CVE-2023-31541

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server...

CVE-2018-20906: Incorrect Permission Assignment for Critical Resource

cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction SEC-430...

PT-2019-10337

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 71.9980.37 Description: The issue allows attackers to bypass the images feature restriction by making API calls. Recommendations: For versions prior to 71.9980.37, update to version 71.9980.37 or later to resolve the...

security flaw

Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message...