CVE-2024-0053

In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

WordPress Otter Blocks – Gutenberg Block plugin <= 3.0.6 - Unauthenicated Path Traversal to Arbitrary Image View vulnerability

Unauthenicated Path Traversal to Arbitrary Image View vulnerability discovered by mikemyers in WordPress Plugin Otter - Gutenberg Block versions = 3.0.6...

Horde Groupware Webmail Cross-Site Scripting Vulnerability (CNVD-2020-33657)

Horde Groupware Webmail is a browser-based, enterprise-class communications suite from Horde, Inc. A cross-site scripting vulnerability exists in the image viewing feature in Horde Groupware Webmail Edition prior to 5.2.22, which can be exploited to gain access to a user's Webmail account via a...