UBUNTU-CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

DRUPAL-CONTRIB-2018-027

This module adds a new formatter for the file fields, which allows any file extension to be uploaded. The module doesn't sufficiently handle sanitization under the scenario uploaded SVG files. This vulnerability is mitigated by the fact that an attacker must have a role with the permission create...

SVG Formatter - Critical - Cross Site Scripting - SA-CONTRIB-2018-027

This module adds a new formatter for the file fields, which allows any file extension to be uploaded. The module doesn't sufficiently handle sanitization under the scenario uploaded SVG files. This vulnerability is mitigated by the fact that an attacker must have a role with the permission create...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: CVE-2018-5183: Backport critical security fixes in Skia CVE-2018-5154: Use-after-free with SVG animations and clip paths CVE-2018-5155: Use-after-free with SVG animations and text paths CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files...

Security vulnerabilities fixed in Firefox 60 — Mozilla

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially...

crimestoppersgno.org XSS vulnerability

Open Bug Bounty ID: OBB-612012 Description| Value ---|--- Affected Website:| crimestoppersgno.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Rockstar Games: LFI and SSRF via XXE in emblem editor

This summary is provided by the researcher who submitted this report, @alexbirsan . About one year after I started messing with the emblem editor, I finally found a full SSRF and LFI. I was able to extract text files from the server and HTTP responses by rendering them on my crew emblem. For thos...

guyfinley.org XSS vulnerability

Open Bug Bounty ID: OBB-611195 Description| Value ---|--- Affected Website:| guyfinley.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ciclosfera.com XSS vulnerability

Open Bug Bounty ID: OBB-611154 Description| Value ---|--- Affected Website:| ciclosfera.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2013-0159

The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service or write to arbitrary files via a symlink attack on /tmp/fedora-business-cards-buffer.svg...

Cross-site Scripting (XSS)

react-svg is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the default configuration of allowing scripts to be evaluated, despite being documented otherwise, allowing malicious scripts to be executed when rendered...

cervejariaramiro.pt XSS vulnerability

Open Bug Bounty ID: OBB-609758 Description| Value ---|--- Affected Website:| cervejariaramiro.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

regional.bvsalud.org XSS vulnerability

Open Bug Bounty ID: OBB-609697 Description| Value ---|--- Affected Website:| regional.bvsalud.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Unisys Stealth SVG Denial of Service Vulnerability

Unisys Stealth SVG is a secure virtual gateway solution from Unisys Corporation, U.S.A. Stealth endpoint is one of the stealth endpoint programs. A security vulnerability exists in the Stealth endpoint in Unisys Stealth SVG. A remote attacker can exploit this vulnerability to cause a denial of...

pesquisabmc.cm-coimbra.pt XSS vulnerability

Open Bug Bounty ID: OBB-605662 Description| Value ---|--- Affected Website:| pesquisabmc.cm-coimbra.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pinturayartistas.com XSS vulnerability

Open Bug Bounty ID: OBB-605567 Description| Value ---|--- Affected Website:| pinturayartistas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-0366

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values in DTD declaration...

catalyst.red XSS vulnerability

Open Bug Bounty ID: OBB-604728 Description| Value ---|--- Affected Website:| catalyst.red Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

4sport.ua XSS vulnerability

Open Bug Bounty ID: OBB-604682 Description| Value ---|--- Affected Website:| 4sport.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...