Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
15 results
Aug 1, 2018A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54.CVE-2018-3923 · Other software · Computerinsel · reported by talos-cna@cisco.comHigh 7.8
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 1, 2018A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54.CVE-2018-3922 · Other software · Computerinsel · reported by talos-cna@cisco.comHigh 7.8
A memory corruption vulnerability exists in the ANI-parsing functionality of Computerinsel Photoline 20.54. A specially crafted ANI image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver an ANI image to trigger this vulnerability and gain code execution.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 1, 2018A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54.CVE-2018-3921 · Other software · Computerinsel · reported by talos-cna@cisco.comHigh 7.8
A memory corruption vulnerability exists in the PSD-parsing functionality of Computerinsel Photoline 20.54. A specially crafted PSD image processed via the application can lead to a stack overflow, overwriting arbitrary data. An attacker can deliver a PSD image to trigger this vulnerability and gain code execution.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Apr 24, 2018An memory corruption vulnerability exists in the .PCX parsing functionality of Computerinsel Photoline 20.02.CVE-2017-12107 · Other software · Computerinsel · reported by talos-cna@cisco.comHigh 8.8
An memory corruption vulnerability exists in the .PCX parsing functionality of Computerinsel Photoline 20.02. A specially crafted .PCX file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .PCX file to trigger this vulnerability.
- Product
- Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Apr 12, 2018A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data.CVE-2018-3889 · Other software · Talos · reported by talos-cna@cisco.comHigh 7.8
A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Apr 12, 2018A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data.CVE-2018-3868 · Other software · Talos · reported by talos-cna@cisco.comHigh 7.8
A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Apr 12, 2018A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwritingCVE-2018-3862 · Other software · Talos · reported by talos-cna@cisco.comHigh 7.8
A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Apr 12, 2018A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data.CVE-2018-3861 · Other software · Talos · reported by talos-cna@cisco.comHigh 7.8
A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Apr 11, 2018A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53.CVE-2018-3888 · Other software · Talos · reported by talos-cna@cisco.comHigh 7.8
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Apr 11, 2018A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53.CVE-2018-3887 · Other software · Talos · reported by talos-cna@cisco.comHigh 7.8
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Apr 11, 2018A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53.CVE-2018-3886 · Other software · Talos · reported by talos-cna@cisco.comHigh 7.8
A memory corruption vulnerability exists in the PCX-parsing functionality of Computerinsel Photoline 20.53. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this vulnerability and gain code execution.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Oct 5, 2017An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02.CVE-2017-2920 · Other software · Talos · reported by talos-cna@cisco.comHigh 7.8
An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A specially crafted .SVG file can cause a vulnerability resulting in memory corruption, which can potentially lead to arbitrary code execution. An attacker can send a specific .SVG file to trigger this vulnerability.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comgithub.com
Oct 5, 2017An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02.CVE-2017-2880 · Other software · Talos · reported by talos-cna@cisco.comHigh 7.8
An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A specially crafted .GIF file can cause a vulnerability resulting in potential code execution. An attacker can send specific .GIF file to trigger this vulnerability.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comtalosintelligence.com
Oct 5, 2017A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02.CVE-2017-12106 · Other software · Talos · reported by talos-cna@cisco.comHigh 8.8
A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially crafted .TGA file can cause an out of bounds write resulting in potential code execution. An attacker can send a specific .TGA file to trigger this vulnerability.
- Product
- Computerinsel Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comtalosintelligence.com
Feb 13, 2012Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) fiCVE-2012-1055 · Other software · Pl32 · reported by MITREMedium 6.8
Heap-based buffer overflow in PhotoLine 17.01 and possibly other versions before 17.02 allows remote attackers to execute arbitrary code via a JPEG2000 (JP2) file with a crafted Quantization Default (QCD) marker segment.
- Product
- Photoline
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.