CVE-2022-1345

Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse...

Butter 代码问题漏洞

Butter is a small playground program. A security vulnerability exists in Butter CMS v1.2.8 that allows an attacker to execute arbitrary code via a crafted SVG file...

CVE-2021-42940

A Cross Site Scripting XSS vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool/saveAttachment.php, which allows an attacker to upload a SVG file containing malicious JavaScript code...

PT-2022-9446 · WordPress · Svg Support

Name of the Vulnerable Software and Affected Versions: SVG Support WordPress plugin versions prior to 2.3.20 Description: The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of escaping in the CSS Class to target setting before it is outputted in an...

CVE-2021-44118

SPIP 4.0.0 is affected by a Cross Site Scripting XSS vulnerability. To exploit the vulnerability, a visitor must browse to a malicious SVG file. The vulnerability allows an authenticated attacker to inject malicious code running on the client side into web pages visited by other users stored XSS...

Halo 跨站脚本漏洞

Halo is a personal blogging system for individual developers. Halo suffers from a cross-site scripting vulnerability that originates in Halo, versions v1.0.0 through v1.4.17 latest, which is susceptible to cross-site scripting XSS stored in configuration file images that can be exploited to uploa...

PT-2022-11994 · Spip +2 · Spip +2

Name of the Vulnerable Software and Affected Versions: SPIP version 4.0.0 Description: The issue allows an authenticated attacker to inject malicious code running on the client side into web pages visited by other users. This is achieved by exploiting a Cross Site Scripting XSS vulnerability, whe...

The vulnerability in Microsoft Visio’s vector graphic editors, diagram editors, and block diagrams relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability in Microsoft Visio’s vector graphic editors, diagram editors, and block diagrams relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

CVE-2021-37330

Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting XSS. The Avatar upload in the My Profile section could be exploited to upload a malicious SVG file which contains Javascript. Now if another user/admin views the profile and clicks to view his avatar, an XSS will trigge...

CVE-2021-39558

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function VectorGraphicOutputDev::drawGeneralImage located in VectorGraphicOutputDev.cc. It allows an attacker to cause code Execution...

Stack overflow

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function VectorGraphicOutputDev::drawGeneralImage located in VectorGraphicOutputDev.cc. It allows an attacker to cause code Execution...

Directory Traversal

Overview convert-svg-to-jpeg is a package for converting SVG to JPEG using headless Chromium. Affected versions of this package are vulnerable to Directory Traversal. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as ...

CVE-2021-26699

OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used...

SAP 3D Visual Enterprise Viewer 安全漏洞

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. A denial of service vulnerability exists in SAP 3D Visual Enterprise Viewer 9. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by means of a specially crafted .SVG...

Denial of Service Vulnerability in Configuration King 6.60 SP3

KingView is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in KingView 6.60 SP3. The vulnerability stems from a failure to validate the SVG format, which can be exploited by an attacker to cause...

Rhymix CMS Cross-Site Scripting Vulnerability

Rhymix CMS is a PHP-based content management system CMS. A cross-site scripting vulnerability exists in the index.php?module=admin&act=dispModuleAdminFileBox page in Rhymix CMS version 1.9.8.1, which can be exploited by remote attackers to inject arbitrary web script or HTML by uploading a...

DEBIAN-CVE-2018-19881

In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service recursive calls followed by a fitz/xml.c fzxmlatt crash from excessive stack consumption via a crafted svg file, as demonstrated by mupdf-gl...

Artifex MuPDF Denial of Service Vulnerability (CNVD-2019-06785)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A buffer overflow vulnerability exists in the svg/svg-run.c file in Artifex MuPDF version 1.14.0. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted svg file...

ILIAS Cross-Site Scripting Vulnerability (CNVD-2017-05243)

ILIAS is a Web-based learning management system developed by the ILIAS team. The system contains modules for course management, file sharing, and live chat. A cross-site scripting vulnerability exists in ILIAS versions prior to 5.2.3. A remote attacker can exploit this vulnerability to inject...

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the AddWeightedPathSegLists and SVGPathSegListSMILType::Interpolate functions in browsers like Firefox and Firefox ESR is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects on the system...