Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
280 results · page 3 of 6
Oct 29, 2025GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.CVE-2025-10921 · Other software · GIMP · reported by zdi-disclosures@trendmicro.comHigh 7.8
GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803.
- Product
- GIMP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgitlab.gnome.orgzerodayinitiative.com
Oct 29, 2025GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.CVE-2025-10920 · Other software · GIMP · reported by zdi-disclosures@trendmicro.comHigh 7.8
GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICNS files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27684.
- Product
- GIMP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgitlab.gnome.orgzerodayinitiative.com
Oct 27, 2025StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a stack overflow via the cgiMain function at download.cgi.CVE-2025-52264 · Other software · reported by MITREHigh 8
StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a stack overflow via the cgiMain function at download.cgi.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comstarcharge.com
Aug 11, 2025MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main applicCVE-2025-8672 · Other software · GIMP · reported by cvd@cert.plMedium 4.8
MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application's previously granted TCC permissions to access user's files in privacy-protected folders without triggering user prompts. Accessing other resources beyond previously granted TCC permissions will prompt the user for approval in the name of GIMP, potentially disguising attacker's malicious intent. This issue has been fixed in 3.1.4.2 version of GIMP.
- Product
- GIMP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.plgitlab.gnome.org
Aug 5, 2025Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability.CVE-2025-8654 · Other software · Kenwood · reported by zdi-disclosures@trendmicro.comHigh 8.8
Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ReadMVGImage function. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-26313.
- Product
- DMX958XR
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 13, 2025A flaw was found in GIMP.CVE-2025-6035 · Other software · Red Hat · reported by Red HatMedium 6.1
A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs due to unchecked multiplication of image dimensions, such as width, height, and bytes-per-pixel (img_bpp), which can result in allocating insufficient memory and subsequently performing out-of-bounds writes. This issue could lead to heap corruption, a potential denial of service (DoS), or arbitrary code execution in certain scenarios.
- Product
- Red Hat Enterprise Linux 6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.combugzilla.redhat.com
Jun 9, 2025Incorrect authorization vulnerability in TCMAN's GIM v11.CVE-2025-40670 · Other software · TCMAN · reported by cve-coordination@incibe.esHigh 7.1
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to create a user and assign it many privileges by sending a POST request to /PC/frmGestionUser.aspx/updateUser.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 9, 2025Incorrect authorization vulnerability in TCMAN's GIM v11.CVE-2025-40669 · Other software · TCMAN · reported by cve-coordination@incibe.esHigh 7.1
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to modify the permissions held by each of the application's users, including the user himself by sending a POST request to /PC/Options.aspx?Command=2&Page=-1.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 9, 2025Incorrect authorization vulnerability in TCMAN's GIM v11.CVE-2025-40668 · Other software · TCMAN · reported by cve-coordination@incibe.esHigh 7.1
Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an attacker, with low privilege level, to change the password of other users through a POST request using the parameters idUser, PasswordActual, PasswordNew and PasswordNewRepeat in /PC/WebService.aspx/validateChangePassword%C3%B1a. To exploit the vulnerability the PasswordActual parameter must be empty.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 6, 2025GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability.CVE-2025-5473 · Other software · GIMP · reported by zdi-disclosures@trendmicro.comHigh 8.8
GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICO files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26752.
- Product
- GIMP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgimp.orgzerodayinitiative.com
May 27, 2025A flaw was found in GIMP when processing XCF image files.CVE-2025-48798 · Other software · Red Hat · reported by Red HatHigh 7.3
A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.
- Product
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.comaccess.redhat.com
May 27, 2025A flaw was found in GIMP when processing certain TGA image files.CVE-2025-48797 · Other software · Red Hat · reported by Red HatHigh 7.3
A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow.
- Product
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.comaccess.redhat.com
May 27, 2025A flaw was found in GIMP.CVE-2025-48796 · Other software · Red Hat · reported by Red HatHigh 7.3
A flaw was found in GIMP. The GIMP ani_load_image() function is vulnerable to a stack-based overflow. If a user opens.ANI files, GIMP may be used to store more information than the capacity allows. This flaw allows a malicious ANI file to trigger arbitrary code execution.
