6619 matches found
Foxit Studio Photo 缓冲区错误漏洞
Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of NEF files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied dat...
Foxit Studio Photo 缓冲区错误漏洞
Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of ARW files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a failure to properly validate the length of...
Foxit Studio Photo 缓冲区错误漏洞
Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of EPS files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied dat...
WordPress Photo Gallery by 10Web plugin <= 1.5.67 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability found in WordPress Photo Gallery by 10Web plugin versions = 1.5.67. Solution Update the WordPress Photo Gallery by 10Web plugin to the latest available version at least 1.5.68...
Photo Gallery by 10Web < 1.5.68 - Cross-Site Scripting (XSS)
The Photo Gallery by 10Web WordPress plugin, version 1.5.68 and possibly below, was vulnerable to Cross-Site Scripting XSS in the $breadcrumb attribute variable...
Adobe Fixes 7 Critical Flaws, Blocks Flash Player Content
Adobe Systems has patched seven critical vulnerabilities, which impact Windows, macOS and Linux users. The impact of the serious flaws range from arbitrary code execution to sensitive information disclosure. The software company’s regularly scheduled Tuesday security updates impact a slew of its...
photo-collage.net Cross Site Scripting vulnerability OBB-1672629
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| photo-collage.net ---|--- Open Bug Boun...
WordPress Envira Photo Gallery plugin <= 1.8.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Minh Tuan SunCSR in WordPress Envira Photo Gallery plugin versions = 1.8.3.2. Solution Update the WordPress Envira Photo Gallery plugin to the latest available version at least 1.8.3.3...
VulnCheck KEV: CVE-2018-11511
The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'albumid' or 'scope' parameter via a photo-gallery/api/album/treelists/ URI...
QNAP Photo Station XSS Vulnerability (QSA-20-15)
QNAP Photo Station is prone to a cross-site scripting XSS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...
CVE-2020-2491
This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. QTS 4.5.1: Photo Station 6.0.12 and later QTS 4.4.3: Photo Station 6.0.12 and later QTS 4.3.6: Photo...
CVE-2020-2491
This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. QTS 4.5.1: Photo Station 6.0.12 and later QTS 4.4.3: Photo Station 6.0.12 and later QTS 4.3.6: Photo...
Cross site scripting
This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. QTS 4.5.1: Photo Station 6.0.12 and later QTS 4.4.3: Photo Station 6.0.12 and later QTS 4.3.6: Photo...
CVE-2020-2491 Cross-site Scripting Vulnerability in Photo Station
This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. QTS 4.5.1: Photo Station 6.0.12 and later QTS 4.4.3: Photo Station 6.0.12 and later QTS 4.3.6: Photo...
CVE-2020-2491
CVE-2020-2491 is a cross-site scripting (XSS) vulnerability in QNAP Photo Station . The CVE applies to QTS/QuTS installations that include Photo Station and can allow remote attackers to inject malicious code via Photo Station components. The included connected documents confirm affected products...
Cross-Site Scripting Vulnerability in Multiple Qnap Systems Products
Qnap Systems QNAP Systems Photo Station is a photo management and viewing application. QNAP QTS is a data storage device with a SAN-like storage architecture. Systems QUTS Hero and others are products of China Weilian Tong QNAP Systems.QNAP Systems QUTS Hero is a NAS operating system for managing...
CVE-2020-29595
PlugIns\IDEACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build 1705 has a User Mode Write AV starting at IDEACDStd!JPEGTransW+0x00000000000031aa...
Code injection
PlugIns\IDEACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build 1705 has a User Mode Write AV starting at IDEACDStd!JPEGTransW+0x00000000000031aa...
CVE-2020-29595
CVE-2020-29595 affects ACDSee Photo Studio Studio Professional 2021 (v14.0 Build 1705). A vulnerability in the PlugIns\IDE_ACDStd.apl component (JPEGTransW function) allows a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x…; CVSS metrics in the initial data indicate high/critical impact (...