PT-2023-6703 · WordPress · Foogallery

Name of the Vulnerable Software and Affected Versions: FooGallery plugin versions = 2.2.35 Description: The issue exists due to insufficient protection of the web page structure in the foogallery image editor modal function of the FooGallery plugin for WordPress. This allows a remote attacker to...

SUSE CVE-2006-3404

Buffer overflow in the xcfloadvector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property...

SUSE CVE-2009-0581

Memory leak in LittleCMS aka lcms or liblcms before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service memory consumption and application crash via a crafted image file...

SUSE CVE-2010-4543

Heap-based buffer overflow in the readchanneldata function in file-psp.c in the Paint Shop Pro PSP plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a PSPCOMPRLE aka RLE compression image file that begins a long run...

SUSE CVE-2012-3236

fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed XTENSION header of a .fit file, as demonstrated using a long string...

SUSE CVE-2012-3403

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."...

SUSE CVE-2017-17789

In GIMP 2.8.22, there is a heap-based buffer overflow in readchanneldata in plug-ins/common/file-psp.c...

SUSE CVE-2022-32990

An issue in gimplayerinvalidateboundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service DoS...

GIMP Denial of Service Vulnerability

GIMP is an open source bitmap image editor from the GIMP team. GNOME GIMP version 2.10.30 contains a denial of service vulnerability, which stems from the processing of crafted XCF files in gimplayerinvalidateboundary triggering an unhandled exception that could be exploited by an attacker to cau...

GHSA-WCJ4-FF9M-5R7G ImpressCMS Path Traversal to Arbitrary File Delete

Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the imagepath parameter in a cancel action...

GHSA-4Q96-9F63-P7JJ Path Traversal in ImpressCMS

ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php imagetemp Directory Traversal...

Directory traversal

ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php imagetemp Directory Traversal...

CVE-2021-26601

ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php imagetemp Directory Traversal...

CVE-2021-26601

ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php imagetemp Directory Traversal...

PT-2022-9763

Name of the Vulnerable Software and Affected Versions ImpressCMS versions prior to 1.4.3 Description The issue allows directory traversal via the image temp parameter in the libraries/image-editor/image-edit.php file. This can potentially lead to unauthorized access to sensitive files on the...

[SECURITY] Fedora 34 Update: digikam-7.3.0-4.fc34

digiKam is an easy to use and powerful digital photo management application, which makes importing, organizing and manipulating digital photos a "snap". An easy to use interface is provided to connect to your digital camera, preview the images and download and/or delete them. digiKam built-in ima...

[SECURITY] Fedora 35 Update: digikam-7.3.0-4.fc35

digiKam is an easy to use and powerful digital photo management application, which makes importing, organizing and manipulating digital photos a "snap". An easy to use interface is provided to connect to your digital camera, preview the images and download and/or delete them. digiKam built-in ima...

Android Apps in Google Play Harvest Facebook Credentials

A set of nine malicious Android apps that steal Facebook credentials were found on Google Play, which racked up a collective 5.9 million installations before Google removed them. According to Dr. Web’s malware analysts, the applications were fully functional, so that victims remained in the dark...

GIMP read_channel_data Buffer Overflow DoS

The vulnerability of the readchanneldata function in the plug-ins/common/file-psp.c file of the GIMP graphic editor, as well as the GNU Image Manipulation Program, is related to the issue of leaving data outside of the memory buffer. Exploiting this vulnerability could allow an attacker to cause...

GIMP read_creator_block Heap Buffer Overflow DoS

The vulnerability of the readcreatorblock function in the GIMP graphic editor’s plug-in/common/file-psp.c file is related to reading data beyond the buffer boundaries of dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures, compromise data integrity, and...