Lucene search
+L

4 matches found

NVD
NVD
added 2026/06/24 7:17 p.m.17 views

CVE-2026-53946

Ghost is a Node.js content management system. From 6.19.4 until 6.21.1, when re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user...

5.4CVSS0.00122EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2015-5638

Malware in sbrugna...

6.8CVSS6.4AI score0.03392EPSS
SaveExploits0References5
NVD
NVD
added 2015/09/20 8:59 p.m.28 views

CVE-2015-5689

ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite GSS before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution DS before 7.6 HF4 12.0.0.7045 performs improper sign-extend operations before array-element accesses, which allows remote attackers to execute arbitrary code,...

6.8CVSS7.7AI score0.03392EPSS
SaveExploits0References4
Prion
Prion
added 2015/09/20 8:59 p.m.20 views

Design/Logic Flaw

ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite GSS before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution DS before 7.6 HF4 12.0.0.7045 performs improper sign-extend operations before array-element accesses, which allows remote attackers to execute arbitrary code,...

6.8CVSS8.3AI score0.03392EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder