WP Simple Galleries <= 1.34 - Contributor+ PHP Object Injection

Description The plugin does not properly handle deserialization of untrusted input from the 'wpsimplegallerygallery' post meta via 'wpsgallery' shortcode...

SUSE CVE-2019-14906

A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL packages, SDL versions through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow flaw while copying an existing surface into a new optimized...

Rockwell Automation Arena Simulation Software Buffer Overflow Vulnerability (CNVD-2024-30639)

Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. Rockwell Automation Arena Simulation Software suffers from a buffer overflow vulnerability that originates from a boundary error when the...

CVE-2023-5583

The WP Simple Galleries plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.34 via deserialization of untrusted input from the 'wpsimplegallerygallery' post meta via 'wpsgallery' shortcode. This allows authenticated attackers, with contributor-level...

Deserialization of untrusted data

The WP Simple Galleries plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.34 via deserialization of untrusted input from the 'wpsimplegallerygallery' post meta via 'wpsgallery' shortcode. This allows authenticated attackers, with contributor-level...

CVE-2023-5583

CVE-2023-5583 affects WP Simple Galleries for WordPress (≤ v1.34). The vulnerability is a PHP Object Injection via deserialization of untrusted input from the wpsimplegallery_gallery post meta through the wpsgallery shortcode. It requires contributor-level permissions or higher and could enable a...

Rockwell Automation Arena Simulation Software 缓冲区错误漏洞

Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. Rockwell Automation Arena Simulation Software suffers from a buffer overflow vulnerability that originates from a boundary error when the...

CVE-2023-4386 Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries

The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the getposts function. This allows unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. ...

CVE-2023-4402 Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the getproducts function. This allows unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugi...

python-reportlab: code injection in paraparser.py allows code execution

A code injection vulnerability was found in python-reportlab that may allow an attacker to execute code while parsing a unichar element attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable and could allow remote code execution...

python-reportlab: code injection in paraparser.py allows code execution

A code injection vulnerability was found in python-reportlab that may allow an attacker to execute code while parsing a unichar element attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable and could allow remote code execution...

python-reportlab: code injection in paraparser.py allows code execution

A code injection vulnerability was found in python-reportlab that may allow an attacker to execute code while parsing a unichar element attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable and could allow remote code execution...

python-reportlab: code injection in paraparser.py allows code execution

A code injection vulnerability was found in python-reportlab that may allow an attacker to execute code while parsing a unichar element attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable and could allow remote code execution...

Yifan YF325 Buffer Overflow Vulnerability

Yifan YF325 is a wireless router from Yifan. The Yifan YF325 suffers from a buffer overflow vulnerability that stems from a boundary error in the gwcfgcgisetmanagepostdata function malloc function when handling untrusted input. An attacker can exploit this vulnerability to cause a buffer overflow...

Adobe Photoshop Buffer Overflow Vulnerability (CNVD-2023-76927)

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A...

Yifan YF325 cgi_handler function buffer overflow vulnerability

Yifan YF325 is an industrial cellular router. A buffer overflow vulnerability exists in Yifan YF325 v1.020221108, which originates from a boundary error in the nextpage parameter of the cgihandler function when handling untrusted input. An attacker can exploit this vulnerability to cause a buffer...

SUSE CVE-2023-44821

Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect GifRealloc calls, might allow a denial of service memory consumption. NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arriv...

Yifan YF325 安全漏洞

Yifan YF325 is an industrial cellular router. The Yifan YF325 gozilacgi function suffers from a buffer overflow vulnerability that originates from a boundary error in the nextpage parameter of the gozilacgi function when handling untrusted input. An attacker can exploit this vulnerability to caus...

Yifan YF325 安全漏洞

Yifan YF325 is an industrial cellular router. A buffer overflow vulnerability exists in Yifan YF325 v1.020221108, which originates from a boundary error in the nextpage parameter of the cgihandler function when handling untrusted input. An attacker can exploit this vulnerability to cause a buffer...

Vim buffer overflow vulnerability (CNVD-2024-40470)

Vim is a cross-platform text editor. A buffer overflow vulnerability exists in Vim versions prior to 9.0.1969, which stems from a boundary error in the function truncstring in src/message.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code...