Lucene search
+L

6689 matches found

CNVD
CNVD
added 2019/09/02 12:00 a.m.6 views

WordPress photo-gallery plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. photo-gallery is an image gallery plugin used in it. A cross-site request forgery vulnerability exists in versions of the WordPress...

8.8CVSS6.7AI score0.00819EPSS
SaveExploits0References1
NVD
NVD
added 2019/08/30 1:15 p.m.25 views

CVE-2015-9380

The photo-gallery plugin before 1.2.42 for WordPress has CSRF...

8.8CVSS8.8AI score0.00819EPSS
SaveExploits0References3
CVE
CVE
added 2019/08/30 12:26 p.m.74 views

CVE-2015-9380

The CVE-2015-9380 entry corresponds to a CSRF vulnerability in the WordPress plugin Photo Gallery (versions before 1.2.42). The issue is described as a cross-site request forgery in the photo-gallery plugin, enabling unauthorized actions without authentication. Multiple sources (NVD description, ...

8.8CVSS8.7AI score0.00819EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2019/08/27 12:00 a.m.7 views

WordPress gallery-photo-gallery plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. gallery-photo-gallery is a responsive gallery plugin used in it. A SQL injection vulnerability exists in the WordPress...

9.8CVSS8AI score0.01815EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2019/08/27 12:00 a.m.26 views

EulerOS 2.0 SP8 : dcraw (EulerOS-SA-2019-1817)

According to the version of the dcraw package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A stack-based buffer overflow in the findgreen function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote...

8.8CVSS7.4AI score0.02855EPSS
SaveExploits1References2
OSV
OSV
added 2019/08/26 1:15 p.m.6 views

CVE-2019-15524

CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a photo/upload/2019/ URI...

9.8CVSS7.9AI score0.03148EPSS
SaveExploits0References2
OSV
OSV
added 2019/08/22 1:15 p.m.3 views

CVE-2016-10921

The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection...

9.8CVSS5.8AI score0.01815EPSS
SaveExploits0References1
CVE
CVE
added 2019/08/22 12:33 p.m.56 views

CVE-2016-10921

The CVE-2016-10921 entry concerns the Gallery Photo Gallery WordPress plugin, affected versions prior to 1.0.1. The root cause is a SQL injection due to lack of validation of externally supplied SQL statements in a database-based operation. Impact stated across sources indicates the vulnerability...

9.8CVSS9.9AI score0.01815EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2019/08/21 6:15 a.m.8 views

CVE-2019-15293

An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...

7.8CVSS7.1AI score0.0053EPSS
SaveExploits0References1
NVD
NVD
added 2019/08/21 6:15 a.m.26 views

CVE-2019-15293

An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...

7.8CVSS7.6AI score0.0053EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/21 6:15 a.m.26 views

Design/Logic Flaw

An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...

4.6CVSS7.6AI score0.0053EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/08/21 5:36 a.m.170 views

CVE-2019-15293

Summary (CVE-2019-15293) ACDSee Photo Studio Standard 22.1 Build 1159 contains a buffer overflow vulnerability. CNVD-2020-17037 indicates the flaw originates when memory boundaries aren’t properly validated during an operation, enabling a potential attacker to cause a buffer/heap overflow. No rem...

7.8CVSS7.5AI score0.0053EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/21 5:36 a.m.33 views

CVE-2019-15293

An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...

7.6AI score0.0053EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/21 12:00 a.m.9 views

ACD Systems ACDSee Photo Studio Standard Buffer Overflow Vulnerability

ACD Systems ACDSee Photo Studio Standard is a data asset management system from the American company ACD Systems. A buffer overflow vulnerability exists in ACDSee Photo Studio Standard version 22.1 Build 1159, which originates when a networked system or product performs an operation in memory...

7.8CVSS7.3AI score0.0053EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/08/19 12:00 a.m.1 views

Image gallery suffers from denial of service vulnerability (CNVD-2019-30306)

Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2019/08/19 12:00 a.m.1 views

Denial of Service Vulnerability in Photo Gallery

Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2019/08/19 12:00 a.m.3 views

Photo gallery suffers from denial of service vulnerability (CNVD-2019-30301)

Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...

6.7AI score
SaveExploits0
OSV
OSV
added 2019/08/18 5:15 p.m.9 views

CVE-2019-15129

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitmentonline/upload/user/userid/photo/filename URI...

5.3CVSS6.1AI score0.013EPSS
SaveExploits1References1
NVD
NVD
added 2019/08/18 5:15 p.m.29 views

CVE-2019-15129

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitmentonline/upload/user/userid/photo/filename URI...

5.3CVSS5.3AI score0.013EPSS
SaveExploits1References1
Prion
Prion
added 2019/08/18 5:15 p.m.19 views

Default credentials

The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitmentonline/upload/user/userid/photo/filename URI...

5CVSS5.3AI score0.013EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder