CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

328 matches found

OSV•added 2026/07/02 8:17 p.m.•6 views

UBUNTU-CVE-2025-71385

Netdata before 2.3.1 reflects the user-supplied love query parameter of the api/v2/ilove.svg and api/v3/ilove.svg endpoints verbatim into the generated SVG document into a text element without HTML or XML escaping, and serves the response with Content-Type image/svg+xml. An attacker can craft a U...

6.1CVSS5.9AI score0.0024EPSS

Exploits0References6

CISA KEV Catalog•added 2026/02/20 12:0 a.m.•9 views

RoundCube Webmail Cross-site Scripting Vulnerability

RoundCube Webmail contains a cross-site scripting vulnerability via the animate tag in an SVG document...

7.2CVSS5.1AI score0.20094EPSS

In wildExploits1

RedhatCVE•added 2026/01/09 12:28 p.m.•12 views

CVE-2018-21030

Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document...

5.3CVSS5.9AI score0.01443EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 10:52 a.m.•7 views

CVE-2022-33994

The Gutenberg plugin through 13.7.3 for WordPress allows stored XSS by the Contributor role via an SVG document to the "Insert from URL" feature. NOTE: the XSS payload does not execute in the context of the WordPress instance's domain; however, analogous attempts by low-privileged users to...

3CVSS6.1AI score0.00575EPSS

Exploits1References1

RedhatCVE•added 2026/01/09 10:7 a.m.•8 views

CVE-2019-20376

A cross-site scripting XSS vulnerability in Electronic Logbook ELOG 3.1.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG document to elogd.c...

6.1CVSS5.5AI score0.00785EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 10:6 a.m.•9 views

CVE-2019-20860

An issue was discovered in Mattermost Server before 5.14.0, 5.13.3, 5.12.6, and 5.9.4. It allows remote attackers to cause a denial of service application hang via a crafted SVG document...

5.5CVSS6.9AI score0.0087EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 9:33 a.m.•11 views

CVE-2024-39126

Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents...

5.4CVSS5.7AI score0.00324EPSS

Exploits0References1

RedhatCVE•added 2026/01/07 9:31 a.m.•9 views

CVE-2019-16955

SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request...

5.4CVSS5.8AI score0.01656EPSS

Exploits1References1