CVE-2026-3147 vulnerabilities

Vulnerabilities for packages: libvips...

Linux Distros Unpatched Vulnerability : CVE-2026-3147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in libvips up to 8.18.0. This affects the function vipsforeignloadcsvbuild of the file libvips/foreign/csvload.c. The manipulation...

CVE-2026-3147

A flaw was found in libvips. A local attacker could exploit a heap-based buffer overflow vulnerability in the vipsforeignloadcsvbuild function. This vulnerability, triggered by manipulating CSV file loading, could lead to unauthorized information disclosure, denial of service DoS, or limited data...

CVE-2026-3147

creationtimestamp| type| source ---|---|--- 2026-02-25 05:57:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnyqorbha2u...

UBUNTU-CVE-2026-3147

A vulnerability was found in libvips up to 8.18.0. This affects the function vipsforeignloadcsvbuild of the file libvips/foreign/csvload.c. The manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been made public and could be used. The patch i...

CVE-2009-3147

Cross-site scripting XSS vulnerability in showproduct.php in ReviewPost Pro vB3 allows remote attackers to inject arbitrary web script or HTML via the date parameter...

CVE-2025-3147

creationtimestamp| type| source ---|---|--- 2025-04-03 07:34:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10188 2025-04-03 09:30:50+00:00| published-proof-of-concept| Telegram/LIdFABEsmgRONqCXACjX-IG53KiWfy5qVvCpf73l1KRWUI...

CVE-2025-3147

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-subadmin.php. The manipulation of the argument sadminusername leads to sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2025-3147 PHPGurukul Boat Booking System add-subadmin.php sql injection

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-subadmin.php. The manipulation of the argument sadminusername leads to sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2023-3147

creationtimestamp| type| source ---|---|--- 2025-01-06 21:38:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/252...

CVE-2023-3147

A vulnerability has been found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin\categories\viewcategory.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. Th...

CVE-2023-3147

CVE-2023-3147 affects SourceCodester Online Discussion Forum Site 1.0, involving the vulnerable file admin/categories/view_category.php. The issue is a SQL injection via the id parameter, exploitable remotely and with public exploit disclosure. No patch/version remediation is specified in the pro...

CVE-2023-3147 SourceCodester Online Discussion Forum Site view_category.php sql injection

A vulnerability has been found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin\categories\viewcategory.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. Th...

RHEL 9 : apr-util (RHSA-2023:3147)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3147 advisory. The Apache Portable Runtime APR is a portability library used by the Apache HTTP Server and other projects. apr-util is a library which provides...

Oracle Linux 9 : apr-util (ELSA-2023-3147)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3147 advisory. 1.6.1-20.1 - Resolves: 2196575 - CVE-2022-25147 apr-util: out-of-bounds writes in the aprbase64 Tenable has extracted the preceding description block directly...

radiocaxias.com.br Cross Site Scripting vulnerability OBB-2975582

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3147

creationtimestamp| type| source ---|---|--- 2022-09-09 18:32:36+00:00| seen| https://t.me/cibsecurity/49535...

CVE-2022-3147

Mattermost 7.0.x and earlier suffer a Denial of Service due to inadequate control of in-memory sizes for concurrently uploaded JPEG images. The issue allows authenticated users to exhaust server resources on certain configurations. Reported across multiple sources (NVD, Red Hat, OSV, CNNVD, PT Se...

CVE-2022-3147 Server-side Denial of Service while processing a specifically crafted JPEG file

Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service...

CVE-2022-3147 Server-side Denial of Service while processing a specifically crafted JPEG file

Mattermost version 7.0.x and earlier fails to sufficiently limit the in-memory sizes of concurrently uploaded JPEG images, which allows authenticated users to cause resource exhaustion on specific system configurations, resulting in server-side Denial of Service...