- Product
- Red Hat Enterprise Linux 6
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.combugzilla.redhat.com
May 26, 2025Missing authorization vulnerability in TCMAN's GIM v11.CVE-2025-40667 · Other software · TCMAN · reported by cve-coordination@incibe.esHigh 8.7
Missing authorization vulnerability in TCMAN's GIM v11. This allows an authenticated attacker to access any functionality of the application even when they are not available through the user interface. To exploit the vulnerability the attacker must modify the HTTP code of the response from ‘302 Found’ to ‘200 OK’, as well as the hidden fields hdnReadOnly and hdnUserLogin.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 26, 2025Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11.CVE-2025-40666 · Other software · TCMAN · reported by cve-coordination@incibe.esHigh 8.7
Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID parameter in/GIMWeb/PC/frmPreventivosList.aspx.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 26, 2025Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11.CVE-2025-40665 · Other software · TCMAN · reported by cve-coordination@incibe.esHigh 8.7
Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID parameter in /GIMWeb/PC/frmCorrectivosList.aspx.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 26, 2025Missing authentication vulnerability in TCMAN GIM v11.CVE-2025-40664 · Other software · TCMAN · reported by cve-coordination@incibe.esCritical 9.3
Missing authentication vulnerability in TCMAN GIM v11. This allows an unauthenticated attacker to access the resources /frmGestionUser.aspx/GetData, /frmGestionUser.aspx/updateUser and /frmGestionUser.aspx/DeleteUser.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 6, 2025Unrestricted file upload in TCMAN's GIM v11.CVE-2025-40625 · Other software · TCMAN · reported by cve-coordination@incibe.esCritical 9.3
Unrestricted file upload in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to upload any file within the server, even a malicious file to obtain a Remote Code Execution (RCE).
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 6, 2025SQL injection in TCMAN's GIM v11.CVE-2025-40624 · Other software · TCMAN · reported by cve-coordination@incibe.esCritical 9.3
SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘User’ and “email” parameters of the ‘updatePassword’ endpoint.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 6, 2025SQL injection in TCMAN's GIM v11.CVE-2025-40623 · Other software · TCMAN · reported by cve-coordination@incibe.esCritical 9.3
SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘Sender’ and “email” parameters of the ‘createNotificationAndroid’ endpoint.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 6, 2025SQL injection in TCMAN's GIM v11.CVE-2025-40622 · Other software · TCMAN · reported by cve-coordination@incibe.esCritical 9.3
SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘username’ parameter of the ‘GetLastDatePasswordChange’ endpoint.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 6, 2025SQL injection in TCMAN's GIM v11.CVE-2025-40621 · Other software · TCMAN · reported by cve-coordination@incibe.esCritical 9.3
SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘User’ parameter of the ‘ValidateUserAndGetData’ endpoint.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 6, 2025SQL injection in TCMAN's GIM v11.CVE-2025-40620 · Other software · TCMAN · reported by cve-coordination@incibe.esCritical 9.3
SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘User’ parameter of the ‘ValidateUserAndWS’ endpoint.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 23, 2025GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.CVE-2025-2761 · Other software · GIMP · reported by zdi-disclosures@trendmicro.comHigh 7.8
GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FLI files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25100.
- Product
- GIMP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordzerodayinitiative.comlists.debian.org
Apr 23, 2025GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability.CVE-2025-2760 · Other software · GIMP · reported by zdi-disclosures@trendmicro.comHigh 7.8
GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25082.
- Product
- GIMP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordzerodayinitiative.comlists.debian.org
Mar 7, 2025ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.CVE-2025-27796 · Other software · GraphicsMagick · reported by MITREMedium 4.5
ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.
- Product
- GraphicsMagick
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgraphicsmagick.orgfoss.heptapod.net
May 2, 2024GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability.CVE-2023-44444 · Other software · GIMP · reported by zdi-disclosures@trendmicro.comHigh 7.8
GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22097.
- Product
- GIMP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgimp.orgzerodayinitiative.com
May 2, 2024GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability.CVE-2023-44443 · Other software · GIMP · reported by zdi-disclosures@trendmicro.comHigh 7.8
GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22096.
- Product
- GIMP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgimp.orgzerodayinitiative.com
May 2, 2024GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.CVE-2023-44442 · Other software · GIMP · reported by zdi-disclosures@trendmicro.comHigh 7.8
GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current process. Was ZDI-CAN-22094.
- Product
- GIMP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgimp.orgzerodayinitiative.com
May 2, 2024GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.CVE-2023-44441 · Other software · GIMP · reported by zdi-disclosures@trendmicro.comHigh 7.8
GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22093.
- Product
- GIMP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgimp.orgzerodayinitiative.com
Oct 4, 2023The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, CVE-2022-36277 · Other software · TCMAN · reported by cve-coordination@incibe.esMedium 6.5
The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditServicio.aspx files in TCMAN GIM v8.0.1, could allow an attacker to perform persistent XSS attacks.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 4, 2023TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'.CVE-2022-36276 · Other software · TCMAN · reported by cve-coordination@incibe.esCritical 9.9
TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'. The exploitation of this vulnerability might allow a remote attacker to directly interact with the database.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 31, 2023Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to executeCVE-2023-41642 · Other software · Grupposcai · reported by MITREMedium 6.1
Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload injected into the VIEWSTATE parameter.
