Lucene search
+L

1978 matches found

OpenVAS
OpenVAS
added 2022/04/21 12:00 a.m.26 views

Slackware: Security Advisory (SSA:2018-108-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7AI score0.05102EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/21 12:00 a.m.46 views

Slackware: Security Advisory (SSA:2020-083-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.71496EPSS
SaveExploits10References2
OSV
OSV
added 2022/04/16 11:04 a.m.7 views

OESA-2022-1613 gd security update

The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. The most common applications of GD involve website development, although it can be...

7.5CVSS7.2AI score0.02051EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/14 3:15 p.m.9 views

CVE-2022-0703

The GD Mylist WordPress plugin through 1.1.1 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00622EPSS
SaveExploits2References1
Prion
Prion
added 2022/03/14 3:15 p.m.17 views

Cross site scripting

The GD Mylist WordPress plugin through 1.1.1 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

3.5CVSS4.7AI score0.00622EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2022/03/14 2:41 p.m.28 views

CVE-2022-0703 GD Mylist <= 1.1.1 - Admin+ Stored Cross-Site Scripting

The GD Mylist WordPress plugin through 1.1.1 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

5AI score0.00622EPSS
SaveExploits2References1
CVE
CVE
added 2022/03/14 2:41 p.m.107 views

CVE-2022-0703

The CVE-2022-0703 entry concerns the WordPress plugin GD Mylist

4.8CVSS4.7AI score0.00622EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2022/03/14 12:00 a.m.12 views

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the...

4.8CVSS4.9AI score0.00622EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2022/02/26 12:00 a.m.21 views

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2022-1203)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.01659EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/02/26 12:00 a.m.24 views

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2022-1222)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.01659EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/25 12:00 a.m.31 views

EulerOS 2.0 SP10 : gd (EulerOS-SA-2022-1222)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The GD Graphics Library aka LibGD through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks...

6.5CVSS6AI score0.01659EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/25 12:00 a.m.26 views

EulerOS 2.0 SP10 : gd (EulerOS-SA-2022-1203)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The GD Graphics Library aka LibGD through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks...

6.5CVSS6AI score0.01659EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/02/24 12:00 a.m.23 views

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2022-1163)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02051EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/02/23 12:00 a.m.22 views

EulerOS 2.0 SP3 : gd (EulerOS-SA-2022-1163)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - DISPUTED gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is 'The GD2 image...

7.5CVSS6.4AI score0.02051EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/21 4:39 a.m.58 views

Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript.

Summary WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in Pacemaker, ImageMagick, gd-libgd, libxslt, cURL libcurl , Ghostscript. These vulnerabilities are addressed in App connect professional v7.5.4.0 and v7.5.5.0, customer can migrate to these versions without...

9.8CVSS9.5AI score0.98745EPSS
SaveExploits20Affected Software1
WPVulnDB
WPVulnDB
added 2022/02/21 12:00 a.m.20 views

GD Mylist <= 1.1.1 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC Put the following payload in any of the text field settings of the plugin such as Add to Myli...

4.8CVSS2.2AI score0.00622EPSS
SaveExploits2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/02/13 12:00 a.m.29 views

EulerOS Virtualization 3.0.6.6 : gd (EulerOS-SA-2022-1119)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is...

7.5CVSS6.4AI score0.02051EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/02/13 12:00 a.m.26 views

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2022-1065)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.02051EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2022/02/13 12:00 a.m.23 views

Huawei EulerOS: Security Advisory for gd (EulerOS-SA-2022-1119)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02051EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/02/12 12:00 a.m.37 views

EulerOS Virtualization 3.0.6.0 : gd (EulerOS-SA-2022-1065)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - readheadertga in gdtga.c in the GD Graphics Library aka LibGD through 2.3.2 allows remote attackers to cause a denial of service...

7.5CVSS6.3AI score0.02051EPSS
SaveExploits2References3
Rows per page
Query Builder