Heap overflow

Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution...

Stack overflow

Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function...

CVE-2017-1000073: Improper Restriction of Operations within the Bounds of a Memory Buffer

Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution...

CVE-2017-1000072: Double Free

Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravityvalue resulting potentially leading to modification of unexpected memory locations...

CVE-2017-1000075: Improper Restriction of Operations within the Bounds of a Memory Buffer

Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function...

CVE-2017-1000074: Improper Restriction of Operations within the Bounds of a Memory Buffer

Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the stringrepeat function...

CVE-2017-1000075

Creolabs Gravity 1.0 is vulnerable to a stack/buffer overflow in the memcmp function. CNVD-2017-27179 describes a buffer overflow in memcmp for Gravity 1.0, with an attacker able to exploit this vulnerability to terminate a process (infinite loop). No remediation details are provided in the conne...

CVE-2017-1000073

Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution...

CVE-2017-1000072

Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravityvalue resulting potentially leading to modification of unexpected memory locations...

CVE-2017-1000074

Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the stringrepeat function...

CVE-2017-1000072

Creolabs Gravity 1.0 is affected by a Double Free in the gravity_value function. The root cause is a double-free condition that can lead to modification of memory locations. The CVE entry confirms this for Creolabs Gravity, with an impact described as potential memory corruption. No exploitation ...

CVE-2017-1000073

Creolabs Gravity 1.0 is affected by a heap overflow in an undisclosed component, enabling arbitrary code execution. This is documented across multiple sources (e.g., NVD/CNVD entries). No specific vulnerable function, module, or exploit details are provided in the supplied documents. The CVE is a...

CVE-2017-1000075

Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function...

CVE-2017-1000074

Creolabs Gravity 1.0 is affected by a stack overflow in the string_repeat() function. CNVD-2017-27180 & NVD/NVD-derived entries describe a stack buffer overflow in string_repeat() that can allow memory corruption and control of program memory. Details across connected sources confirm the affected...

Unrestricted file upload

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2015-4455

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2015-4455: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

WordPress Gravity Forms Plugin <= 2.0.6.5 - XSS

This plugin is prone to a cross site scripting vulnerability. It allows attackers to inject arbitrary JavaScript or HTML code. Solution Update the plugin...

Gravity Forms <= 2.0.6.5 - Authenticated Blind Cross-Site Scripting (XSS)

A blind XSS vulnerability exists in the GravityForms plugin prior to version 2.0.7, in the select option dropdown boxes on forms. If the select column is displayed on the gfentries page when viewed in the Dashboard, the code is executed by the admin / viewer of the submissions. This vulnerability...

WordPress Gravity Forms Plugin 1.8.19 - Arbitrary File Upload

WordPress Gravity Forms plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...