Lucene search
K

7 matches found

CNNVD
CNNVD
added 2025/07/12 12:0 a.m.2 views

WordPress plugin WPBookit 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

8.8CVSS6.8AI score0.02608EPSS
Exploits0References5
Microsoft CVE
Microsoft CVE
added 2024/09/11 7:0 a.m.3 views

There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables

...

7.8CVSS6.9AI score0.00024EPSS
Exploits0
OSV
OSV
added 2023/07/20 1:15 a.m.0 views

AZL-27559 CVE-2022-28737 affecting package shim for versions less than 15.8-1

There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code...

7.8CVSS7.4AI score0.00024EPSS
Exploits0References1
OSV
OSV
added 2023/07/20 1:15 a.m.1 views

DEBIAN-CVE-2022-28737

There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code...

7.8CVSS7.6AI score0.00024EPSS
Exploits0References1
OSV
OSV
added 2023/07/20 1:15 a.m.0 views

UBUNTU-CVE-2022-28737

There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code...

7.8CVSS7.4AI score0.00024EPSS
Exploits0References4
OSV
OSV
added 2003/03/24 5:0 a.m.3 views

DEBIAN-CVE-2003-0130

The handleimage function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image...

5CVSS6.9AI score0.13546EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2003/03/21 5:0 a.m.18 views

CVE-2003-0130

The handleimage function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image...

5CVSS6.4AI score0.13546EPSS
Exploits1
Rows per page
Query Builder