Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:52 a.m.•22 views

CVE-2020-10799

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

9.8CVSS8.5AI score0.01528EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2020-0183

Malware in sbrugna...

9.8CVSS8.6AI score0.01528EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
•added 2021/05/06 6:52 p.m.•83 views

SVGlib Vulnerable to XXE Attacks

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

9.8CVSS9AI score0.01528EPSS
SaveExploits1References5Affected Software1
CNVD
CNVD
•added 2020/03/23 12:00 a.m.•19 views

svglib package for Python code issue vulnerability

svglib package for Python is a Python library for reading and converting SVG files. A code issue vulnerability exists in svglib package 0.9.3 and earlier Python, which can be exploited by an attacker to conduct an XXE attack via a svg2rlg call...

9.8CVSS7.1AI score0.01528EPSS
SaveExploits1References1
PyPA
PyPA
•added 2020/03/20 11:15 p.m.•28 views

PYSEC-2020-111

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

9.8CVSS7AI score0.01528EPSS
SaveExploits1References2Affected Software1
osv_pysec
osv_pysec
•added 2020/03/20 11:15 p.m.•42 views

PYSEC-2020-111

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

9.8CVSS4.5AI score0.01528EPSS
SaveExploits1References2
Prion
Prion
•added 2020/03/20 11:15 p.m.•33 views

Design/Logic Flaw

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

7.5CVSS9.5AI score0.01528EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/03/20 10:40 p.m.•43 views

CVE-2020-10799

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

9.6AI score0.01528EPSS
SaveExploits1References1
Mend
Mend
•added 2020/03/20 10:40 p.m.•10 views

CVE-2020-10799

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

9.8CVSS0.01528EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/20 12:00 a.m.•6 views

CVE-2020-10799: Improper Restriction of XML External Entity Reference

The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...

9.8CVSS8.2AI score0.01528EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/03/20 12:00 a.m.•6 views

PT-2020-12331

Name of the Vulnerable Software and Affected Versions svglib versions through 0.9.3 Description The issue allows XXE attacks via an svg2rlg call. This affects the svglib package for Python. Recommendations For versions through 0.9.3, consider disabling the svg2rlg call as a temporary workaround...

9.8CVSS0.01528EPSS
SaveExploits1References10
Rows per page
Query Builder