8314 matches found
CVE-2020-13878
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+27ef heap-based out-of-bounds write...
CVE-2020-13878
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+27ef heap-based out-of-bounds write...
Heap overflow
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+214f heap-based out-of-bounds write...
Heap overflow
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+27ef heap-based out-of-bounds write...
CVE-2020-13878
Summary: IrfanView B3D PlugIns before version 4.56 is affected by a heap-based out-of-bounds write in B3d.dll!+27ef. This vulnerability has a CVSS v3.1 base score of 9.8 (CRITICAL) with NETWORK attack vector, no privileges or user interaction required. Affected products/versions: IrfanView B3D Pl...
CVE-2020-13878
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+27ef heap-based out-of-bounds write...
CVE-2020-13878
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+27ef heap-based out-of-bounds write...
CVE-2020-13880
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+1cbf heap-based out-of-bounds write...
CVE-2020-13879
CVE-2020-13879 affects IrfanView B3D PlugIns prior to version 4.56. The vulnerability is a heap-based out-of-bounds write in B3d.dll!+214f, as documented by Red Hat/NVD/CNNVD/Wiki feeds. Impact per CVSS shows Confidentiality, Integrity, and Availability all HIGH, with network attack vector, no us...
CVE-2020-13880
CVE-2020-13880 affects the IrfanView B3D PlugIns before version 4.56. The vulnerability is a heap-based out-of-bounds write in the B3d.dll!+1cbf, as reported across multiple sources (NVD, RH, PRION, CNNVD, CVE lists). Impact is described as high confidentiality, integrity, and availability concer...
CVE-2020-13880
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+1cbf heap-based out-of-bounds write...
PT-2024-10781 · Irfanview · Irfanview B3D Plugins
Name of the Vulnerable Software and Affected Versions: IrfanView B3D PlugIns versions prior to 4.56 Description: The issue is related to a heap-based out-of-bounds write in the B3d.dll module. This occurs at the B3d.dll!+27ef location, indicating a specific point of vulnerability in the code. The...
CVE-2020-13879
IrfanView B3D PlugIns before version 4.56 has a B3d.dll!+214f heap-based out-of-bounds write...
FunnelKit Checkout < 3.11.0 - Subscriber+ Arbitrary Plugin Activation
Description The FunnelKit Checkout plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on an unknown function in all versions up to, and including, 3.10.3. This makes it possible for authenticated attackers, with subscriber access and above, t...
SUSE: Security Advisory (SUSE-SU-2024:0005-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2024:0005-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0005-1 advisory. - CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free bsc1217213. - CVE-2023-40475: Fixed GStreame...
SUSE-SU-2024:0005-1 Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-44446: Fixed GStreamer MXF File Parsing Use-After-Free bsc1217213. - CVE-2023-40475: Fixed GStreamer MXF File Parsing Integer Overflow bsc1215792...
gstreamer1-plugins-bad-free security update
1.10.4-4 - Patch CVE-2023-44446: MXF demuxer use-after-free - Disable gtk-doc to fix build - Resolves: RHEL-16793...
Oracle Linux 7 : gstreamer1-plugins-bad-free (ELSA-2024-0013)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-0013 advisory. - Patch CVE-2023-44446: MXF demuxer use-after-free Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
CVE-2023-52180
CVE-2023-52180 affects Recipe Maker For Your Food Blog from Zip Recipes (Zip Recipes) up to version 8.1.0. The Wordfence vulnerability list notes an Authenticated (Contributor+) SQL Injection in this plugin, with a patch status of Patched. Impact is SQL Injection that can be triggered by an authe...