CVE-2022-38731

Qaelum DOSE 18.08 through 21.1 before 21.2 allows Directory Traversal via the loadimages name parameter. It allows a user to specify an arbitrary location on the server's filesystem from which to load an image. Only images are displayed to the attacker. All other files are loaded but not displaye...

Juniper Security Director Policy Enforcer 访问控制错误漏洞

Juniper Security Director Policy Enforcer is a Juniper module that enables centralized issuance of security policies and automation of threat response. An access control error vulnerability exists in Juniper Security Director Policy Enforcer versions prior to 23.1R1 Hotpatch v3, which stems from ...

EUVD-2023-0077

Malicious code in bioql PyPI...

CVE-2024-39918

CVE-2024-39918 affects @jmondi/url-to-png. The root cause is lack of sanitization in the ImageId input (extract_query_params.ts), enabling path traversal that lets an attacker store a generated PNG in arbitrary server-accessible locations. Public disclosures across NVD/Red Hat/OSV/Veracode indica...

CVE-2021-26601

ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php imagetemp Directory Traversal...

Important: Red Hat Security Advisory: libwebp security update

An update for libwebp is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2020-10596

OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section...

CVE-2013-6387

Cross-site scripting XSS vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the description field...

adv94-K-159-2008.txt

ECHOADV94$2008 ----------------------------------------------------------------------------------------- ECHOADV94$2008 Kmita Mail = 3.0 file Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

Advisory-18.txt

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 18 - 03/03/06 -------------------------------------------------------- Program: phpBB Homepage: http://www.phpbb.com Vulnerable Versions: All phpBB versions Risk: High Risk!! Impact: Multiple DoS...