21 matches found
CVE-2025-10144
creationtimestamp| type| source ---|---|--- 2025-11-25 02:00:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6gam2wkko2q...
CVE-2015-10144
The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploader in versions up to 1.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary...
CVE-2015-10144 Responsive Thumbnail Slider < 1.0.1 - Authenticated (Subscriber+) Arbitrary File Upload
The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploader in versions up to 1.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary...
CVE-2015-10144
CVE-2015-10144 affects the WordPress plugin Responsive Thumbnail Slider prior to 1.0.1. The root cause is inadequate validation/sanitization in the image uploader, allowing authenticated attackers (subscriber level or higher) to upload arbitrary files via a double extension, with potential remote...
CVE-2024-10144
The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
WordPress Robo Gallery plugin < 3.2.22 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Robo Gallery versions 3.2.22...
CVE-2024-10144
The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2024-10144
The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
CVE-2024-10144 Photo Gallery, Images, Slider in Rbs Image Gallery < 3.2.22 - Contributor+ Stored XSS
The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.22 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
Linux Distros Unpatched Vulnerability : CVE-2016-10144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check. CVE-2016-10144 Note that Nessus relies on th...
Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2019-1970)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-10144
creationtimestamp| type| source ---|---|--- 2019-06-04 08:15:07+00:00| seen| https://t.me/SecLabNews/5053...
CVE-2019-10144
rkt through version 1.30.0 does not isolate processes in containers that are run with rkt enter. Processes run with rkt enter are given all capabilities during stage 2 the actual environment in which the applications run. Compromised containers could exploit this flaw to access host resources...
CVE-2019-10144
CVE-2019-10144 affects rkt up to version 1.30.0. In containers started with rkt enter, processes are granted all capabilities during stage 2, which could allow compromised containers to access host resources. The connected documents confirm the root cause is lack of isolation in this scenario and...
CVE-2018-10144
CVE-2018-10144 is rejected/not used per the description; this ID does not represent an active vulnerability entry.
CVE-2017-10144
Vulnerability CVE-2017-10144 affects Oracle E-Business Suite, Oracle Applications Manager (subcomponent Oracle Diagnostics Interfaces). The affected version is 12.1.3. An unauthenticated attacker who can reach Oracle Applications Manager over HTTP can compromise it, with the impact described as a...
CVE-2016-10144
coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...
CVE-2016-10144
CVE-2016-10144 affects ImageMagick (coders/ipl.c) where a missing malloc check enables remote attackers to achieve an unspecified impact. The vulnerability is documented with high CVSS potential; Nessus entries indicate some distros may be unpatched (vendor patches not available). No exploit spec...