Linux Distros Unpatched Vulnerability : CVE-2021-42704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code. CVE-2021-42704 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2021-42702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information. CVE-2021-42702 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2012-5656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity...

Linux Distros Unpatched Vulnerability : CVE-2012-6076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to...

RHEL 6 : inkscape (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - inkscape: XXE via SVG rasterization CVE-2012-5656 - inkscape: Reads .eps files from /tmp instead of curre...

inkscape1 bug fix update

An update is available for inkscape1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Inkscape is a vector graphics editor, with capabilities similar to...

Amazon Linux 2 : inkscape (ALAS-2023-2043)

The version of inkscape installed on the remote host is prior to 0.92.2-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2043 advisory. Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized...

Medium: inkscape

Issue Overview: Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information. CVE-2021-42700 Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information...

The vulnerability in the vector graphic editor Inkscape, related to writing outside the buffer boundaries, allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the vector graphic editor Inkscape is related to writing outside the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability in the vector graphic editor Inkscape, related to access to an uninitialized pointer, allows a malicious actor to gain access to confidential data.

The vulnerability in the vector graphic editor Inkscape relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...

The vulnerability in the vector graphic editor Inkscape, related to reading beyond the allowed buffer data limits, allows a hacker to gain access to confidential data.

The vulnerability in the vector graphic editor Inkscape relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

SUSE CVE-2005-3737

Buffer overflow in the SVG importer style.cpp of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values...

SUSE CVE-2007-1463

Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs...

SUSE CVE-2007-1464

Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors...

SUSE CVE-2012-5656

The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity XXE injection attack...

SUSE CVE-2012-6076

Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive information, and possibly have other unspecified impacts...

SUSE CVE-2021-42702

Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information...

SUSE CVE-2021-42704

Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code...

SUSE CVE-2021-42700

Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information...

Ubuntu: Security Advisory (USN-223-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...