Most recent entries from all

certfr-2021-avi-556 — De multiples vulnérabilités ont été découvertes dans Oracle Database Server. Elles permettent à un attaquant de provoqu…

certfr-2021-avi-556

cnvd-2021-14152

EUVD-2026-257611

fkie_cve-2020-11987

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.

GHSA-2h63-qp69-fwvw — Server-side request forgery (SSRF) in Apache Batik

Affected: Maven: org.apache.xmlgraphics:batik-svgbrowser

gsd-2020-11987

OESA-2021-1134 — batik security update

Affected: openEuler:20.03-LTS-SP1: batik

Batik is an inline templating engine for CoffeeScript, inspired by CoffeeKup, that lets you write your template directly as a CoffeeScript function. Security Fix(es): Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.(CVE-2020-11987)

openSUSE-SU-2024:12402-1 — xmlgraphics-batik-1.15-2.1 on GA media

xmlgraphics-batik-1.15-2.1 on GA media

RHSA-2021:5134 — Red Hat Security Advisory: Red Hat Fuse 7.10.0 release and security update

nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties poi: a specially crafted Microsoft Excel document allows attacker to read files from the local filesystem mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete log4j: improper validation of certificate with host mismatch in SMTP appender batik: SSRF due to improper input validation by the NodePickerPanel xmlgraphics-commons: SSRF due to improper input validation by the XMPParser tomcat: Apache Tomcat HTTP/2 Request mix-up libthrift: potential DoS when processing untrusted payloads bouncycastle: Timing issue within the EC math library groovy: OS temporary directory leads to information disclosure tomcat: HTTP/2 request header mix-up XStream: remote code execution due to insecure XML deserialization when relying on blocklists XStream: arbitrary file deletion on the local host when unmarshalling jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS undertow: special character in query results in server errors jackson-dataformat-cbor: Unchecked allocation…

SUSE-SU-2024:0777-1 — Security update for xmlgraphics-batik

Security update for xmlgraphics-batik

UBUNTU-CVE-2020-11987

Affected: Ubuntu:Pro:14.04:LTS: batik, Ubuntu:Pro:16.04:LTS: batik, Ubuntu:18.04:LTS: batik, Ubuntu:20.04:LTS: batik, Ubuntu:24.04:LTS: batik, Ubuntu:25.10: batik, Ubuntu:26.04:LTS: batik

WID-SEC-W-2023-0027 — IBM Tivoli Network Manager: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in IBM Tivoli Network Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und nicht spezifizierte Auswirkungen zu verursachen.