- Product
- Realgimm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 31, 2023An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain sensitive technical CVE-2023-41640 · Other software · Grupposcai · reported by MITREHigh 8.8
An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain sensitive technical information via a crafted SQL query.
- Product
- Realgimm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 31, 2023An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploadCVE-2023-41638 · Other software · Grupposcai · reported by MITREHigh 8.8
An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted file.
- Product
- Realgimm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 31, 2023An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploadingCVE-2023-41637 · Other software · Grupposcai · reported by MITRECritical 9.8
An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file.
- Product
- Realgimm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 31, 2023A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrarCVE-2023-41636 · Other software · Grupposcai · reported by MITRECritical 9.8
A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query.
- Product
- Realgimm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 31, 2023A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to read any file in the fCVE-2023-41635 · Other software · Grupposcai · reported by MITREMedium 6.5
A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to read any file in the filesystem via supplying a crafted XML file.
- Product
- Realgimm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2023Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecifiCVE-2020-18831 · Other software · Exiv2 · reported by MITREHigh 7.8
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file.
- Product
- Exiv2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 5, 2023A vulnerability has been found in Gimmie Plugin 1.2.2 on vBulletin and classified as critical.CVE-2014-125086 · Other software · Gimmie Project · reported by VulDBMedium 5.5
A vulnerability has been found in Gimmie Plugin 1.2.2 on vBulletin and classified as critical. Affected by this vulnerability is an unknown functionality of the file trigger_login.php. The manipulation of the argument userid leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. The patch is named fe851002d20a8d6196a5abb68bafec4102964d5b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220207.
- Product
- Gimmie
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 5, 2023A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin.CVE-2014-125085 · Other software · Gimmie Project · reported by VulDBMedium 5.5
A vulnerability, which was classified as critical, was found in Gimmie Plugin 1.2.2 on vBulletin. Affected is an unknown function of the file trigger_ratethread.php. The manipulation of the argument t/postusername leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. The patch is identified as f11a136e9cbd24997354965178728dc22a2aa2ed. It is recommended to upgrade the affected component. VDB-220206 is the identifier assigned to this vulnerability.
- Product
- Gimmie
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 5, 2023A vulnerability, which was classified as critical, has been found in Gimmie Plugin 1.2.2 on vBulletin.CVE-2014-125084 · Other software · Gimmie Project · reported by VulDBMedium 5.5
A vulnerability, which was classified as critical, has been found in Gimmie Plugin 1.2.2 on vBulletin. This issue affects some unknown processing of the file trigger_referral.php. The manipulation of the argument referrername leads to sql injection. Upgrading to version 1.3.0 is able to address this issue. The identifier of the patch is 7194a09353dd24a274678383a4418f2fd3fce6f7. It is recommended to upgrade the affected component. The identifier VDB-220205 was assigned to this vulnerability.
- Product
- Gimmie
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 16, 2022In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check.CVE-2022-20546 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240266798
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Aug 24, 2022A heap overflow flaw was found in libpngs' pngimage.c program.CVE-2021-4214 · Other software · Libpng · reported by Red HatMedium 5.5
A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network access to pass a specially crafted PNG file to the pngimage utility, causing an application to crash, leading to a denial of service.
- Product
- Libpng
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.combugzilla.redhat.com
Jun 24, 2022An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of CVE-2022-32990 · Other software · Gimp · reported by MITREMedium 5.5
An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).
- Product
- Gimp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgitlab.gnome.orggitlab.gnome.org
May 17, 2022GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow.CVE-2022-30067 · Other software · Gimp · reported by MITREMedium 5.5
GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.
- Product
- Gimp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgitlab.gnome.orglists.debian.org
Apr 5, 2022There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050.CVE-2022-23909 · Other software · Gimmal · reported by MITREHigh 7.8
There is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2.20328.2050. This might allow a local user to escalate privileges by creating a "C:\Program Files\Sherpa Software\Sherpa.exe" file.
- Product
- Sherpa Connector Service
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comgithub.com
Feb 24, 2022A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c.CVE-2021-3596 · Other software · Imagemagick · reported by Red HatMedium 6.5
A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c. This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt() and uses the value directly, which leads to a crash and segmentation fault.
- Product
- Imagemagick
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.redhat.comgithub.com
Feb 11, 2022The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks.CVE-2021-4046 · Other software · TCMAN · reported by cve-coordination@incibe.esMedium 5.4
The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be used to carry out a number of browser-based attacks including browser hijacking or theft of sensitive data.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 17, 2021TCMAN GIM does not perform an authorization check when trying to access determined resources.CVE-2021-40853 · Other software · TCMAN · reported by cve-coordination@incibe.esHigh 7.2
TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible information.
- Product
- GIM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.