19459 matches found
Joomla! Component Graphics 1.0.6 - Local File Inclusion
A directory traversal vulnerability in graphics.php in the Graphics comgraphics component 1.0.6 and 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1653 info: name: Joomla! Component...
WordPress Mapplic <= 6.1 / Mapplic Lite <= 1.0 - Authenticated Stored XSS via SVG File Upload
The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Stored Cross-Site Scripting via arbitrary URL injection in versions up to and including 6.1 and 1.0 respectively. Authenticated users with author-level permissions can inject arbitrary remote URLs for SVG map files. When a user...
SAP Internet Graphics Server (IGS) - XML External Entity Injection
SAP Internet Graphics Servers IGS running versions 7.20, 7.20EXT, 7.45, 7.49, or 7.53 has two XML external entity injection XXE vulnerabilities within the XMLCHART page - CVE-2018-2392 and CVE-2018-2393. These vulnerabilities occur due to a lack of appropriate validation on the Extension HTML tag...
CVE-2026-74970
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics component...
CVE-2026-74945
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: Text component...
CVE-2026-72313
A flaw was found in the Linux kernel's display rendering manager DRM framebuffer helper drm/fb-helper. This vulnerability arises from incorrect synchronization with display controllers CRTCs, where the system attempts to synchronize with an inactive controller. This can lead to display timeouts a...
Malicious code in broadcast-graphics-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48987a1a0ccff7dce1134e1a98122cd902961ac34ba623ae0e2fef62f75fe213 The package's postinstall script runs automatically on npm install and collects host identifiers from the installer machine os.hostname, platform,...
UBUNTU-CVE-2026-74970
Site isolation issue in the Graphics component. This vulnerability was...
CVE-2026-74974
Same-origin policy bypass in the Graphics: ImageLib component. This vu...
CVE-2026-74943
Use-after-free in the Graphics: ImageLib component. This vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2026-74964
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird...
Linux Distros Unpatched Vulnerability : CVE-2026-74940
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1,...
UBUNTU-CVE-2026-74948
Information disclosure in the Graphics component. This vulnerability w...
UBUNTU-CVE-2026-74945
Information disclosure in the Graphics: Text component. This vulnerabi...
Linux Distros Unpatched Vulnerability : CVE-2026-74973
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1...
CVE-2026-74964
Integer overflow in the Graphics component. This vulnerability was fix...
UBUNTU-CVE-2026-74968
Site isolation issue in the Graphics: WebRender component. This vulner...
CVE-2026-74940
Use-after-free in the Graphics: Text component. This vulnerability was...