Gallery
4 CVEs tracked since 2008. Since Sep 2008, none of them reached CISA KEV.
Gallery CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2008-09 | 3 | 0 |
| 2008-10 | null or fewer | |
| 2008-11 | null or fewer | |
| 2008-12 | 1 | 0 |
Products
The products that kept showing up in Gallery's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 4 most recently published vulnerabilities affecting Gallery.
- CVE-2008-5296Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when register_globals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some o...6.8
- CVE-2008-4129Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read ...4.0
- CVE-2008-4130Cross-site scripting (XSS) vulnerability in Gallery 2.x before 2.2.6 allows remote attackers to inject arbitrary web script or HTML via a crafted Flash animation, related to the ability of the anim...4.3
- CVE-2008-3662Gallery before 1.5.9, and 2.x before 2.2.6, does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for re...5.0
The record
- Peak rank
- #25 in Sep 2008
- Busiest month shown
- Sep 2008, 3 CVEs
- Months with a KEV entry
- 0 since Sep 2008
- Monthly snapshots
- 2 since 2008