Lucene search
+L

3177 matches found

CNNVD
CNNVD
added 2026/05/27 12:00 a.m.15 views

WordPress plugin The Post Grid 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

4.3CVSS5.8AI score0.00213EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.21 views

PT-2026-44045

Name of the Vulnerable Software and Affected Versions The Post Grid versions prior to 7.9.3 Description A missing authorization issue allows for the exploitation of incorrectly configured access control security levels. Recommendations Update to a version newer than 7.9.2...

4.3CVSS5.8AI score0.00213EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.22 views

PT-2026-43493

The ShopLentor - WooCommerce Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blockUniqId' block attribute in multiple Product Gride blocks in versions up to, and including, 3.3.8 due to insufficient input sanitization and output escapin...

5.4CVSS6AI score0.00197EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:00 a.m.39 views

PT-2026-43629

Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 1.7.18 Pimcore versions prior to 2.3.6 Description A SQL injection issue exists in the translation grid date filter of the Admin Classic Bundle. The application fails to properly parameterize or validate the property...

8.8CVSS5.7AI score0.0035EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:00 a.m.89 views

Linux Distros Unpatched Vulnerability : CVE-2026-32740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap- buffer-overflow write vulnerability in the grid tile...

8.8CVSS4.7AI score0.00514EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-32814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, when decoding a HEIF grid image with strictdecoding=false the default,...

6.5CVSS4.5AI score0.00311EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/05/21 2:29 a.m.25 views

SUSE CVE-2026-32740

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow write vulnerability in the grid tile compositing, allowing an attacker to write 64 bytes of fully attacker-controlled data past the end of a chroma plane heap allocation by craftin...

7.8CVSS5.8AI score0.00514EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2026/05/21 2:29 a.m.23 views

SUSE CVE-2026-32814

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, when decoding a HEIF grid image with strictdecoding=false the default, a corrupted tile silently fails to decode and the library returns heiferrorOk with no indication of failure, leading to an uninitialized...

5.5CVSS5.7AI score0.00311EPSS
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/20 1:35 p.m.15 views

Malicious code in @limebike/supreme-data-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018193d4f68c2fcaad63da76c3c125ed94d5a6da1efaab85147ff59efafa0b46 @limebike/supreme-data-grid occupies the @limebike npm scope private-looking namespace with placeholder metadata and a README stating 'Claimed by...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/20 1:35 p.m.15 views

MAL-2026-4189 Malicious code in @limebike/supreme-data-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018193d4f68c2fcaad63da76c3c125ed94d5a6da1efaab85147ff59efafa0b46 @limebike/supreme-data-grid occupies the @limebike npm scope private-looking namespace with placeholder metadata and a README stating 'Claimed by...

5.8AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/20 12:13 p.m.17 views

CVE-2026-27424

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/20 12:13 p.m.50 views

CVE-2026-27424

CVE-2026-27424 affects the WordPress plugin Image Photo Gallery Final Tiles Grid (Final Tiles Grid Gallery Lite) up to version 3.6.11. The issue is a Missing Authorization / Broken Access Control vulnerability due to incorrectly configured access control security levels. The CVSS 3.1 base score i...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/20 12:13 p.m.11 views

CVE-2026-27424 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/20 12:13 p.m.47 views

CVE-2026-27424 WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS0.00206EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/20 12:13 p.m.32 views

EUVD-2026-31095

Missing Authorization vulnerability in WP Chill Image Photo Gallery Final Tiles Grid allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Image Photo Gallery Final Tiles Grid: from n/a through 3.6.11...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/05/20 12:12 p.m.15 views

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Que Thanh Tuan in WordPress Plugin Image Photo Gallery Final Tiles Grid versions = 3.6.11...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2026/05/20 11:48 a.m.18 views

BIT-GDAL-2026-8213 OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow

A vulnerability has been found in OSGeo gdal up to 3.13.0. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has be...

5.5CVSS5.5AI score0.00258EPSS
SaveExploits1References9
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.7 views

Astra Linux – Vulnerability in virglrenderer

A NULL pointer dereferencing in the vrendrenderer.c file of virglrenderer during versions 0.8.1 allows attackers to cause a denial of service by using commands that attempt to launch a grid without first providing a Compute Shader CS...

5.5CVSS6.3AI score0.00342EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/20 12:00 a.m.23 views

PT-2026-42152

Name of the Vulnerable Software and Affected Versions WP Chill Image Photo Gallery Final Tiles Grid versions prior to 3.6.12 Description A missing authorization issue exists due to incorrectly configured access control security levels, which allows for the exploitation of unauthorized access...

4.3CVSS5.9AI score0.00206EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/20 12:00 a.m.22 views

wordpress plugin Image Photo Gallery Final Tiles Grid 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. WordPress plugins are additional applications that can b...

4.3CVSS5.8AI score0.00206EPSS
SaveExploits0References1
Rows per page
Query Builder