IN
Vendor
Inkscape
10
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-4980 | IN Inkscape Inkscape | 6.3 | Mar 27 | Improper Restriction of XML External Entity Reference in Inkscape |
| CVE-2021-42704 | IN Inkscape Inkscape | 7.8 | May 18 | Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code |
| CVE-2021-42702 | IN Inkscape Inkscape | 3.3 | May 18 | Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information |
| CVE-2021-42700 | IN Inkscape Inkscape | 3.3 | May 18 | Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information |
| CVE-2012-6076 | IN Inkscape Inkscape | – | Mar 12 | Inkscape before 0.48.4 reads .eps files from /tmp instead of the current directory, which might cause Inkspace to process unintended files, allow local users to obtain sensitive… |
| CVE-2012-5656 | IN Inkscape Inkscape | 5.5 | Jan 18 | The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection… |
| CVE-2007-1464 | IN Inkscape Inkscape | – | Mar 21 | Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors |
| CVE-2007-1463 | IN Inkscape Inkscape | – | Mar 21 | Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly… |
| CVE-2005-3885 | IN Inkscape Inkscape | – | Nov 29 | The ps2epsi extension shell script (ps2epsi.sh) in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file |
| CVE-2005-3737 | IN Inkscape Inkscape | – | Nov 22 | Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property… |