Lucene search
+L

1186 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 3:28 a.m.•14 views

CVE-2011-2620

Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service application crash via vectors involving SVG animation...

5CVSS6.7AI score0.02234EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:20 a.m.•13 views

CVE-2011-0502

Music Animation Machine MIDI Player 2006aug19 Release 035 and possibly other versions allows user-assisted remote attackers to cause a denial of service crash and possibly have other unspecified impact via a long line in a MIDI .mid file...

9.3CVSS7.2AI score0.05704EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
•added 2025/05/21 12:00 a.m.•18 views

Apple Safari Scrollbar Animation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

8.8CVSS6.7AI score0.00958EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/06 10:17 a.m.•10 views

SUSE-SU-2025:20217-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: Update to version 2.42.12: + Fix a build failure, + Fix occasional build failures, + ani: Reject files with multiple INA or IART chunks, + ani: Reject files with multiple anih chunks CVE-2022-48622 bsc1219276, + ani: validate chunk size, +...

7.8CVSS5.8AI score0.00415EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/04/22 12:00 a.m.•28 views

WordPress plugin Greenshift–animation and page builder blocks 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.8CVSS8.1AI score0.02522EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/22 12:00 a.m.•2 views

CVE-2025-3616: Unrestricted Upload of File with Dangerous Type

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspbmakeproxyapirequest function in versions 11.4 to 11.4.5. This makes it possible for authenticated attackers, with Subscriber-level access...

8.8CVSS8.3AI score0.02522EPSS
SaveExploits1References1
PyPA
PyPA
•added 2025/04/03 2:15 p.m.•21 views

PYSEC-2025-169

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation...

7.8CVSS5.8AI score0.00328EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2025/04/03 2:15 p.m.•16 views

PYSEC-2025-169

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation...

7.8CVSS5.6AI score0.00328EPSS
SaveExploits1References5
OSV
OSV
•added 2025/04/03 2:15 p.m.•7 views

DEBIAN-CVE-2025-3158

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation...

7.8CVSS5.3AI score0.00328EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2025/03/27 11:15 a.m.•11 views

CVE-2025-30873

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored XSS.This issue affects Greenshift: from n/a through = 11.0.2...

6.5CVSS7.2AI score0.00367EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•3 views

CVE-2025-30873: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored XSS.This issue affects Greenshift: from n/a through = 11.0.2...

6.5CVSS5.8AI score0.00367EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/03/13 12:00 a.m.•20 views

WordPress Elementor Pro Animation Addon 1.6 Missing Authorization

The Animation Addons for Elementor Pro plugin versions 1.6 and below on WordPress suffers from a missing capability check allowing for arbitrary plugin installation...

8.8CVSS6.8AI score0.0105EPSS
SaveExploits2
NVD
NVD
•added 2025/03/04 2:15 p.m.•17 views

CVE-2025-1939

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136...

3.9CVSS0.00187EPSS
SaveExploits0References3
OSV
OSV
•added 2025/03/04 2:15 p.m.•13 views

CVE-2025-1939

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability affects Firefox 136...

3.9CVSS5.8AI score0.00187EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/04 1:31 p.m.•126 views

CVE-2025-1939

The Firefox web browser (versions prior to 136 ) is vulnerable to a tapjacking flaw within the Custom Tabs feature. The issue stems from transition animations that could be manipulated to hide the actual UI elements being clicked, potentially tricking users into granting sensitive permissions . T...

3.9CVSS7.1AI score0.00187EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2025/03/04 8:51 a.m.•14 views

MAL-2025-2101 Malicious code in com.unity.2d.animation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc9471b1667f7a99781cd6eb6b2981af2cb2d997202877c74068e9c501e52019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/04 12:00 a.m.•4 views

CVE-2025-1639: Missing Authorization

The Animation Addons for Elementor Pro plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the installelementorpluginhandler function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, wi...

8.8CVSS7.7AI score0.0105EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/03/04 12:00 a.m.•20 views

WordPress plugin Animation Addons for Elementor Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

8.8CVSS8.6AI score0.0105EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/04 12:00 a.m.•3 views

CVE-2025-1939: Exposure of Private Personal Information to an Unauthorized Actor

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136...

3.9CVSS7.1AI score0.00187EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/03/03 11:29 p.m.•24 views

WordPress Animation Addons for Elementor Pro plugin <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation/Activation vulnerability discovered by Tonn in WordPress Plugin Animation Addons for Elementor Pro versions = 1.6...

8.8CVSS7AI score0.0105EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder