Most recent entries from all

bdu:2022-06659

certfr-2023-avi-0276 — De multiples vulnérabilités ont été découvertes dans IBM. Elles permettent à un attaquant d…

certfr-2023-avi-0276

EUVD-2026-19610

fkie_cve-2022-42890

A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.

GHSA-rwqr-m72q-v6cm — Untrusted code execution in Apache XML Graphics Batik

Affected: Maven: org.apache.xmlgraphics:batik, Maven: org.apache.xmlgraphics:batik-bridge

gsd-2022-42890

OESA-2023-1050 — batik security update

Affected: openEuler:22.03-LTS-SP1: batik

Batik is an inline templating engine for CoffeeScript, inspired by CoffeeKup, that lets you write your template directly as a CoffeeScript function. Security Fix(es): A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.(CVE-2022-41704) A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.(CVE-2022-42890)

openSUSE-SU-2024:13743-1 — xmlgraphics-batik-1.17-1.1 on GA media

xmlgraphics-batik-1.17-1.1 on GA media

RHSA-2023:2100 — Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.1 security update

apache-commons-net: FTP client trusts the host from PASV response by default undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Denial of Service due to missing nested depth limitation for collections apache-spark: XSS vulnerability in log viewer UI Javascript Pulsar: Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM apache-ivy: Directory Traversal Ivy: Ivy Path traversal batik: Server-Side Request Forgery batik: Server-Side Request Forgery snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode scandium: Failing DTLS handshakes may cause throttling to block processing of records batik: Server-Side Request Forgery (SSRF) vulnerability jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks batik: Apache XML Graphics Batik vulnerable to code execution via SVG JXPath: untrusted XPath expressions may lead to RCE attack hsqldb: Untrusted input may lead to RC…

SUSE-SU-2024:0777-1 — Security update for xmlgraphics-batik

Security update for xmlgraphics-batik

UBUNTU-CVE-2022-42890

Affected: Ubuntu:Pro:14.04:LTS: batik, Ubuntu:Pro:16.04:LTS: batik, Ubuntu:18.04:LTS: batik, Ubuntu:20.04:LTS: batik, Ubuntu:22.04:LTS: batik, Ubuntu:24.04:LTS: batik, Ubuntu:25.10: batik, Ubuntu:26.04:LTS: batik

WID-SEC-W-2023-0809 — IBM QRadar SIEM: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Informationen falsch darzustellen, einen Denial of Service Zustand herbeizuführen, Sicherheitsvorkehrungen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.