1023 matches found
JetWidgets For Elementor < 1.0.14 - Contributor+ Stored XSS via Shortcode
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks jw-posts showimage='yes'...
CVE-2022-39907
CVE-2022-39907 affects Samsung decoding library used in Samsung Mobile devices. The issue is an integer overflow in the library that handles video thumbnails, enabling a local attacker to trigger an out-of-bounds write. Impact is described as high (confidentiality/integiry/availability concerns)....
PT-2022-25100 · Samsung · Samsung Decoding Library
Name of the Vulnerable Software and Affected Versions: Samsung decoding library versions prior to SMR Dec-2022 Release 1 Description: The issue is related to an integer overflow in the Samsung decoding library, specifically affecting the handling of video thumbnails. This allows a local attacker ...
USN-5736-1: ImageMagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain values when processing PDF files. If a user or automated system using ImageMagick were tricked into opening a specially crafted PDF file, an attacker could exploit this to cause a denial of service. This issue only affected Ubuntu 14....
Fedora: Security Advisory for ImageMagick (FEDORA-2022-776925f086)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Blender 安全漏洞
Blender is a professional free and open source 3D computer graphics software. A security vulnerability exists in Blender that stems from a logic error, Blender-thumnailing infinite loop...
PT-2022-18948 · Blender +1 · Blender +1
Name of the Vulnerable Software and Affected Versions: Blender version 3.3.0 Description: A flaw in the software may cause an integer overflow in the blendthumb extract.cc file, potentially leading to a program crash or memory corruption. Specifically, when a loaded and valid image is crafted to...
tifig 代码问题漏洞
tifig is a fast HEIF image converter for thumbnails from Monostream open source. A code issue vulnerability exists in tifig version v0.2.2, which stems from a memory segment exception in the getType function in its /common/bbox.cpp component...
WordPress Plugin AJAX Thumbnail Rebuild 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
Blender 缓冲区错误漏洞
Blender is a specialized free and open source 3D computer graphics software. A buffer error vulnerability exists in Blender that stems from an out-of-bounds read or write that occurs when an image is converted to a vertically flipped thumbnail...
MAL-2022-2145 Malicious code in component-thumbnail (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a23a84ff0f02b841e60133fc4054180ea026a36b009826b23ab7b87adaf47e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in component-thumbnail (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a23a84ff0f02b841e60133fc4054180ea026a36b009826b23ab7b87adaf47e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
OPENSUSE-SU-2022:10001-1 Security update for pcmanfm
This update for pcmanfm fixes the following issues: update to 1.3.2: Fixed case when some keyboard shortcuts stopped working: Alt+Home, Alt+Up Fixed sytem reboot delayed for 90 seconds in some cases new upstream release of pcmanfm 1.3.1 fixed crash on reload while directory changes changed size o...
Security update for pcmanfm (moderate)
openSUSE Security Update: Security update for pcmanfm Announcement ID: openSUSE-SU-2022:10001-1 Rating: moderate References: 1039140 Cross-References: CVE-2017-8934 CVSS scores: CVE-2017-8934 NVD : 5.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP3 A...
DEBIAN-CVE-2022-0458
Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-0458
Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2022-0458
Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-0458
Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-0458
CVE-2022-0458 is a Chrome use-after-free vulnerability in the Thumbnail Tab Strip prior to 98.0.4758.80 that could allow heap corruption via a crafted HTML page. The weakness affects Chrome/Chromium up to version 98.0.4758.80 and was publicly acknowledged in Chrome’s February 2022 stable-channel ...
