6689 matches found
WordPress photo-gallery plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. photo-gallery is an image gallery plugin used in it. A cross-site request forgery vulnerability exists in versions of the WordPress...
CVE-2015-9380
The photo-gallery plugin before 1.2.42 for WordPress has CSRF...
CVE-2015-9380
The CVE-2015-9380 entry corresponds to a CSRF vulnerability in the WordPress plugin Photo Gallery (versions before 1.2.42). The issue is described as a cross-site request forgery in the photo-gallery plugin, enabling unauthorized actions without authentication. Multiple sources (NVD description, ...
WordPress gallery-photo-gallery plugin SQL injection vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. gallery-photo-gallery is a responsive gallery plugin used in it. A SQL injection vulnerability exists in the WordPress...
EulerOS 2.0 SP8 : dcraw (EulerOS-SA-2019-1817)
According to the version of the dcraw package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A stack-based buffer overflow in the findgreen function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote...
CVE-2019-15524
CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a photo/upload/2019/ URI...
CVE-2016-10921
The gallery-photo-gallery plugin before 1.0.1 for WordPress has SQL injection...
CVE-2016-10921
The CVE-2016-10921 entry concerns the Gallery Photo Gallery WordPress plugin, affected versions prior to 1.0.1. The root cause is a SQL injection due to lack of validation of externally supplied SQL statements in a database-based operation. Impact stated across sources indicates the vulnerability...
CVE-2019-15293
An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...
CVE-2019-15293
An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...
Design/Logic Flaw
An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...
CVE-2019-15293
Summary (CVE-2019-15293) ACDSee Photo Studio Standard 22.1 Build 1159 contains a buffer overflow vulnerability. CNVD-2020-17037 indicates the flaw originates when memory boundaries aren’t properly validated during an operation, enabling a potential attacker to cause a buffer/heap overflow. No rem...
CVE-2019-15293
An issue was discovered in ACDSee Photo Studio Standard 22.1 Build 1159. There is a User Mode Write AV starting at IDEACDStd!IEPShowPlugInDialog+0x000000000023d060...
ACD Systems ACDSee Photo Studio Standard Buffer Overflow Vulnerability
ACD Systems ACDSee Photo Studio Standard is a data asset management system from the American company ACD Systems. A buffer overflow vulnerability exists in ACDSee Photo Studio Standard version 22.1 Build 1159, which originates when a networked system or product performs an operation in memory...
Image gallery suffers from denial of service vulnerability (CNVD-2019-30306)
Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...
Denial of Service Vulnerability in Photo Gallery
Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...
Photo gallery suffers from denial of service vulnerability (CNVD-2019-30301)
Photo Gallery is an image viewing and management software that supports all formats. A denial of service vulnerability exists in Picture Gallery, which can be exploited by attackers to cause a denial of service...
CVE-2019-15129
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitmentonline/upload/user/userid/photo/filename URI...
CVE-2019-15129
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitmentonline/upload/user/userid/photo/filename URI...
Default credentials
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitmentonline/upload/user/userid/photo/filename URI...