in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response...

7.5CVSS6.1AI score0.03769EPSS
Exploits0References4
Rows per page
Query Builder