Количество 6
Количество 6
CVE-2020-17353
scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code.
CVE-2020-17353
scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code.
CVE-2020-17353
scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x ...
openSUSE-SU-2020:1453-1
Security update for lilypond
GHSA-wg4f-3xq5-x79h
scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code.
BDU:2021-03182
Уязвимость программы для набора партитур Lilypond, связанная с отсутствием ограничения включения команд Postscript и SVG при работе в безопасном режиме, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-17353 scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code. | CVSS3: 9.8 | 1% Низкий | больше 5 лет назад |
 | CVE-2020-17353 scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code. | CVSS3: 9.8 | 1% Низкий | больше 5 лет назад |
| CVE-2020-17353 scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x ... | CVSS3: 9.8 | 1% Низкий | больше 5 лет назад |
 | openSUSE-SU-2020:1453-1 Security update for lilypond | 1% Низкий | больше 5 лет назад | |
| GHSA-wg4f-3xq5-x79h scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and embedded-svg, as demonstrated by including dangerous PostScript code. | CVSS3: 9.8 | 1% Низкий | больше 3 лет назад |
 | BDU:2021-03182 Уязвимость программы для набора партитур Lilypond, связанная с отсутствием ограничения включения команд Postscript и SVG при работе в безопасном режиме, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 1% Низкий | больше 5 лет назад |
Уязвимостей на страницу