https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 14:15:29 +0000 https://vulnerability.circl.lu/vuln/cve-2015-0250 <p>XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.</p> <p>XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.</p> https://vulnerability.circl.lu/vuln/cve-2015-0250 https://vulnerability.circl.lu/vuln/usn-2548-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: batik</p> <p>Nicolas Gregoire and Kevin Schaller discovered that Batik would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted SVG file, an attacker could possibly obtain access to arbitrary files or cause resource consumption.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: batik</p> <p>Nicolas Gregoire and Kevin Schaller discovered that Batik would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted SVG file, an attacker could possibly obtain access to arbitrary files or cause resource consumption.</p> https://vulnerability.circl.lu/vuln/usn-2548-1