https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:58:03 +0000 https://cve.radiocsirt.org/vuln/cnvd-2015-01865 cnvd-2015-01865 https://cve.radiocsirt.org/vuln/cnvd-2015-01865 https://cve.radiocsirt.org/vuln/euvd-2026-89202 EUVD-2026-89202 https://cve.radiocsirt.org/vuln/euvd-2026-89202 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0250 <p>XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.</p> <p>XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-0250 https://cve.radiocsirt.org/vuln/ghsa-wfw6-mmmp-87xm <p><strong>Affected:</strong> Maven: org.apache.xmlgraphics:batik</p> <p>XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.</p> <p><strong>Affected:</strong> Maven: org.apache.xmlgraphics:batik</p> <p>XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.</p> https://cve.radiocsirt.org/vuln/ghsa-wfw6-mmmp-87xm https://cve.radiocsirt.org/vuln/gsd-2015-0250 gsd-2015-0250 https://cve.radiocsirt.org/vuln/gsd-2015-0250 https://cve.radiocsirt.org/vuln/rhsa-2015:2559 <p>batik: XML External Entity (XXE) injection in SVG parsing jsoup: XSS vulnerability related to incomplete tags at EOF apache-commons-collections: InvokerTransformer code execution during deserialisation</p> <p>batik: XML External Entity (XXE) injection in SVG parsing jsoup: XSS vulnerability related to incomplete tags at EOF apache-commons-collections: InvokerTransformer code execution during deserialisation</p> https://cve.radiocsirt.org/vuln/rhsa-2015:2559 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0250 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: batik</p> <p>XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: batik</p> <p>XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-0250 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0027 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und nicht spezifizierte Auswirkungen zu verursachen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und nicht spezifizierte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0027