Поиск уязвимостей
Количество 12
Количество 12
BDU:2023-05427
Уязвимость механизма объединения XML-документов XInclude библиотеки отрисовки векторной графики librsvg, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20230911-09
Уязвимость librsvg
ALT-PU-2023-8841
ALT-PU-2023-8841: package `librsvg` update to version 2.56.3-alt1
ALT-PU-2023-4801
ALT-PU-2023-4801: package `librsvg` update to version 2.56.3-alt1
CVE-2023-38633
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.
CVE-2023-38633
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.
CVE-2023-38633
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.
CVE-2023-38633
A directory traversal problem in the URL decoder of librsvg before 2.5 ...
SUSE-SU-2023:3208-1
Security update for librsvg
SUSE-SU-2023:3021-1
Security update for librsvg
GHSA-jf6v-gw88-w63q
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.
ELSA-2023-5081
ELSA-2023-5081: librsvg2 security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-05427 Уязвимость механизма объединения XML-документов XInclude библиотеки отрисовки векторной графики librsvg, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.5 | 2% Низкий | больше 3 лет назад |
 | ROS-20230911-09 Уязвимость librsvg | CVSS3: 5.5 | 2% Низкий | около 3 лет назад |
| ALT-PU-2023-8841 ALT-PU-2023-8841: package `librsvg` update to version 2.56.3-alt1 | CVSS3: 5.5 | 2% Низкий | больше 3 лет назад |
| ALT-PU-2023-4801 ALT-PU-2023-4801: package `librsvg` update to version 2.56.3-alt1 | CVSS3: 5.5 | 2% Низкий | около 3 лет назад |
 | CVE-2023-38633 A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element. | CVSS3: 5.5 | 2% Низкий | больше 3 лет назад |
 | CVE-2023-38633 A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element. | CVSS3: 5.5 | 2% Низкий | больше 3 лет назад |
 | CVE-2023-38633 A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element. | CVSS3: 5.5 | 2% Низкий | больше 3 лет назад |
| CVE-2023-38633 A directory traversal problem in the URL decoder of librsvg before 2.5 ... | CVSS3: 5.5 | 2% Низкий | больше 3 лет назад |
 | SUSE-SU-2023:3208-1 Security update for librsvg | 2% Низкий | больше 3 лет назад | |
| SUSE-SU-2023:3021-1 Security update for librsvg | 2% Низкий | больше 3 лет назад | |
| GHSA-jf6v-gw88-w63q A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element. | CVSS3: 7.5 | 2% Низкий | больше 3 лет назад |
| ELSA-2023-5081 ELSA-2023-5081: librsvg2 security update (MODERATE) | 2% Низкий | около 3 лет назад |
Уязвимостей на страницу