Lucene search
+L

125 matches found

OSV
OSV
added 2018/12/06 12:29 a.m.6 views

DEBIAN-CVE-2018-19881

In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service recursive calls followed by a fitz/xml.c fzxmlatt crash from excessive stack consumption via a crafted svg file, as demonstrated by mupdf-gl...

5.5CVSS5.4AI score0.01571EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/12/06 12:00 a.m.14 views

Artifex MuPDF Denial of Service Vulnerability (CNVD-2019-06785)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A buffer overflow vulnerability exists in the svg/svg-run.c file in Artifex MuPDF version 1.14.0. A remote attacker can exploit this vulnerability to cause a denial of service with a specially crafted svg file...

5.5CVSS7.2AI score0.01571EPSS
SaveExploits1References1
CNVD
CNVD
added 2017/04/11 12:00 a.m.11 views

ILIAS Cross-Site Scripting Vulnerability (CNVD-2017-05243)

ILIAS is a Web-based learning management system developed by the ILIAS team. The system contains modules for course management, file sharing, and live chat. A cross-site scripting vulnerability exists in ILIAS versions prior to 5.2.3. A remote attacker can exploit this vulnerability to inject...

6.1CVSS6AI score0.01152EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/11/20 12:00 a.m.12 views

The vulnerability of Firefox and Firefox ESR browsers allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the AddWeightedPathSegLists and SVGPathSegListSMILType::Interpolate functions in browsers like Firefox and Firefox ESR is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions or other effects on the system...

7.5CVSS8.1AI score0.03149EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2015/02/25 12:00 a.m.6 views

UBUNTU-CVE-2015-0827

Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic...

4.3CVSS7.1AI score0.02887EPSS
SaveExploits0References5
Rows per page
Query Builder