6688 matches found
WordPress Photo Gallery – Image Gallery by Ape plugin <= 2.0.6 - Authenticated Arbitrary plugin deactivation
Authenticated Arbitrary plugin deactivation found by Jerome Bruandet in WordPress Photo Gallery – Image Gallery by Ape plugin versions = 2.0.6. Solution Update the WordPress Photo Gallery – Image Gallery by Ape plugin to the latest available version at least 2.0.7...
Photo Gallery – Image Gallery by Ape <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation
The Photo Gallery – Image Gallery by Ape WordPress plugin was affected by an Authenticated Arbitrary Plugin Deactivation security vulnerability...
Unspecified Vulnerability in Apple iOS and iPadOS Photos Component
Apple iOS is an operating system for mobile devices developed by Apple. A security vulnerability exists in the Photos component of Apple iOS before 13.3 and iPadOS before 13.3. An attacker could exploit the vulnerability to share Live Photo audio and video data even if Live Photo is not enabled...
Foxit Studio Photo < 3.6.6.913 Multiple Vulnerabilities
According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by multiple vulnerabilities: - An out-of-bounds read error exist in the TIF file handler when processing InkNames of TIFFSetField due to improper validation of user-supplied...
Foxit Studio Photo < 3.6.6.916 Out-of-Bounds Read Vulnerability
According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by an out-of-bounds read error in the preview creation of EPS files due to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this, t...
Mail.ru: Stored XSS on https://community.my.games/ (Add Post)
Two stored XSS at https://community.my.games/. First XSS via upload photo title at link https://community.my.games/community/game/GameName/ . Second XSS via Discussion at the same link...
Stripo Inc: Upload Profile Photo in any folder you want with any extension you want
Summary: There exists a vulnerability in Stripo as a result of which an attacker can upload his/her profile photo in any folder he/she wants, with any file extension he/she wants. I also checked whether it could lead to code execution or directory traversal by modifying the values in the request,...
New Linux Bug Lets Attackers Hijack Encrypted VPN Connections
A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections. The...
QNAP Systems Photo Station File Name or Path External Control Vulnerability
QNAP Systems Photo Station is a photo management and viewing application from QNAP Systems. A file name or path external control vulnerability exists in QNAP Systems Photo Station, which can be exploited by remote attackers to access or modify system files...
QNAP Systems Photo Station Access Control Error Vulnerability
QNAP Systems Photo Station is a photo management and viewing application from QNAP Systems. An access control error vulnerability exists in QNAP Systems Photo Station, which can be exploited by an attacker to gain unauthorized access to the system...
QNAP Systems Photo Station File Name or Path External Control Vulnerability (CNVD-2020-09620)
QNAP Systems Photo Station is a photo management and viewing application from QNAP Systems. A file name or path external control vulnerability exists in QNAP Systems Photo Station, which can be exploited by remote attackers to access or modify system files...
CVE-2019-7194
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions...
CVE-2019-7195
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions...
CVE-2019-7194
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions...
CVE-2019-7192
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions...
CVE-2019-7192
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions...
Design/Logic Flaw
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions...
Design/Logic Flaw
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions...
Improper access control
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions...
CVE-2019-7195
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions...