nhiephon/Research

Releases0

Stars1

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-42984 ↗	Nov 15, 2022Tuesday, 15 November 2022, 00:15	9.8 CRITICAL	—
WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients.
CVE-2022-40405 ↗	Nov 15, 2022Tuesday, 15 November 2022, 00:15	7.5 HIGH	—
WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs.
CVE-2020-23560 ↗	Sep 16, 2022Friday, 16 September 2022, 03:15	7.8 HIGH	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab.
CVE-2020-23556 ↗	Sep 16, 2022Friday, 16 September 2022, 03:15	7.8 HIGH	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28.
CVE-2020-23559 ↗	Sep 16, 2022Friday, 16 September 2022, 03:15	7.8 HIGH	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f.
CVE-2020-23558 ↗	Sep 16, 2022Friday, 16 September 2022, 03:15	7.8 HIGH	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.
CVE-2020-23551 ↗	Sep 16, 2022Friday, 16 September 2022, 03:15	7.8 HIGH	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30.
CVE-2020-23552 ↗	Sep 16, 2022Friday, 16 September 2022, 03:15	7.8 HIGH	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62.
CVE-2020-23553 ↗	Sep 16, 2022Friday, 16 September 2022, 03:15	7.8 HIGH	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33.
CVE-2020-23554 ↗	Sep 16, 2022Friday, 16 September 2022, 03:15	7.8 HIGH	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20.
CVE-2020-23555 ↗	Sep 16, 2022Friday, 16 September 2022, 03:15	7.8 HIGH	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e.
CVE-2020-23557 ↗	Sep 16, 2022Friday, 16 September 2022, 03:15	7.8 HIGH	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.
CVE-2020-23550 ↗	Sep 16, 2022Friday, 16 September 2022, 03:15	7.8 HIGH	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82.
CVE-2020-23561 ↗	Jul 18, 2022Monday, 18 July 2022, 00:15	5.5 MEDIUM	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000005722.
CVE-2020-23562 ↗	Jul 18, 2022Monday, 18 July 2022, 00:15	5.5 MEDIUM	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000aefe.
CVE-2020-23563 ↗	Jul 18, 2022Monday, 18 July 2022, 00:15	5.5 MEDIUM	—
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000002cba.
CVE-2020-23545 ↗	Dec 15, 2021Wednesday, 15 December 2021, 08:15	7.8 HIGH	6.8 MEDIUM
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531.
CVE-2020-23546 ↗	Oct 28, 2021Thursday, 28 October 2021, 22:15	7.8 HIGH	6.8 MEDIUM
IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted XBM file, related to a "Data from Faulting Address is used as one or more arguments in a subsequent Function Call starting at FORMATS!ReadMosaic+0x0000000000000981.
CVE-2020-23549 ↗	Oct 28, 2021Thursday, 28 October 2021, 22:15	7.8 HIGH	6.8 MEDIUM
IrfanView 4.54 allows attackers to cause a denial of service or possibly other unspecified impacts via a crafted .cr2 file, related to a "Data from Faulting Address controls Branch Selection starting at FORMATS!GetPlugInInfo+0x00000000000047f6".
CVE-2020-13905 ↗	Jun 10, 2020Wednesday, 10 June 2020, 19:15	8.8 HIGH	6.8 MEDIUM
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4.
CVE-2020-13906 ↗	Jun 10, 2020Wednesday, 10 June 2020, 19:15	7.8 HIGH	6.8 MEDIUM
IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7.