Lucene search
+L

735 matches found

NVD
NVD
•added 2026/03/03 12:16 p.m.•20 views

CVE-2026-3463

A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binarywriter::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed...

7.8CVSS0.00228EPSS
SaveExploits1References8
OSV
OSV
•added 2026/03/03 12:02 p.m.•14 views

CVE-2026-3463 xlnt-community xlnt Compound Document binary.hpp append heap-based overflow

A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binarywriter::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed...

4.8CVSS5.7AI score
SaveExploits0References10
attackerkb
attackerkb
•added 2026/03/03 12:02 p.m.•8 views

CVE-2026-3463

A weakness has been identified in xlnt-community xlnt up to 1.6.1. Impacted is the function xlnt::detail::binarywriter::append of the file source/detail/binary.hpp of the component Compound Document Parser. This manipulation causes heap-based buffer overflow. The attack can only be executed...

7.8CVSS5.9AI score0.00228EPSS
SaveExploits1References8Affected Software1
CNNVD
CNNVD
•added 2026/03/03 12:00 a.m.•22 views

xlnt 安全漏洞

xlnt is an open-source C++ language library developed by the xlnt-community. Versions of xlnt 1.6.1 and earlier contain security vulnerabilities. These vulnerabilities stem from a buffer overflow vulnerability in the function xlnt::detail::binarywriter::append located in the...

7.8CVSS6AI score0.00228EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2026/03/03 12:00 a.m.•26 views

PT-2026-22730

Name of the Vulnerable Software and Affected Versions xlnt-community xlnt versions up to 1.6.1 Description A flaw exists in xlnt-community xlnt up to version 1.6.1 related to the xlnt::detail::binary writer::append function within the source/detail/binary.hpp file of the Compound Document Parser...

7.8CVSS5.5AI score0.00228EPSS
SaveExploits1References18
RedHat Linux
RedHat Linux
•added 2026/02/10 8:20 a.m.•16 views

cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in xml.dom.minidom methods, such as appendChild, when building excessively nested documents due to a dependency on clearidcache...

6.3CVSS6.4AI score0.00799EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/02/09 8:26 a.m.•15 views

cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in xml.dom.minidom methods, such as appendChild, when building excessively nested documents due to a dependency on clearidcache...

6.3CVSS6.4AI score0.00799EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/02/09 2:15 a.m.•23 views

cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in xml.dom.minidom methods, such as appendChild, when building excessively nested documents due to a dependency on clearidcache...

6.3CVSS6.4AI score0.00799EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/02/08 1:21 a.m.•24 views

CVE-2026-25628

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

8.8CVSS5.5AI score0.00695EPSS
SaveExploits1References1
NVD
NVD
•added 2026/02/06 9:16 p.m.•23 views

CVE-2026-25628

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

8.8CVSS0.00695EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/06 12:00 a.m.•3 views

CVE-2026-25628: External Control of File Name or Path

Qdrant is a vector similarity search engine and vector database. From 1.9.3 to before 1.16.0, it is possible to append to arbitrary files via /logger endpoint using an attacker-controlled ondisk.logfile path. Minimal privileges are required read-only access. This vulnerability is fixed in 1.16.0...

8.8CVSS5.9AI score0.00695EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2026/02/04 7:51 p.m.•19 views

cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in xml.dom.minidom methods, such as appendChild, when building excessively nested documents due to a dependency on clearidcache...

6.3CVSS6.4AI score0.00799EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/02/03 3:42 p.m.•17 views

cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in xml.dom.minidom methods, such as appendChild, when building excessively nested documents due to a dependency on clearidcache...

6.3CVSS6.4AI score0.00799EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/02/02 1:25 a.m.•14 views

cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in xml.dom.minidom methods, such as appendChild, when building excessively nested documents due to a dependency on clearidcache...

6.3CVSS6.4AI score0.00799EPSS
SaveExploits0References6
OSV
OSV
•added 2026/01/30 4:26 p.m.•11 views

CLEANSTART-2026-MB75553 vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record

Multiple security vulnerabilities affect the playwright-python package. A vulnerability was found in Avahi, where a reachable assertion exists in avahidnspacketappendrecord. See references for individual vulnerability details...

9.8CVSS6.5AI score0.00666EPSS
SaveExploits0References15
OSV
OSV
•added 2026/01/30 11:10 a.m.•21 views

OESA-2026-1265 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

7.5CVSS7.2AI score0.00499EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/01/29 2:28 p.m.•15 views

cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in xml.dom.minidom methods, such as appendChild, when building excessively nested documents due to a dependency on clearidcache...

6.3CVSS6.4AI score0.00799EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/01/27 5:32 p.m.•16 views

cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in xml.dom.minidom methods, such as appendChild, when building excessively nested documents due to a dependency on clearidcache...

6.3CVSS6.4AI score0.00799EPSS
SaveExploits0References6
OSV
OSV
•added 2026/01/27 10:41 a.m.•19 views

CLSA-2026-1769510460 python3: Fix of CVE-2025-12084

CVE-2025-12084: optimize clearidcache function for faster performance when building nested elements with xml.dom.minidom methods like appendChild...

6.3CVSS6.5AI score0.00799EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/01/21 9:03 a.m.•15 views

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

...

7.5CVSS7.3AI score0.00499EPSS
SaveExploits0
Rows per page
Query Builder