90 matches found
CVE-2008-5341 vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-17-openj9...
CVE-2026-5341
creationtimestamp| type| source ---|---|--- 2026-05-08 12:49:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mldrd3ilzy2i...
NewStart CGSL MAIN 7.02 : ImageMagick Vulnerability (NS-SA-2025-0088)
The remote NewStart CGSL host, running version MAIN 7.02, has ImageMagick packages installed that are affected by a vulnerability: - A heap use-after-free flaw was found in coders/bmp.c in ImageMagick. CVE-2023-5341 Note that Nessus has not tested for these issues but has instead relied only on t...
WordPress Forminator plugin <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability
Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via id and data-size Parameters vulnerability discovered by Asaf Mozes in WordPress Plugin Forminator versions = 1.44.1...
CVE-2025-5341 Forminator <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id' and 'data-size’ parameters in all versions up to, and including, 1.44.1 due to insufficient input sanitization and output escaping. This makes it...
CVE-2025-5341
CVE-2025-5341 affects the WordPress plugin Forminator Forms – Contact Form, Payment Form & Custom Form Builder. The vulnerability is a Stored Cross‑Site Scripting (XSS) caused by insufficient input sanitization and output escaping in the plugin’s handling of the id and data-size parameters, explo...
Linux Distros Unpatched Vulnerability : CVE-2017-5341
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otvprint. CVE-2017-5341 Note that Nessus relies on the presence of the package as...
Schneider Electric多款产品 资源管理错误漏洞
The Schneider Electric PowerLogic PM5320, among others, is a power and energy meter from Schneider Electric France. A resource management error vulnerability exists in various Schneider Electric products that stems from the presence of uncontrolled resource consumption, which could result in an...
USN-6621-1: ImageMagick vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that ImageMagick incorrectly handled certain values when processing BMP files. An attacker could exploit this to cause a denial of service. Update Instructions: Ru...
Photon OS 4.0: Imagemagick PHSA-2023-4.0-0524
An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0524. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2024-5341 The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Title Widget
The The Plus Addons for Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'size' attribute of the Heading Title widget in all versions up to, and including, 5.5.4 due to insufficient input sanitization and output escaping on user supplied attributes...
WordPress The Plus Addons for Elementor Pro Plugin <= 5.5.4 is vulnerable to Cross Site Scripting (XSS)
Software The Plus Addons for Elementor Pro Type Plugin Vulnerable versions = 5.5.4 Fixed in 5.5.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5341 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 75a1fec5bca1 Credits wesley...
CVE-2024-2370
Rejected reason: DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2018-5341. Reason: This CVE Record is a duplicate of CVE-2018-5341. Notes: All CVE users should reference CVE-2018-5341 instead of this record...
CLSA-2024-1709839850 Fix CVE(s): CVE-2023-5341
SECURITY UPDATE: Heap use-after-free flaw in BMP coder - debian/patches/CVE-2023-5341.patch: Check BMP file size to fix ImproperImageHeader issue caused by a provided poc - CVE-2023-5341...
CLSA-2024-1709839661 Fix CVE(s): CVE-2023-5341
SECURITY UPDATE: Heap use-after-free flaw in coders/bmp.c in ImageMagick - debian/patches/CVE-2023-5341.patch: Check BMP file size to fix ImproperImageHeader caused by poc provided by Hardik Shah of Vehere Dawn Treaders team - CVE-2023-5341...
openSUSE: Security Advisory for ImageMagick (SUSE-SU-2023:4008-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3737-1] imagemagick security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3737-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès February 22, 2024 https://wiki.debian.org/LTS -...
Fedora 38 : ImageMagick (2024-d23b0f5e76)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d23b0f5e76 advisory. fix PKGCONFIGLIBDIR ---- Update to 7.1.1.26 2239345 Tenable has extracted the preceding description block directly from the Fedora security advisory...
SUSE: Security Advisory (SUSE-SU-2023:4634-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
