90 matches found
CVE-2026-2271
A flaw was found in GIMP's PSP Paint Shop Pro file parser. A remote attacker could exploit an integer overflow vulnerability in the readcreatorblock function by providing a specially crafted PSP image file. This vulnerability occurs when a 32-bit length value from the file is used for memory...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gimp (UTSA-2026-006276)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006276 advisory. Unity Link Advisory UTSA-2026-006276 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...
[SECURITY] [DLA 4483-1] gimp security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4483-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz February 18, 2026 https://wiki.debian.org/LTS -...
Debian dsa-6139 : gimp - security update
The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6139 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6139-1 [email protected]...
CVE-2026-2271
A flaw was found in GIMP's PSP Paint Shop Pro file parser. A remote attacker could exploit an integer overflow vulnerability in the readcreatorblock function by providing a specially crafted PSP image file. This vulnerability occurs when a 32-bit length value from the file is used for memory...
CVE-2021-2271
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite component: Resource Exceptions. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work ...
CVE-2024-2271
A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...
EUVD-2020-2271
Malware in sbrugna...
CVE-2005-2271
iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."...
CVE-2025-2271
A vulnerability exists in Issuetrak v17.2.2 and prior that allows a low-privileged user to access audit results of other users by exploiting an Insecure Direct Object Reference IDOR vulnerability in the Issuetrak audit component. The vulnerability enables unauthorized access to sensitive...
CVE-2025-2271 IDOR in Issuetrak NewAuditID parameter via Inv_PopTrakXShow.asp
A vulnerability exists in Issuetrak v17.2.2 and prior that allows a low-privileged user to access audit results of other users by exploiting an Insecure Direct Object Reference IDOR vulnerability in the Issuetrak audit component. The vulnerability enables unauthorized access to sensitive...
CVE-2025-2271
Issuetrak v17.2.2 and earlier contain an Insecure Direct Object Reference (IDOR) in the audit component, enabling a low-privileged user to access audit results of other users and exposing sensitive information (user details, network/hardware info, installed programs, processes, drives, printers)....
Linux Distros Unpatched Vulnerability : CVE-2016-2271
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service guest crash via vectors related to a...
SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2024:2271-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:2271-1 advisory. - CVE-2024-4741: Fixed a use-after-free with SSLfreebuffers. bsc1225551 Tenable has extracted the preceding description block directly from the SUSE...
CVE-2024-2271 keerti1924 Online-Book-Store-Website HTTP POST Request shop.php sql injection
A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...
CVE-2024-2271
The CVE-2024-2271 entry affects keerti1924 Online-Book-Store-Website 1.0. A vulnerability in the HTTP POST Request Handler affects the /shop.php file, where the product_name parameter is susceptible to SQL injection. The issue can be exploited remotely, and public disclosures of the exploit exist...
CVE-2024-2271
creationtimestamp| type| source ---|---|--- 2024-03-07 16:12:03+00:00| seen| https://t.me/ctinow/202524 2024-03-08 01:22:00+00:00| seen| https://t.me/ctinow/202936 2024-03-08 01:27:12+00:00| seen| https://t.me/ctinow/202941...
CVE-2019-2271
creationtimestamp| type| source ---|---|--- 2024-01-08 17:46:42+00:00| seen| https://t.me/ctinow/164527...
Amazon Linux 2 : curl (ALAS-2023-2271)
The version of curl installed on the remote host is prior to 8.3.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2271 advisory. HTTP headers eat all memory NOTE: https://www.openwall.com/lists/oss-security/2023/09/13/1NOTE:...