CVE-2025-22317: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gallery Ape Photo Gallery – Image Gallery by Ape gallery-images-ape allows Reflected XSS.This issue affects Photo Gallery – Image Gallery by Ape: from n/a through = 2.2.8...

WordPress plugin Photo Gallery – Image Gallery by Ape: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

ape-dasy (0.1.0) potentially affected by CVE-2025-21607 via vyper (0.3.9)

vyper PYPI version 0.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on vyper and may be impacted: - ape-dasy 0.1.0 Source cves: CVE-2025-21607 Source advisory: OSV:GHSA-VGF2-GVX8-XWC3...

WordPress Gallery Images Ape plugin <= 2.2.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Photo Gallery – Image Gallery by Ape versions = 2.2.8...

CVE-2022-41995

Missing Authorization vulnerability in Galleryape Gallery Images Ape allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gallery Images Ape: from n/a through 2.2.8...

CVE-2022-41995 WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Broken Access Control

Missing Authorization vulnerability in Galleryape Gallery Images Ape allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gallery Images Ape: from n/a through 2.2.8...

PT-2025-1366 · Unknown · Gallery Images Ape

Name of the Vulnerable Software and Affected Versions: Gallery Images Ape versions 2.2.8 and earlier Description: The issue is related to a Missing Authorization vulnerability in Galleryape Gallery Images Ape, which allows exploiting incorrectly configured access control security levels...

WordPress plugin Gallery Images Ape has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

CVE-2022-41995: Missing Authorization

Missing Authorization vulnerability in Galleryape Gallery Images Ape allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gallery Images Ape: from n/a through 2.2.8...

ffmpeg:ffmpeg_IO_DEMUXER_fuzzer: Use-of-uninitialized-value in ff_ape_parse_tag

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5697034877730816 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegIODEMUXERfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

Siemens RUGGEDCOM APE 1808

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

ape-addressbook (>=0.4.0a1, <=0.5.0a1), ape-alchemy (>=0.1.0b1, <=0.5.4) +54 more potentially affected by unknown CVE via eth-abi (3.0.1)

eth-abi PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - ape-addressbook =0.4.0a1, =0.1.0b1, =0.1.22, =0.4.0, =0.4.0a0, =0.1.0a0, =0.4.0a1, =0.1.0a2, =0.4.0, =0.4.0, =0.4.0, =0.4.0a1, =0.4.0, =0.5.5 and...

MP3Gain Security Breach

MP3Gain is an audio volume control application. A security vulnerability exists in MP3Gain v1.6.2, which originated from allowing an attacker to cause a denial of service via the WriteMP3GainAPETag function...

Siemens Industrial Products Uncontrolled Resource Consumption (CVE-2019-11479)

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. An attacker with network access to affected products could cause a denial of service condition because of a vulnerability in the TCP retransmission queue implementation kernel when handling TCP...

Siemens Industrial Products Uncontrolled Resource Consumption (CVE-2019-11478)

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. A remote attacker could cause a denial of service condition by sending specially crafted TCP Selective Acknowledgment SACK sequences to affected products. This plugin only works with Tenable.ot...

ape-addressbook (>=0.4.0a1, <=0.5.0a1), ape-alchemy (>=0.1.0b1, <=0.5.4) +54 more potentially affected by unknown CVE via eth-abi (3.0.1)

eth-abi PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - ape-addressbook =0.4.0a1, =0.1.0b1, =0.1.22, =0.4.0, =0.4.0a0, =0.1.0a0, =0.4.0a1, =0.1.0a2, =0.4.0, =0.4.0, =0.4.0, =0.4.0a1, =0.4.0, =0.5.5 and...

ape-dasy (0.1.0), ape-safe (0.6.0) +8 more potentially affected by CVE-2023-42460 via vyper (>=0.3.6, <=0.3.9)

vyper PYPI version =0.3.6, =0.5.2, =0.5.2, =0.2.0, =0.7.2, =1.19.1, =0.6.0, =2.0.0a1, =1.3.1, =3.4.6 Source cves: CVE-2023-42460 Source advisory: GHSA-CX2Q-HFXR-RJ97...

Siemens InsydeH2O SMM Privilege Escalation (CVE-2020-5953)

A vulnerability exists in System Management Interrupt SWSMI handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT EFIRUNTIMESERVICES pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM escalating...

Siemens InsydeH2O SMM Privilege Escalation (CVE-2021-43323)

An issue was discovered in UsbCoreDxe in Insyde InsydeH2O with kernel 5.5 before 05.51.45, 5.4 before 05.43.45, 5.3 before 05.35.45, 5.2 before 05.26.45, 5.1 before 05.16.45, and 5.0 before 05.08.45. An SMM callout vulnerability allows an attacker to hijack execution flow of code running in Syste...

Siemens InsydeH2O Out-of-bounds Write (CVE-2023-22613)

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An attacker could invoke an SMI handler with a malformed pointer in RCX that overlaps SMRAM, resulting in SMM memory corruption. Insyde BIOS is typically...