Lucene search
+L

98 matches found

Vulnrichment
Vulnrichment
added 2026/04/07 1:49 p.m.4 views

CVE-2026-20889

A heap-based buffer overflow vulnerability exists in the x3fthumbloader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS6.3AI score0.00645EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2026/04/07 1:49 p.m.7 views

CVE-2026-20889

A heap-based buffer overflow vulnerability exists in the x3fthumbloader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS6AI score0.00645EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2026/04/07 1:49 p.m.3 views

CVE-2026-20889

A heap-based buffer overflow vulnerability exists in the x3fthumbloader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

9.8CVSS6.2AI score0.00645EPSS
Exploits1
CNNVD
CNNVD
added 2026/04/07 12:0 a.m.8 views

Libraw 安全漏洞

Libraw is a C++ library developed by Libraw Inc. that processes RAW CRW/CR2, NEF, RAF, DNG, and other formats images. It supports various operating systems. Libraw has a security vulnerability, which stems from a heap buffer overflow in the x3fthumbloader function, potentially leading to a heap...

9.8CVSS6.4AI score0.00645EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.6 views

PT-2026-30830

Name of the Vulnerable Software and Affected Versions LibRaw Commit d20315b Description A heap-based buffer overflow vulnerability exists in the x3f thumb loader functionality. A specially crafted malicious file can trigger a heap buffer overflow. An attacker can provide a malicious file to explo...

9.8CVSS6.5AI score0.00645EPSS
Exploits1References56
Tenable Nessus
Tenable Nessus
added 2026/04/07 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-20889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability exists in the x3fthumbloader functionality of LibRaw Commit d20315b. A specially crafted malicious file can lead to a...

9.8CVSS6.5AI score0.00645EPSS
Exploits1References4
EUVD
EUVD
added 2026/03/05 6:30 a.m.8 views

EUVD-2026-9679

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Green Thumb greenthumb allows PHP Local File Inclusion.This issue affects Green Thumb: from n/a through = 1.1.12...

5.9AI score0.00403EPSS
Exploits0References2
NVD
NVD
added 2026/03/05 6:16 a.m.5 views

CVE-2026-28017

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Green Thumb greenthumb allows PHP Local File Inclusion.This issue affects Green Thumb: from n/a through = 1.1.12...

8.1CVSS0.00403EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/05 5:54 a.m.35 views

CVE-2026-28017 WordPress Green Thumb theme <= 1.1.12 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Green Thumb greenthumb allows PHP Local File Inclusion.This issue affects Green Thumb: from n/a through = 1.1.12...

8.1CVSS0.00403EPSS
Exploits0References1
CVE
CVE
added 2026/03/05 5:54 a.m.12 views

CVE-2026-28017

CVE-2026-28017 := Local File Inclusion in WordPress ThemeREX Green Thumb (theme: Green Thumb)

8.1CVSS5.9AI score0.00403EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 5:54 a.m.5 views

CVE-2026-28017

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Green Thumb greenthumb allows PHP Local File Inclusion.This issue affects Green Thumb: from n/a through = 1.1.12...

5.9AI score0.00403EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/05 5:54 a.m.2 views

CVE-2026-28017 WordPress Green Thumb theme <= 1.1.12 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Green Thumb greenthumb allows PHP Local File Inclusion.This issue affects Green Thumb: from n/a through = 1.1.12...

8.1CVSS5.8AI score0.00403EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.31 views

PT-2026-23299

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Green Thumb greenthumb allows PHP Local File Inclusion.This issue affects Green Thumb: from n/a through = 1.1.12...

5.9AI score0.00403EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.13 views

WordPress plugin Green Thumb 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.1CVSS5.8AI score0.00403EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/02 11:33 a.m.5 views

WordPress Green Thumb theme <= 1.1.12 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Green Thumb versions = 1.1.12...

8.1CVSS5.9AI score0.00403EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/12/04 3:0 p.m.5 views

EUVD-2025-201176

A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files...

5.4CVSS6.3AI score0.00359EPSS
Exploits0References2
VulnCheck KEV
VulnCheck KEV
added 2025/10/17 12:0 a.m.18 views

VulnCheck KEV: CVE-2023-50917

MajorDoMo aka Major Domestic Module before 0662e5e allows command execution via thumb.php shell metacharacters. NOTE: this is unrelated to the Majordomo mailing-list manager...

9.8CVSS6AI score0.38263EPSS
In wildExploits6References178
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-40617

Malicious code in bioql PyPI...

5.3CVSS5.4AI score0.00737EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2025-28058

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00209EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-20148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection attacks via crafted metadata in a wp.getMediaItem XMLRPC call...

9.8CVSS7.3AI score0.30887EPSS
Exploits1References2
Rows per page
Query Builder