549 matches found
CVE-2025-12019 Featured Image <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...
CVE-2025-12019: Improper Neutralization of Input During Web Page Generation
The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions an...
The vulnerability of the jpegBase::readMetadata() function in the library and the command-line utility for managing image metadata from Exiv2 allows a attacker to cause a service failure.
The vulnerability of the jpegBase::readMetadata function in the Exiv2 library and command-line utilities for managing image metadata involves inefficient algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
ROS-20251028-07
A vulnerability in the library commands for Exiv2 media file metadata management is related to the following quadratic algorithm in the ICC profile analysis code in jpegBase::readMetadata can lead to a prolonged Exiv2. Exploitation of the vulnerability could allow an attacker to cause a denial of...
📄 Packet Storm EXIF Data Disclosure
A bad code push allowed EXIF data to remain in some photos on Packet Storm. Our analysis shows only 0.004% of uploaded pictures were affected and they have all been stripped to ensure no further exposure. Fortunately, the affected pictures only include items related to an admin of the site and th...
EUVD-2015-5885
Malware in sbrugna...
EUVD-2021-24176
Malware in sbrugna...
EUVD-2021-24178
Malware in sbrugna...
EUVD-2021-16101
Malware in sbrugna...
EUVD-2015-5881
Malware in sbrugna...
EUVD-2021-16080
Malware in sbrugna...
EUVD-2025-26206
Malicious code in bioql PyPI...
EUVD-2025-4463
Malicious code in bioql PyPI...
EUVD-2023-0077
Malicious code in bioql PyPI...
EUVD-2025-10405
Malicious code in bioql PyPI...
EUVD-2024-0057
Malicious code in bioql PyPI...
EUVD-2023-30274
Malicious code in bioql PyPI...
RLSA-2025:7457 Moderate: exiv2 security update
Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access Ifd, and support for various image formats. Security Fixes: exiv2: Use After Free in Exiv...
exiv2 security update
An update is available for exiv2. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Exiv2 is a C++ library to access image metadata, supporting read and write...
