11 matches found
SUSE CVE-2026-18307
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...
CVE-2017-18307
creationtimestamp| type| source ---|---|--- 2026-07-15 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqpl6qlrol2f...
CVE-2017-18307
Information disclosure possible while audio playback...
CVE-2019-18307
A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server All versions. An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290,...
CVE-2017-18307
Information disclosure possible while audio playback...
CVE-2017-18307 Information Exposure in Kernel
Information disclosure possible while audio playback...
CVE-2017-18307 Information Exposure in Kernel
Information disclosure possible while audio playback...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2022-42398
CVE-2022-42398 affects PDF-XChange Editor. The root cause is a parsing flaw in PDF handling that can trigger a read-past-the-end of an allocated buffer, leading to potential information disclosure and, in conjunction with other vulnerabilities, possible arbitrary code execution in the context of ...
CVE-2019-18307
The connected Red Hat CVE entries confirm CVE-2019-18303, CVE-2019-18305, CVE-2019-18301, CV9-... wait, replace with correct list?
CVE-2018-18307
AlchemyCMS 4.1.0 is vulnerable to a Stored XSS via the /admin/pictures image field. The issue is caused by improper handling of user input in that field (SNYK cites improper input sanitization). The vendor disputes the report, stating the request relied on an authorized session cookie; without it...