CVE-2025-46536

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RichardHarrison Carousel-of-post-images carousel-of-post-images allows DOM-Based XSS.This issue affects Carousel-of-post-images: from n/a through = 1.07...

CVE-2025-46536 WordPress Carousel-of-post-images plugin <= 1.07 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RichardHarrison Carousel-of-post-images carousel-of-post-images allows DOM-Based XSS.This issue affects Carousel-of-post-images: from n/a through = 1.07...

CVE-2025-46536 WordPress Carousel-of-post-images plugin <= 1.07 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RichardHarrison Carousel-of-post-images carousel-of-post-images allows DOM-Based XSS.This issue affects Carousel-of-post-images: from n/a through = 1.07...

CVE-2025-46536

CVE-2025-46536 affects the WordPress plugin Carousel-of-post-images up to version 1.07, caused by improper input neutralization during web page generation, enabling DOM-based XSS. Public details in initial and connected sources confirm the affected software and XSS nature; no patched version is c...

PT-2025-17837 · Richardharrison · Carousel-Of-Post-Images

Name of the Vulnerable Software and Affected Versions: RichardHarrison Carousel-of-post-images versions 1.07 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means tha...

WordPress plugin Carousel-of-post-images 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2025-46393

In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packetsize is mishandled related to the rendering of all channels in an arbitrary order...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.10 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.10 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

[SECURITY] Fedora 42 Update: prometheus-podman-exporter-1.16.0-1.fc42

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

libheif 代码问题漏洞

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder from struktur open source. A code issue vulnerability exists in libheif versions prior to 1.19.6, which stems from a null pointer dereference in the ImageItemGrid::getdecoder function in image-items/grid.cc, as a grid image...

CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...

PT-2025-17423 · Libheif +1 · Libheif +1

Name of the Vulnerable Software and Affected Versions: libheif versions prior to 1.19.6 Description: The issue is caused by a NULL pointer dereference in ImageItem Grid::get decoder in image-items/grid.cc, which occurs when a grid image references a nonexistent image item. Recommendations: For...

Denial Of Service (DoS)

github.com/bep/imagemeta is vulnerable to Denial Of Service DoS. The vulnerability is due to missing upper bounds on memory allocation when parsing metadata in PNG and WebP images, allowing an attacker to craft specially designed images with excessively large metadata...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.12.3 container image updates

Red Hat Advanced Cluster Management for Kubernetes 2.12.3 General Availability release, with updates to container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

[SECURITY] Fedora 42 Update: giflib-5.2.2-6.fc42

giflib is a library for reading and writing gif images...

WordPress plugin WooCommerce Products without featured images 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

April 16, 2025—KB5059087 (OS Build 26100.3781) Out-of-band

None None...

Important: Red Hat Security Advisory: RHOAI 2.19.0 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 2.19.0 provides these changes:...

Important: Red Hat Security Advisory: Red Hat multicluster global hub 1.3.3 bug fixes and container update

Red Hat multicluster global hub 1.3.3 general availability release, with updates to container images and bug fixes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...