CVE-2023-50252 php-svg-lib unsafe attributes merge when parsing `use` tag

php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling tag that references an tag, it merges the attributes from the tag to the tag. The problem pops up especially when the href attribute from the tag has not been sanitized. This can lead to an unsafe file...

CVE-2023-50252

php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling tag that references an tag, it merges the attributes from the tag to the tag. The problem pops up especially when the href attribute from the tag has not been sanitized. This can lead to an unsafe file...

CVE-2023-50251

The CVE-2023-50251 issue affects php-svg-lib (prior to v0.5.1), a PHP library for parsing/rendering SVGs. Root cause: parsing the attributes of a use tag can trigger recursive references when an id/link points to the same object, creating an infinite recursion; memory exhaustion can follow, poten...

CVE-2023-35628

Windows MSHTML Platform Remote Code Execution Vulnerability...

ALSA-2023:7716 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Arbitrary Remote Code Execution CVE-2023-42917 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Arbitrary Remote Code Execution CVE-2023-42917 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...

[SECURITY] Fedora 38 Update: webkitgtk-2.42.3-1.fc38

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

[SECURITY] Fedora 39 Update: webkitgtk-2.42.3-1.fc39

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

PT-2023-35633 · Git +1 · Harfbuzz

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, potentially causing a crash. The crash type is specified as Heap-buffer-overflow READ 2. The crash...

[SECURITY] Fedora 38 Update: poppler-23.02.0-3.fc38

poppler is a PDF rendering library...

Fedora: Security Advisory for poppler (FEDORA-2023-6b20b7807a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@acronis-platform/ui-component-library (0.0.4), @aimmarc/http-module (0.0.1) +139 more potentially affected by CVE-2023-49293 via vite (>=4.4.0-beta.3, <=4.4.11)

vite NPM version =4.4.0-beta.3, =0.6.7, =16.2.0-next.2, =0.0.9, =0.4.0, =0.5.1, =1.0.10-beta.ced5d6e.202405270802, =1.0.0-rc.1, =0.0.0-canary-20230927134149, =1.0.0, =1.0.1 - @committed/ds-colors 0.2.0 and more Source cves: CVE-2023-49293 Source advisory: OSV:GHSA-92R3-M2MG-PJ97...

[SECURITY] Fedora 37 Update: poppler-22.08.0-5.fc37

poppler is a PDF rendering library...

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, macOS, and the Safari browser allows attackers to execute arbitrary code.

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, macOS, and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

The vulnerability of operating systems such as iOS, iPadOS, macOS, and the browser Safari, related to lack of access control, allows attackers to disclose protected information.

The vulnerability of the Web page rendering module in WebKit operating systems for iOS, iPadOS, macOS, and the Safari browser is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to disclose protected information processed from web content...

[SECURITY] Fedora 39 Update: webkitgtk-2.42.2-1.fc39

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

Schweitzer Engineering Laboratories SEL-411L Security Vulnerability

Schweitzer Engineering Laboratories SEL-411L is a state-of-the-art line differential protection, automation and control system from Schweitzer Engineering Laboratories, USA. A security vulnerability exists in the Schweitzer Engineering Laboratories SEL-411L that stems from improper restrictions o...

USN-6508-2: poppler regression

USN-6508-1 fixed vulnerabilities in poppler. The update introduced one minor regression in Ubuntu 18.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or a...

[SECURITY] Fedora 38 Update: webkitgtk-2.42.2-1.fc38

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

USN-6508-1: poppler vulnerabilities

It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or an automated system were tricked into opening a specially crafted PDF file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu...