Lucene search
+L

2660 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/09/24 12:0 a.m.8 views

GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ILBM files. Th...

7.8CVSS7.2AI score0.02814EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/09/24 12:0 a.m.10 views

GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WBMP files. Th...

7.8CVSS7.4AI score0.0038EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/09/24 12:0 a.m.8 views

GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FF files. The...

7.8CVSS7.4AI score0.0038EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/09/24 12:0 a.m.9 views

GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM files. The...

7.8CVSS7.2AI score0.00658EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/12 3:43 p.m.11 views

CLSA-2025-1757691801 gimp: Fix of CVE-2023-44444

CVE-2023-44444: fix off-by-one error in PSP file parsing to prevent remote code execution ZDI-CAN-22097...

7.8CVSS7.5AI score0.56404EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/12 7:46 a.m.11 views

CLSA-2025-1757663183 gimp: Fix of CVE-2023-44441

CVE-2023-44441: fix heap-based buffer overflow vulnerability in DDS file parsing...

7.8CVSS7.3AI score0.27307EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2025/09/08 12:0 a.m.3 views

openSUSE Security Advisory (SUSE-SU-2025:03075-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.3AI score0.12755EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/09/05 12:0 a.m.2 views

SUSE SLED15: gimp / gimp-devel / gimp-lang / gimp-plugin-aa / libgimp-2_0-0 / etc (SUSE-SU-2025:03075-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03075-1 advisory. - CVE-2025-2760: lack of proper validation of user-supplied data in DDS parser can lead to integer...

7.8CVSS7.9AI score0.12755EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 2025/09/04 10:48 a.m.5 views

Security update for gimp

This update for gimp fixes the following issues: CVE-2025-2760: lack of proper validation of user-supplied data in DDS parser can lead to integer overflow and remote code execution bsc1241690. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

7.1CVSS8.6AI score0.12755EPSS
SaveExploits0References4
OSV
OSV
added 2025/09/04 10:48 a.m.4 views

SUSE-SU-2025:03075-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2025-2760: lack of proper validation of user-supplied data in DDS parser can lead to integer overflow and remote code execution bsc1241690...

7.8CVSS6.4AI score0.12755EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.6 views

PT-2025-44348

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this, as the target must visit a malicious page or open a...

7.8CVSS6.8AI score0.12755EPSS
SaveExploits1References73
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-2760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

7.8CVSS8.3AI score0.12755EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/08/26 7:36 a.m.4 views

Moderate: Red Hat Security Advisory: gdk-pixbuf2 security update

An update for gdk-pixbuf2 is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

7.5CVSS6.8AI score0.0106EPSS
SaveExploits0References2
OSV
OSV
added 2025/08/21 12:0 a.m.5 views

OPENSUSE-SU-2025:15476-1 gimp-3.0.4-2.1 on GA media

These are all security issues fixed in the gimp-3.0.4-2.1 package on the GA media of openSUSE Tumbleweed...

7.8CVSS5.8AI score0.12755EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-6035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP Despeckle plug-in. The issue occurs due to unchecked multiplication of image...

7.8CVSS7.5AI score0.00476EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-48798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be...

7.3CVSS6.9AI score0.00175EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-48797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP...

7.3CVSS7.3AI score0.00199EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-48796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP. The GIMP aniloadimage function is vulnerable to a stack-based overflow. If a user opens.ANI files, GIMP may be used to store more...

7.3CVSS7.7AI score0.00167EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in gimp (npm)

The package gimp was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-21416 Malicious code in gimp (npm)

The package gimp was found to contain malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder