Lucene search
K

214 matches found

RedhatCVE
RedhatCVE
added 2022/12/20 5:5 p.m.37 views

CVE-2022-40146

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14...

7.5CVSS3.8AI score0.47784EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2022/12/20 5:5 p.m.50 views

CVE-2022-38398

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS3.5AI score0.00225EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2022/12/20 5:5 p.m.33 views

CVE-2022-38648

Server-Side Request Forgery SSRF vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14...

5.3CVSS4AI score0.00225EPSS
Exploits0References6
OSV
OSV
added 2022/11/11 11:4 a.m.2 views

OESA-2022-2096 xmlrpc security update

Apache XML-RPC is a Java implementation of XML-RPC, a popular protocol that uses XML over HTTP to implement remote procedure calls. Apache XML-RPC was previously known as Helma XML-RPC. If you have code using the Helma library, all you should have to do is change the import statements in your cod...

9.8CVSS7.8AI score0.70524EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2022/10/31 12:0 a.m.38 views

Debian dla-3169 : libbatik-java - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3169 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3169-1 [email protected]...

7.5CVSS7.9AI score0.00541EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2022/10/30 12:0 a.m.41 views

Debian DSA-5264-1 : batik - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5264 advisory. - A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16...

7.5CVSS7.6AI score0.00541EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2022/10/25 7:0 p.m.29 views

Apache XML Graphics Batik vulnerable to code execution via SVG.

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16...

7.5CVSS7.6AI score0.00526EPSS
Exploits0References10Affected Software1
Github Security Blog
Github Security Blog
added 2022/10/25 7:0 p.m.33 views

Untrusted code execution in Apache XML Graphics Batik

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

7.5CVSS7.6AI score0.00541EPSS
Exploits0References12Affected Software2
NVD
NVD
added 2022/10/25 5:15 p.m.18 views

CVE-2022-41704

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16...

7.5CVSS0.00526EPSS
Exploits0References5
OSV
OSV
added 2022/10/25 5:15 p.m.2 views

DEBIAN-CVE-2022-41704

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16...

7.5CVSS7.5AI score0.00526EPSS
Exploits0References1
NVD
NVD
added 2022/10/25 5:15 p.m.21 views

CVE-2022-42890

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

7.5CVSS0.00541EPSS
Exploits0References5
OSV
OSV
added 2022/10/25 5:15 p.m.29 views

CVE-2022-41704

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16...

7.5CVSS7.8AI score
Exploits0References5
OSV
OSV
added 2022/10/25 5:15 p.m.30 views

CVE-2022-42890

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

7.5CVSS7.8AI score
Exploits0References5
OSV
OSV
added 2022/10/25 5:15 p.m.1 views

DEBIAN-CVE-2022-42890

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

7.5CVSS7.6AI score0.00541EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2022/10/25 5:15 p.m.47 views

CVE-2022-41704

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16...

7.5CVSS7AI score0.00526EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2022/10/25 5:15 p.m.1 views

CVE-2022-42890

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

7.5CVSS5.8AI score0.00541EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2022/10/25 5:15 p.m.2 views

CVE-2022-41704

A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16...

7.5CVSS7.4AI score0.00526EPSS
Exploits0References6
Prion
Prion
added 2022/10/25 5:15 p.m.26 views

Code injection

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

5CVSS7.4AI score0.00541EPSS
Exploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2022/10/25 5:15 p.m.53 views

CVE-2022-42890

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

7.5CVSS7.1AI score0.00541EPSS
Exploits0References7
OSV
OSV
added 2022/10/25 5:15 p.m.0 views

UBUNTU-CVE-2022-42890

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16...

7.5CVSS7.1AI score0.00541EPSS
Exploits0References8
Rows per page
Query Builder