CVE-2018-19882

In Artifex MuPDF 1.14.0, the svgrunimage function in svg/svg-run.c allows remote attackers to cause a denial of service hrefatt NULL pointer dereference and application crash via a crafted svg file, as demonstrated by mupdf-gl...

CVE-2018-19882

CVE-2018-19882 affects MuPDF 1.14.0: the svg_run_image function in svg/svg-run.c allows a crafted SVG file to trigger a denial of service (href_att NULL pointer dereference and application crash), demonstrated by mupdf-gl. The vulnerability arises from the SVG handling path in MuPDF’s rendering c...

Cross-site Scripting (XSS)

intelliants/subrion is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of safe default configuration for serving svg files, allowing persisted XSS attacks...

CVE-2018-12305

Cross-site scripting in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript by uploading SVG images with embedded JavaScript...

Cross site scripting

Cross-site scripting in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript by uploading SVG images with embedded JavaScript...

CVE-2018-12305

Cross-site scripting in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript by uploading SVG images with embedded JavaScript...

CVE-2018-16629

panel/uploads/elfl1XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element...

CVE-2018-16629

panel/uploads/elfl1XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element...

Design/Logic Flaw

panel/uploads/elfl1XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element...

CVE-2018-16629

panel/uploads/elfl1XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of service. An infinite loop in the function svgdevendtile in fitz/svg-device.c allows an attacker to cause a denial of service condition...

CVE-2018-19777

In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...

CVE-2018-19777

In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...

DEBIAN-CVE-2018-19777

In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...

CVE-2018-19777

In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...

CVE-2018-19777

In Artifex MuPDF 1.14.0, there is an infinite loop in the function svgdevendtile in fitz/svg-device.c, as demonstrated by mutool...

Artifex MuPDF Infinite Loop Vulnerability

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in the 'svgdevendtile' function in the fitz/svg-device.c file in Artifex MuPDF version 1.14.0. An attacker can exploit the vulnerability to cause an infinite loop...

PT-2018-15091 · Artifex · Artifex Mupdf +1

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF version 1.14.0 Description: The issue is related to an infinite loop in the svg dev end tile function, located in the fitz/svg-device.c file. This was demonstrated using the mutool utility. Recommendations: For Artifex MuPDF...

kebagi.com XSS vulnerability

Open Bug Bounty ID: OBB-698513 Description| Value ---|--- Affected Website:| kebagi.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-6077

Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page...