26 matches found
CVE-2015-9530
The CVE targets the WordPress Easy Digital Downloads (EDD) Upload File extension. Root cause: misused add_query_arg leading to cross‑site scripting (XSS). Affected versions (per sources): EDD 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1.11; 2.2.x before 2.2.9; 2.3...
CVE-2018-9530
CVE-2018-9530 affects Android 9, where in file ixheaacd_aac_tns.c (function ixheaacd_tns_ar_filter_dec) there is a missing bounds check causing a possible out-of-bounds write. This could enable remote code execution with no extra privileges and requires user interaction to exploit. The Android se...
CVE-2017-9530
IrfanView version 4.44 32bit might allow attackers to cause a denial of service or execute arbitrary code via a crafted file, related to "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at...
CVE-2017-9530
IrfanView 4.44 (32‑bit) is affected by CVE-2017-9530, with a vulnerability described as a buffer/overflow leading to potential DoS or arbitrary code execution when processing a crafted file, related to Data from Faulting Address used in a call to LdrpResCompareResourceNames via ntdll. The issue i...
