20751 matches found
CVE-2024-9656
The Mynx Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.27.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...
CVE-2024-9111
The Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.36 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...
CVE-2024-28050
Improper access control in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-43704
Software installed and run as a non-privileged user may conduct improper GPU system calls to gain access to the graphics buffers of a parent process...
CVE-2024-34170
Improper buffer restrictions in some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-38387
Uncontrolled search path in the IntelR Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-23919
Improper buffer restrictions in some IntelR Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-9376
The Kata Plus – Addons for Elementor – Widgets, Extensions and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2023-33108
Memory corruption in Graphics Driver when destroying a context with KGSLGPUAUXCOMMANDTIMELINE objects queued...
CVE-2023-43751
Uncontrolled search path in IntelR Graphics Command Center Service bundled in some IntelR Graphics Windows DCH driver software before versions 31.0.101.3790/31.0.101.2114 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-33107
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call...
CVE-2023-33071
Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities...
CVE-2023-28404
Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2023-28401
Out-of-bounds write in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-23298
The Toybox.Graphics.BufferedBitmap.initialize API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result in integer overflows when allocating the underlying bitmap buffer. A malicious application could call the API method with specially crafted parameters...
CVE-2023-27489
Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS accepts SVG files uploaded by users which could potentially contain JavaScript code. If SVG images are viewed directly, i.e. not rendered in an HTML page, this JavaScript code could execute. This...
CVE-2023-21670
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode...
CVE-2023-21665
Memory corruption in Graphics while importing a file...