Lucene search
+L

974 matches found

CNNVD
CNNVD
added 2022/08/16 12:0 a.m.7 views

tifig 代码问题漏洞

tifig is a fast HEIF image converter for thumbnails from Monostream open source. A code issue vulnerability exists in tifig version v0.2.2, which stems from a memory segment exception in the getType function in its /common/bbox.cpp component...

5.5CVSS5.8AI score0.0029EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/20 8:19 p.m.7 views

MAL-2022-2145 Malicious code in component-thumbnail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a23a84ff0f02b841e60133fc4054180ea026a36b009826b23ab7b87adaf47e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:19 p.m.5 views

Malicious code in component-thumbnail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a23a84ff0f02b841e60133fc4054180ea026a36b009826b23ab7b87adaf47e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/05/31 8:1 a.m.7 views

OPENSUSE-SU-2022:10001-1 Security update for pcmanfm

This update for pcmanfm fixes the following issues: update to 1.3.2: Fixed case when some keyboard shortcuts stopped working: Alt+Home, Alt+Up Fixed sytem reboot delayed for 90 seconds in some cases new upstream release of pcmanfm 1.3.1 fixed crash on reload while directory changes changed size o...

5.5CVSS5.4AI score0.00334EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2022/05/31 12:0 a.m.30 views

Security update for pcmanfm (moderate)

openSUSE Security Update: Security update for pcmanfm Announcement ID: openSUSE-SU-2022:10001-1 Rating: moderate References: 1039140 Cross-References: CVE-2017-8934 CVSS scores: CVE-2017-8934 NVD : 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 A...

5.5CVSS6.4AI score0.00334EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/05 1:15 a.m.1 views

DEBIAN-CVE-2022-0458

Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.00736EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/05 1:15 a.m.8 views

CVE-2022-0458

Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00736EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/05 1:15 a.m.4 views

UBUNTU-CVE-2022-0458

Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7AI score0.00736EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/04/05 1:15 a.m.25 views

CVE-2022-0458

Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7AI score0.00736EPSS
SaveExploits0References1
CVE
CVE
added 2022/04/05 12:51 a.m.146 views

CVE-2022-0458

CVE-2022-0458 is a Chrome use-after-free vulnerability in the Thumbnail Tab Strip prior to 98.0.4758.80 that could allow heap corruption via a crafted HTML page. The weakness affects Chrome/Chromium up to version 98.0.4758.80 and was publicly acknowledged in Chrome’s February 2022 stable-channel ...

8.8CVSS9AI score0.00736EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
added 2022/04/05 12:51 a.m.65 views

CVE-2022-0458

Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.2AI score0.00736EPSS
SaveExploits0
NVD
NVD
added 2022/03/23 8:15 p.m.28 views

CVE-2022-0750

The Photoswipe Masonry Gallery WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the thumbnailwidth, thumbnailheight, maximagewidth, and maximageheight parameters found in the /photoswipe-masonry.php file which allows authenticated attackers t...

6.4CVSS0.04336EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
added 2022/03/23 12:0 a.m.8 views

PT-2022-13410 · WordPress · Photoswipe Masonry Gallery

Name of the Vulnerable Software and Affected Versions: Photoswipe Masonry Gallery WordPress plugin versions up to and including 1.2.14 Description: The issue arises from insufficient escaping and sanitization of the thumbnail width, thumbnail height, max image width, and max image height paramete...

6.4CVSS5.2AI score0.04336EPSS
SaveExploits3References5
CNVD
CNVD
added 2022/03/17 12:0 a.m.16 views

Pimcore Cross-Site Scripting Vulnerability (CNVD-2022-22701)

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications. pimcore 10.4.0 prior versions of cross-site...

6.8CVSS1.6AI score0.00803EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.8 views

Pimcore 跨站脚本漏洞

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce framework and product information management applications. pimcore 10.4.0 prior versions of cross-site...

6.8CVSS5.6AI score0.00803EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/03/14 3:15 p.m.8 views

CVE-2022-0165

The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kcgetthumbn AJAX action available to both unauthenticated and authenticated users...

6.1CVSS6.3AI score0.0428EPSS
SaveExploits4References3
OSV
OSV
added 2022/03/14 3:15 p.m.5 views

CVE-2022-0165

The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kcgetthumbn AJAX action available to both unauthenticated and authenticated users...

6.1CVSS5.8AI score0.0428EPSS
SaveExploits4References1
Hacker One
Hacker One
added 2022/03/03 1:22 a.m.21 views

TikTok: View thumbnail of any private video (friends or followers only) of Private/Public account

Vulnerability description not provided...

7.1AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/03/01 2:15 a.m.11 views

CVE-2022-25020

A cross-site scripting XSS vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail path of a blog post...

5.4CVSS5.9AI score0.01184EPSS
SaveExploits1References5
NVD
NVD
added 2022/03/01 2:15 a.m.19 views

CVE-2022-25020

A cross-site scripting XSS vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the thumbnail path of a blog post...

5.4CVSS0.01184EPSS
SaveExploits1References3
Rows per page
Query Builder