361 matches found
WordPress Product Image Watermark for Woo plugin <= 1.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Product Image Watermark for Woo plugin versions = 1.0.3. Solution Update the WordPress Product Image Watermark for Woo plugin to the latest available version at least 1.0.4...
GSD-2022-1000659 drm/amd/display: watermark latencies is not enough on DCN31
drm/amd/display: watermark latencies is not enough on DCN31 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...
GSD-2022-1000658 drm/amd/display: Update watermark values for DCN301
drm/amd/display: Update watermark values for DCN301 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.8 by commit...
GSD-2022-1000576 drm/amd/display: watermark latencies is not enough on DCN31
drm/amd/display: watermark latencies is not enough on DCN31 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.22 by commit...
CVE-2021-32748
Nextcloud Richdocuments in an open source self hosted online office. Nextcloud uses the WOPI "Web Application Open Platform Interface" protocol to communicate with the Collabora Editor, the communication between these two services was not protected by a credentials or IP check. Whilst this does n...
CVE-2021-32748
Nextcloud Richdocuments in an open source self hosted online office. Nextcloud uses the WOPI "Web Application Open Platform Interface" protocol to communicate with the Collabora Editor, the communication between these two services was not protected by a credentials or IP check. Whilst this does n...
CVE-2021-32748
Nextcloud Richdocuments in an open source self hosted online office. Nextcloud uses the WOPI "Web Application Open Platform Interface" protocol to communicate with the Collabora Editor, the communication between these two services was not protected by a credentials or IP check. Whilst this does n...
Design/Logic Flaw
Nextcloud Richdocuments in an open source self hosted online office. Nextcloud uses the WOPI "Web Application Open Platform Interface" protocol to communicate with the Collabora Editor, the communication between these two services was not protected by a credentials or IP check. Whilst this does n...
CVE-2021-32748
The CVE-2021-32748 issue affects Nextcloud Richdocuments, where WOPI API calls between Richdocuments and Collabora Editor lacked credentials/IP-based access checks. This allowed bypassing watermarks/download protections configured via File Access Control, though it did not grant access to data un...
Watermark Camera Has Janus Android Signature Vulnerability
Watermark Camera is a photo beautification mobile software. Watermark Camera has a Janus Android signature vulnerability that can be exploited by attackers to gain root access to the system...
The vulnerability affects the implementation of the “AddWatermark” command in the Foxit Reader text viewer software and the Foxit PhantomPDF PDF editing software. This allows a malicious individual to execute arbitrary code.
The vulnerability of the “AddWatermark” command in the Foxit Reader text viewer and the Foxit PhantomPDF PDF editing program is related to data type conversion errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
Watermark Manager (Windows client) suffers from a dll hijacking vulnerability
Watermark Manager is a software to remove watermarks from photos. A dll hijacking vulnerability exists in Watermark Manager Windows client. An attacker can exploit this vulnerability to execute malicious code...
CVE-2020-9013
Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting from the HTML source code...
CVE-2020-8856
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2020-8845
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Design/Logic Flaw
This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Foxit PhantomPDF Memory Error Reference Remote Code Execution Vulnerability (CNVD-2020-10628)
PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A memory error referencing remote code execution vulnerability exists in the handling of watermarks in Foxit PhantomPDF 9.7.0.29455 and earlier versions. The vulnerability stems from a...
CVE-2019-9692
class.showtime2image.php in CMS Made Simple CMSMS before 2.2.10 does not ensure that a watermark file has a standard image file extension GIF, JPG, JPEG, or PNG...
