CVE-2025-49709

Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4...

CVE-2025-49709: Out-of-bounds Write

Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A buffer error vulnerability exists in Mozilla Firefox versions prior to 139.0.4, which stems from a canvas operation that may result in memory corruption...

MAL-2025-4641 Malicious code in canvas-helper-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a55b1c2c0c95b2f39df71c4e6d9dc7b34f680ad6ed6c14449d6bfdb3dfb207 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canvas-helper-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a55b1c2c0c95b2f39df71c4e6d9dc7b34f680ad6ed6c14449d6bfdb3dfb207 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-29762

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through 0.5.8.1...

CVE-2023-43303

An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-27035

An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified impacts via embedded website on the canvas page...

CVE-2021-36539

Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL canvadocsessionurl...

CVE-2020-8215

A buffer overflow is present in canvas version = 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image...

CVE-2020-5775

Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains...

CVE-2017-8298

cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts Add New" action, and during creation of new tags and users...

CVE-2025-31816

Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile App Canvas: from n/a through = 3.8.2...

CVE-2025-31816

Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile App Canvas: from n/a through = 3.8.2...

CVE-2025-31816

Technical details for CVE-2025-31816 are not provided in the supplied documents. Monitor for updates from vendor advisories and trusted feeds.

CVE-2025-31816 WordPress Mobile App Canvas Plugin <= 3.8.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in pietro Mobile App Canvas allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mobile App Canvas: from n/a through 3.8.1...

PT-2025-14198 · Unknown · Pietro Mobile App Canvas

Name of the Vulnerable Software and Affected Versions: pietro Mobile App Canvas versions n/a through 3.8.1 Description: The issue is related to a Missing Authorization vulnerability in the pietro Mobile App Canvas, which allows exploitation of incorrectly configured access control security levels...

CVE-2025-31816: Missing Authorization

Missing Authorization vulnerability in pietro Mobile App Canvas mobile-app allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobile App Canvas: from n/a through = 3.8.2...

WordPress plugin Mobile App Canvas 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-30860

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows DOM-Based XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.2...