Lucene search
+L

11351 matches found

NVD
NVD
added 2025/01/02 3:15 p.m.10 views

CVE-2022-41995

Missing Authorization vulnerability in Galleryape Gallery Images Ape allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gallery Images Ape: from n/a through 2.2.8...

4.3CVSS0.00321EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/02 2:51 p.m.8 views

CVE-2022-41995 WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Broken Access Control

Missing Authorization vulnerability in Galleryape Gallery Images Ape allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gallery Images Ape: from n/a through 2.2.8...

4.3CVSS4.7AI score0.00321EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:00 a.m.7 views

PT-2025-1366 · Unknown · Gallery Images Ape

Name of the Vulnerable Software and Affected Versions: Gallery Images Ape versions 2.2.8 and earlier Description: The issue is related to a Missing Authorization vulnerability in Galleryape Gallery Images Ape, which allows exploiting incorrectly configured access control security levels...

4.3CVSS6.9AI score0.00321EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/01/02 12:00 a.m.8 views

WordPress plugin Gallery Images Ape 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS6.6AI score0.00321EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/30 4:51 p.m.167 views

CVE-2024-12754

CVE-2024-12754 affects AnyDesk. The flaw is in how background images are handled; by creating a junction, a local attacker can abuse the service to read arbitrary files and disclose stored credentials. Affected behavior requires low-privilege code execution on the target and results in informatio...

5.5CVSS5.2AI score0.01179EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/12/23 5:13 p.m.11 views

CVE-2024-53276 GHSL-2024-092: Open CORS policy in home-gallery

Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, an open CORS policy in app.js may allow an attacker to view the images of home-gallery when it is using the default settings. The following express middleware allows any website ...

6.3CVSS6.3AI score
SaveExploits0References4
Fedora
Fedora
added 2024/12/23 1:32 a.m.18 views

[SECURITY] Fedora 41 Update: prometheus-podman-exporter-1.14.0-1.fc41

Prometheus exporter for podman environments exposing containers, pods, images, volumes and networks information...

9.1CVSS9.6AI score0.03153EPSS
SaveExploits2
CNNVD
CNNVD
added 2024/12/23 12:00 a.m.10 views

HomeGallery 安全漏洞

HomeGallery is a self-hosted open source web gallery from HomeGallery Open Source. For browsing with tagged, mobile-friendly, and AI-driven image discovery. A security vulnerability exists in HomeGallery version 1.15.0 and earlier versions. An attacker could exploit this vulnerability to view...

6.3CVSS6.4AI score0.00541EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/17 12:15 p.m.28 views

CVE-2024-12601

The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. This is due to unlimited height and width parameters for CAPTCHA images. This makes it possible for unauthenticated attackers to send multiple requests with large value...

5.3CVSS0.00555EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 2024/12/17 9:33 a.m.5 views

Security update for installation-images

This update updates installation-images and tftpboot images to contain the latest shim for secure boot. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

7.4AI score
SaveExploits0References2
OSV
OSV
added 2024/12/17 9:33 a.m.3 views

SUSE-SU-2024:4351-1 Security update for installation-images

This update updates installation-images and tftpboot images to contain the latest shim for secure boot...

7.3AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
added 2024/12/17 9:05 a.m.3 views

Security update for installation-images

This update updates installation-images and tftpboot images to contain the latest shim for secure boot. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

7.4AI score
SaveExploits0References2
OSV
OSV
added 2024/12/17 9:05 a.m.2 views

SUSE-SU-2024:4350-1 Security update for installation-images

This update updates installation-images and tftpboot images to contain the latest shim for secure boot...

7.3AI score
SaveExploits0References2
SUSE Linux
SUSE Linux
added 2024/12/17 8:36 a.m.4 views

Security update for installation-images

This update updates installation-images and tftpboot images to contain the latest shim for secure boot. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

7.5AI score
SaveExploits0References2
OSV
OSV
added 2024/12/17 8:36 a.m.2 views

SUSE-SU-2024:4347-1 Security update for installation-images

This update updates installation-images and tftpboot images to contain the latest shim for secure boot...

7.3AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/17 12:00 a.m.17 views

PT-2024-17672 · WordPress · Calculated Fields Form

Name of the Vulnerable Software and Affected Versions: Calculated Fields Form plugin for WordPress versions up to, and including, 5.2.63 Description: The issue is related to unlimited height and width parameters for CAPTCHA images, allowing unauthenticated attackers to send multiple requests with...

5.3CVSS9.4AI score0.00555EPSS
SaveExploits0References9
Redos
Redos
added 2024/12/12 12:00 a.m.250 views

ROS-20241212-03

A vulnerability in the Moby container platform exists due to an error deleting a NULL pointer in the daemon/images/imagehistory.go. Exploitation of the vulnerability could allow an attacker to cause the application to crash. of the application...

6.5CVSS6.7AI score0.00819EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2024/12/11 1:09 a.m.23 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.8 security update

Red Hat OpenShift Container Platform release 4.17.8 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

8.2CVSS6.7AI score0.66582EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
added 2024/12/11 12:00 a.m.13 views

The vulnerability of the Attended SysUpgrade function of the sysupgrade.openwrt.org service allows a malicious actor to create a specially crafted malware image signed with a legitimate key.

The vulnerability of the Attended SysUpgrade function of the sysupgrade.openwrt.org service in the embedded operating system OpenWrt is related to the use of a reversible one-way hash function. Exploiting this vulnerability allows a malicious actor to remotely create a specially crafted malware...

10CVSS8.1AI score0.01852EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2024/12/09 1:15 p.m.11 views

CVE-2023-47793

Missing Authorization vulnerability in Acme Themes Acme Fix Images acme-fix-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Acme Fix Images: from n/a through = 1.0.0...

4.3CVSS0.00328EPSS
SaveExploits0References1
Rows per page
Query Builder