THREATIST.IORead the docs 36 records
The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripting.
The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages.
The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML.
The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereferen…
The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read.
The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, leading to a heap buffer over-read.
The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading t…
The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds h…
The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document…
The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer dereference.
The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView.
Canva Desktop before v1.125.0 performed double decoding in the deeplink handler.
The Affinity by Canva application before 3.3.0 (September 2026 release) did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow.
The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView.
The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView.
A type confusion vulnerability exists in the EMF functionality of Canva Affinity.
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity.
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity.