gimp security update

2:2.8.22-1.0.9 - Fixes CVE-2026-4150, CVE-2026-4153, CVE-2026-4154, and CVE-2026-4887 Orabug: 39564202 2:2.8.22-1.0.7 - Fixes CVE-2025-14422 Orabug: 38904303 2:2.22-1.0.5 - Fixes CVE-2025-10922 and CVE-2025-10934 Orabug: 38739185 2:2.8.22-1.0.3 - Fixes CVE-2025-5473 GIMP ICO File Parsing Integer...

MiracleLinux 9 : gimp-3.0.4-4.el9_8.4 (AXSA:2026-1226:06)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1226:06 advisory. gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image CVE-2026-4887 gimp: GIMP: Remote Code Execution via XPM File...

RHEL 9 : gimp (RHSA-2026:19362)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19362 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

gimp security update

2:3.0.4-1.5 - fix CVE-2026-4150 - fix CVE-2026-4151 - fix CVE-2026-4152 - fix CVE-2026-4153 - fix CVE-2026-4154 - fix CVE-2026-4887...

RHEL 9 : gimp (RHSA-2026:16484)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:16484 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

CVE-2026-4151

creationtimestamp| type| source ---|---|--- 2026-04-11 03:21:08+00:00| published-proof-of-concept| Telegram/jQJESTxAnDJkcV3IOr4zcsYk9e3AhwwItG0ad6oUuWk-UR8 2026-04-11 06:10:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj76id7ajb24 2026-04-11 06:11:29+00:00| seen|...

SUSE CVE-2026-4151

GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2017-4151

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

CVE-2025-4151

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/pass-bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiated...

CVE-2025-4151

creationtimestamp| type| source ---|---|--- 2025-05-01 06:13:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14242 2025-05-01 08:00:51+00:00| seen| Telegram/pSAMzIIXAXD9miiKJdzecIygaZpJnJ751sfub1VW0I3YM4U 2025-05-01 09:55:34+00:00| seen|...

CVE-2025-4151 PHPGurukul Curfew e-Pass Management System pass-bwdates-reports-details.php sql injection

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/pass-bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiated...

CVE-2025-4151

CVE-2025-4151 affects PHPGurukul Curfew e-Pass Management System 1.0. The vulnerability is in the file "/admin/pass-bwdates-reports-details.php" where the manipulation of the fromdate parameter leads to an SQL injection . The issue can be exploited remotely and, per multiple sources, the exploit ...

Linux Distros Unpatched Vulnerability : CVE-2013-4151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The virtioload function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image, which triggers...

Linux Distros Unpatched Vulnerability : CVE-2012-4151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service...

CVE-2024-4151

An Improper Access Control vulnerability exists in lunary-ai/lunary version 1.2.2, where users can view and update any prompts in any projects due to insufficient access control checks in the handling of PATCH and GET requests for template versions. This vulnerability allows unauthorized users to...

CVE-2024-4151 Improper Access Control in lunary-ai/lunary

An Improper Access Control vulnerability exists in lunary-ai/lunary version 1.2.2, where users can view and update any prompts in any projects due to insufficient access control checks in the handling of PATCH and GET requests for template versions. This vulnerability allows unauthorized users to...

CVE-2023-4151 Store Locator WordPress < 1.4.13 - Reflected XSS

The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-4151

CVE-2023-4151 affects the Store Locator WordPress plugin for versions before 1.4.13. The issue is that an invalid nonce is not properly sanitised/escaped before being echoed back in an AJAX response, causing a reflected Cross-Site Scripting vulnerability. Impact is described as enabling this XSS ...

CVE-2023-4151 Store Locator WordPress < 1.4.13 - Reflected XSS

The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Oracle Linux 7 : kernel (ELSA-2023-4151)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4151 advisory. - debug: lock down kgdb Orabug: 34270798 CVE-2022-21499 - netfilter: nftables: deactivate anonymous set from preparation phase Florian Westphal 2196159...