IrfanView Out-of-Bounds Write Vulnerability (CNVD-2024-47220)

IrfanView is an image viewer by the individual developer Irfan Skiljan. It supports image browsing, image editing, image format conversion and more. IrfanView suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code in the context of the current proce...

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from operations that go beyond buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created...

Important: Red Hat Security Advisory: gimp:2.8 security update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Important: gimp security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: dds buffe...

Cross-Site Scripting (XSS)

JFinalcms is vulnerable to Cross-Site Scripting XSS. The vulnerability exists via carousel image editing which allows an attacker to inject and execute arbitrary scripts...

JFinalCMS Cross-Site Scripting Vulnerability (CNVD-2024-0021733)

JFinalCMS is a content management system. JFinalCMS version 5.0.0 cross-site scripting vulnerability, the vulnerability stems from the carousel image editing of user-supplied data lack of effective filtering and escaping, the vulnerability can be exploited by an attacker by injecting a...

GHSA-3HF6-F8CH-5869 Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

CVE-2023-50100

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

CVE-2023-50100

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

Cross site scripting

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

CVE-2023-50100

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

CVE-2023-50100

CVE-2023-50100 affects JFinalcms 5.0.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exposed via the carousel image editing feature, caused by insufficient filtering/escaping of user-supplied data. Impact: an attacker can inject and execute arbitrary scripts in the victim’s browser. Exp...

PT-2023-31472 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: The issue is related to Cross Site Scripting XSS via carousel image editing. This means that an attacker could potentially inject malicious scripts into the website, which would then be executed by the...

JFinal 跨站脚本漏洞

JFinalCMS is a content management system. JFinalCMS version 5.0.0 cross-site scripting vulnerability, the vulnerability stems from the carousel image editing of user-supplied data lack of effective filtering and escaping, the vulnerability can be exploited by an attacker by injecting a...

CVE-2023-50100

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

编号撤回

Acd Systems ACDSee Free is a free version of image viewer from Acd Systems, USA. The product features image management, image editing, image browsing and image manipulation. This CVE number has been withdrawn...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the ability to write code beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user...