Directory Traversal

Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Directory Traversal via the resolution of JSON-Schema $ref references that point to local files using either file:// URIs or ../-escaped relative paths, without restricting access t...

EUVD-2026-49997

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the processing of embedded SVG images containing elements with xlink:href attributes referencing local files or directories. An attacker can determine the existence of files or directories on the server by...

CVE-2026-44019

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...

EUVD-2026-45042

Docling Core defines core data types and transformations for the document processing application Docling. In versions 2.5.0 and above, prior to 2.74.1, docling-core could allow local file:// image references and accepted inline data: content without a decoded-size limit. In applications that acce...

Docling Core: Insufficient validation of image reference URIs

ImpactIn versions = 2.5.0, = 2.74.1 WorkaroundsIf upgrading is not immediately possible:- reject file: and data: image references from untrusted input- allow only approved local or remote image sources- apply input size and memory limits to processing workers References- Fix release: v2.74.1...

CVE-2022-32271

In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary loca...

UBUNTU-CVE-2014-3755

The QSvg module in Qt, as used in the Mumble client 1.2.x before 1.2.6, allows remote attackers to cause a denial of service hang and resource consumption via a local file reference in an 1 image tag or 2 XML stylesheet in an SVG file...

mumble -- multiple vulnerabilities

Mumble reports: SVG images with local file references could trigger client DoS The Mumble client did not properly HTML-escape some external strings before using them in a rich-text HTML context...