10 results · Feed
-
Medium 6.3
Improper Restriction of XML External Entity Reference in Inkscape
A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.
-
High 7.8
Inkscape Out-of-bounds Write
Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code.
-
Low 3.3
Inkscape Access of Uninitialized Pointer
Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information.
-
Low 3.3
Inkscape Out-of-bounds Read
Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information.
-
Unscored —
Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to proce…
-
Unscored —
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity i…
-
Unscored —
Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code v…
-
Unscored —
Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote att…
-
Unscored —
The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files…
-
Unscored —
Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute…