Lucene search
+L

3586 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 10:21 p.m.•18 views

CVE-2022-20607

In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with LTE authentication needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-238914868References...

8.8CVSS8.2AI score0.00989EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:02 p.m.•22 views

CVE-2021-24922

The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacks...

9CVSS6AI score0.00552EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:26 p.m.•17 views

CVE-2021-25694

Teradici PCoIP Graphics Agent for Windows prior to 21.03 does not validate NVENC.dll. An attacker could replace the .dll and redirect pixels elsewhere...

7.8CVSS6.9AI score0.00263EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:24 p.m.•18 views

CVE-2021-24972

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

4.8CVSS6AI score0.00617EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:08 p.m.•16 views

CVE-2020-0061

In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

5.5CVSS6.5AI score0.00164EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:41 a.m.•24 views

CVE-2019-5098

An exploitable out-of-bounds read vulnerability exists in AMD ATIDXX64.DLL driver, version 26.20.13001.29010. A specially crafted pixel shader can cause out-of-bounds memory read. An attacker can provide a specially crafted shader file to trigger this vulnerability. This vulnerability can be...

8.6CVSS6.6AI score0.02029EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/21 7:37 p.m.•15 views

CVE-2008-4055

SQL injection vulnerability in topstop.php in Million Pixel Ad Script Million Pixel Script allows remote attackers to execute arbitrary SQL commands via the idcat parameter...

7.5CVSS8.8AI score0.01035EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/18 4:03 p.m.•32 views

CVE-2025-31915

Cross-Site Request Forgery CSRF vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder pixel-formbuilder allows Cross Site Request Forgery.This issue affects Pixel WordPress Form BuilderPlugin & Autoresponder: from n/a through = 1.0.3...

5.4CVSS7.2AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/16 4:15 p.m.•17 views

CVE-2025-31915

Cross-Site Request Forgery CSRF vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder pixel-formbuilder allows Cross Site Request Forgery.This issue affects Pixel WordPress Form BuilderPlugin & Autoresponder: from n/a through = 1.0.3...

5.4CVSS0.00149EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/16 3:45 p.m.•43 views

CVE-2025-31915

CVE-2025-31915 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin family Pixel WordPress Form BuilderPlugin & Autoresponder, reported for versions up to and including 1.0.2. The CVE entry (and PatchStack/CRLs) confirm the vulnerability exists but do not provide a ...

5.4CVSS7.2AI score0.00149EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/05/16 1:03 p.m.•18 views

WordPress Pixel Form BuilderPlugin & Autoresponder plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Pixel WordPress Form BuilderPlugin & Autoresponder versions = 1.0.3...

5.4CVSS8.4AI score0.00149EPSS
SaveExploits0Affected Software1
Packet Storm News
Packet Storm News
•added 2025/05/16 12:00 a.m.•23 views

Verifiably Forgotten? Gradient Differences Still Enable Data Reconstruction in Federated Unlearning

Federated Unlearning FU has emerged as a critical compliance mechanism for data privacy regulations, requiring unlearned clients to provide verifiable Proof of Federated Unlearning PoFU to auditors upon data removal requests. However, we uncover a significant privacy vulnerability: when gradient...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/05/16 12:00 a.m.•17 views

PT-2025-21678 · WordPress · Pixel Wordpress Form Builderplugin & Autoresponder

Name of the Vulnerable Software and Affected Versions: Pixel WordPress Form BuilderPlugin & Autoresponder versions 1.0.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For Pixel WordPress Form...

5.4CVSS6.3AI score0.00149EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/16 12:00 a.m.•14 views

WordPress plugin Pixel WordPress Form BuilderPlugin & Autoresponder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Pixel...

5.4CVSS6.3AI score0.00149EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•3 views

CVE-2025-31915: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder pixel-formbuilder allows Cross Site Request Forgery.This issue affects Pixel WordPress Form BuilderPlugin & Autoresponder: from n/a through = 1.0.3...

5.4CVSS5.8AI score0.00149EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/05/11 12:00 a.m.•14 views

Real-Time Bit-Level Encryption of Full High-Definition Video without Diffusion

Despite the widespread adoption of Shannon's confusion-diffusion architecture in image encryption, the implementation of diffusion to sequentially establish inter-pixel dependencies for attaining plaintext sensitivity constrains algorithmic parallelism, while the execution of multiple rounds of...

7AI score
SaveExploits0
OSV
OSV
•added 2025/05/09 11:08 a.m.•6 views

OESA-2025-1506 GraphicsMagick security update

GraphicsMagick is a comprehensive image processing package which is initially based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performance of the software. Security Fixes: ReadJXLImage in JXL in...

4.3CVSS6.2AI score0.00448EPSS
SaveExploits1References3
OSV
OSV
•added 2025/05/07 7:13 p.m.•14 views

RLSA-2024:2525 Moderate: mingw-pixman security update

Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fixes: pixman: Integer overflow in pixmansamplefloory leading to heap out-of-bounds write CVE-2022-44638 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

7CVSS9.1AI score0.01524EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/05/07 3:53 a.m.•6 views

Malicious code in pixel-percent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dd56a17e219443b9eedca7464cf3adeb5e1306d51ab798215cddf2313c3deaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2025/05/07 3:53 a.m.•5 views

MAL-2025-3694 Malicious code in pixel-percent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dd56a17e219443b9eedca7464cf3adeb5e1306d51ab798215cddf2313c3deaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder