Lucene search
K

956 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 3:20 a.m.5 views

CVE-2011-0502

Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service crash and possibly have other unspecified impact via a long line in a MIDI .mid file...

9.3CVSS7.2AI score0.02171EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2025/05/21 12:0 a.m.4 views

Apple Safari Scrollbar Animation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS6.7AI score0.0126EPSS
Exploits0References1
OSV
OSV
added 2025/05/06 10:17 a.m.1 views

SUSE-SU-2025:20217-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: Update to version 2.42.12: + Fix a build failure, + Fix occasional build failures, + ani: Reject files with multiple INA or IART chunks, + ani: Reject files with multiple anih chunks CVE-2022-48622 bsc1219276, + ani: validate chunk size, +...

7.8CVSS5.8AI score0.00071EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/04/22 12:0 a.m.9 views

WordPress plugin Greenshift–animation and page builder blocks 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS8.1AI score0.01136EPSS
Exploits1References5
OSV
OSV
added 2025/04/03 2:15 p.m.1 views

DEBIAN-CVE-2025-3158

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation...

7.8CVSS5.3AI score0.00059EPSS
Exploits1References1
OSV
OSV
added 2025/04/03 2:15 p.m.1 views

PYSEC-2025-169

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation...

7.8CVSS5.6AI score0.00059EPSS
Exploits1References5
PyPA
PyPA
added 2025/04/03 2:15 p.m.5 views

PYSEC-2025-169

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation...

7.8CVSS5.8AI score0.00059EPSS
Exploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/03/27 11:15 a.m.2 views

CVE-2025-30873

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored XSS.This issue affects Greenshift: from n/a through = 11.0.2...

6.5CVSS7.2AI score0.00782EPSS
Exploits0References3
Packet Storm News
Packet Storm News
added 2025/03/13 12:0 a.m.6 views

WordPress Elementor Pro Animation Addon 1.6 Missing Authorization

The Animation Addons for Elementor Pro plugin versions 1.6 and below on WordPress suffers from a missing capability check allowing for arbitrary plugin installation...

8.8CVSS6.8AI score0.11097EPSS
Exploits2
OSV
OSV
added 2025/03/04 2:15 p.m.0 views

CVE-2025-1939

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability affects Firefox 136...

3.9CVSS5.8AI score0.00178EPSS
Exploits0References3
NVD
NVD
added 2025/03/04 2:15 p.m.5 views

CVE-2025-1939

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136...

3.9CVSS0.00178EPSS
Exploits0References3
CVE
CVE
added 2025/03/04 1:31 p.m.76 views

CVE-2025-1939

CVE-2025-1939 is an Android/Firefox-related issue where the Custom Tabs transition animation could be leveraged to mislead users into granting sensitive permissions by obscuring what they click. The vulnerability explicitly affects Mozilla Firefox versions older than 136.0. Impact concerns includ...

3.9CVSS7.2AI score0.00178EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/03/04 8:51 a.m.5 views

MAL-2025-2101 Malicious code in com.unity.2d.animation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc9471b1667f7a99781cd6eb6b2981af2cb2d997202877c74068e9c501e52019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
CNNVD
CNNVD
added 2025/03/04 12:0 a.m.5 views

WordPress plugin Animation Addons for Elementor Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

8.8CVSS8.6AI score0.11097EPSS
Exploits2References3
Patchstack
Patchstack
added 2025/03/03 11:29 p.m.9 views

WordPress Animation Addons for Elementor Pro plugin <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation/Activation vulnerability discovered by Tonn in WordPress Plugin Animation Addons for Elementor Pro versions = 1.6...

8.8CVSS7AI score0.11097EPSS
Exploits2References1Affected Software1
vulnersOsv
vulnersOsv
added 2025/02/14 5:31 p.m.2 views

fyrox-animation (=0.2.0), fyrox-graph (=0.1.0) +2 more potentially affected by unknown CVE via fyrox-core (=0.28.1)

fyrox-core CARGO version =0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on fyrox-core and may be impacted: - fyrox-animation =0.2.0 - fyrox-graph =0.1.0 - fyrox-resource =0.12.0 - fyrox-sound =0.35.0 Source cves: unknown CVE Source advisory:...

5.8AI score
Exploits0
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.3 views

Astra Linux – Vulnerability in Firefox, Thunderbird

An attacker was able to execute code in the content process by exploiting a use-after-free in Animation timelines. There have been reports of this vulnerability being exploited in real-world scenarios. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1,...

9.8CVSS8AI score0.30808EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:0 a.m.2 views

The vulnerability of the Views module in Drupal’s SVG animation CMS system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Views module in the Drupal SVG Animation CMS system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.0023EPSS
Exploits0References2Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 4:41 p.m.0 views

Malicious code in @douinfe/semi-animation-styled (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
Patchstack
Patchstack
added 2025/01/31 10:51 p.m.3 views

WordPress AnimateGL Animations for WordPress – Elementor & Gutenberg Blocks Animations plugin <= 1.4.23 - Missing Authorization to Unauthenticated Settings Update vulnerability

Missing Authorization to Unauthenticated Settings Update vulnerability discovered by Lucio Sá in WordPress Plugin AnimateGL - Advanced Animation Plugin for WordPress versions = 1.4.23...

5.3CVSS7AI score0.00359EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder