11172 matches found
CVE-2018-16630
Kirby CMS, version 2.5.12, is affected by a Cross‑Site Scripting (XSS) vulnerability involving the Upload SVG option in the “site files” feature. The issue arises from insufficient validation when uploading SVG files, enabling attacker‑supplied SVG content to be processed in a way that triggers X...
CVE-2018-16630
Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file...
Oracle Business Intelligence Publisher Multiple Vulnerabilities (April 2018 CPU)
The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.180417 or 11.1.1.9.x prior to 11.1.1.9.180417, similarly, versions 12.2.1.2.x prior to 12.2.1.2.180116 and 12.2.1.3.x prior to 12.2.1.3.180116 are affected as noted in the April 2018...
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp...
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp...
Code injection
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp...
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp...
CVE-2018-19869
CVE-2018-19869 affects Qt before 5.11.3, where a malformed SVG image can trigger a segmentation fault in qsvghandler.cpp. The connected sources corroborate that this vulnerability exists in Qt's SVG handling (qtsvg) across multiple advisories and trackers, and several Debian/CentOS/ALMA/F5 adviso...
CVE-2018-19869
An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp...
Design/Logic Flaw
CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI...
CVE-2018-19508
CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI...
CVE-2018-19597
CMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798...
CVE-2018-19597
CMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798...
CVE-2018-19508
CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI...
CVE-2018-19508
CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI...
CVE-2018-19508
CMSimple 4.7.5 is affected by an XSS vulnerability that can be triggered by an administrator uploading an SVG file via the URI ?userfiles&subdir=userfiles/images/flags/. The issue is described as a cross-site scripting flaw introduced through SVG handling during admin file upload. The connected s...
CVE-2018-19597
CMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798...
CVE-2018-19597
CMS Made Simple 2.2.8 is affected by CVE-2018-19597: an XSS vulnerability via an uploaded SVG document. This is a related issue to CVE-2017-16798. The NVD entry indicates the impact as Low (I), with Partial integrity and No availability impact, and a Network attack vector with Medium access compl...
PT-2022-5597 · Gpac +2 · Gpac +2
Name of the Vulnerable Software and Affected Versions: GPAC affected versions not specified Description: The issue is related to the function svg parse preserveaspectratio of the SVG Parser component in the GPAC multimedia platform. It is caused by incorrect clearing or freeing of resources,...