WordPress插件Image Photo Gallery Final Tiles Grid跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blogging sites on servers with PHP and MySQL.A cross-site scripting vulnerability exists in versions of the WordPress plugin Image Photo Galle...

CVE-2022-0186

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard...

CVE-2022-0186 Image Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site Scripting

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard...

CVE-2022-0186

The WordPress plugin Image Photo Gallery Final Tiles Grid (Final Tiles Grid) before version 3.5.3 is vulnerable to stored cross-site scripting due to insufficient sanitisation/escaping of the Description field when editing a gallery. This allows users with a role as low as contributor to execute ...

PT-2022-13021

Name of the Vulnerable Software and Affected Versions Image Photo Gallery Final Tiles Grid WordPress plugin versions prior to 3.5.3 Description The issue allows users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery...

CVE-2022-0186: Improper Neutralization of Input During Web Page Generation

The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blogging sites on servers with PHP and MySQL.A cross-site scripting vulnerability exists in versions of the WordPress plugin Image Photo Galle...

PT-2022-36842

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 4 crash has been reported. The crash state includes functions such as row mt worker hook, execute, and av1 decode tg tiles and...

Description of the security update for SharePoint Enterprise Server 2016: February 8, 2022 (KB5002136)

None None...

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.5.2 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Harshit aka fumenoid and Sidhhant Chouhan aka sidchn in WordPress Image Photo Gallery Final Tiles Grid plugin versions = 3.5.2. Solution Update the WordPress Image Photo Gallery Final Tiles Grid plugin to the latest available version at...

CVE-2021-41950

A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on the ResourceSpace server via the provider and variant parameters in pages/ajax/tiles.php. Attackers can delete configuration or source code files, causing the...

PT-2021-23456 · Unknown · Resourcespace

Name of the Vulnerable Software and Affected Versions: ResourceSpace versions 9.6 through 9.6 rev 18277 Description: A directory traversal issue allows remote unauthenticated attackers to delete arbitrary files on the server via the provider and variant parameters in "pages/ajax/tiles.php"...

April 28, 2021—KB5001391 (OS Builds 19041.964 and 19042.964) Preview

None None...

[SECURITY] Fedora 34 Update: swell-foop-40~rc-1.fc34

Clear the screen by removing groups of colored and shaped tiles...

Fedora: Security Advisory for swell-foop (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-9388

CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administrator executing arbitrary code in a HTML dashboard tile via a crafted HTML page, or by uploading a malicious SVG payload into a dashboard...

PT-2021-12848 · Squaredup · Squaredup

Name of the Vulnerable Software and Affected Versions: SquaredUp versions prior to 4.6.0 Description: The issue allows for a potential CSRF attack, where an administrator could execute arbitrary code in a HTML dashboard tile via a crafted HTML page, or by uploading a malicious SVG payload into a...

OSV-2020-1830 Heap-use-after-free in grk::TileProcessor::~TileProcessor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25873 Crash type: Heap-use-after-free READ 8 Crash state: grk::TileProcessor::TileProcessor grk::CodeStream::decompresstiles grk::CodeStream::dodecompress...

PT-2020-5891 · Openexr +5 · Openexr +5

Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.0-beta Description: The issue is related to an integer overflow in the calculateNumTiles function of the OpenEXR library when processing input files. This can be exploited by a remote attacker to cause a denial o...

HashHeroes Tiles Security Breach

HashHeroes Tiles is an ethereum-based guessing game. A security vulnerability exists in the 'determineWinner' function in the smart contract implementation of HashHeroes Tiles. An attacker could exploit this vulnerability to control the awarding of prizes by being the last user to make a purchase...