117 matches found
UBUNTU-CVE-2025-9375
XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is disputed by the vendor on the grounds that xmltodict.unparse delegates element-name handling to Python's xml.sax.saxutils.XMLGenerator,...
CVE-2025-9375
XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is disputed by the vendor on the grounds that xmltodict.unparse delegates element-name handling to Python's xml.sax.saxutils.XMLGenerator,...
CVE-2025-9375
CVE-2025-9375 is an XML Injection vulnerability in the Python package xmltodict. It affects versions from 0.14.2 up to (but not including) 0.15.1, allowing input data manipulation. The issue’s root cause relates to improper handling of XML input, enabling manipulation of input data through crafte...
CVE-2025-9375 xmltodict 0.14.2 - XML Injection
XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is disputed by the vendor on the grounds that xmltodict.unparse delegates element-name handling to Python's xml.sax.saxutils.XMLGenerator,...
CVE-2025-9375 xmltodict 0.14.2 - XML Injection
XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is disputed by the vendor on the grounds that xmltodict.unparse delegates element-name handling to Python's xml.sax.saxutils.XMLGenerator,...
PT-2025-35498
Name of the Vulnerable Software and Affected Versions: xmltodict version 0.14.2 Description: An XML Injection vulnerability exists in xmltodict, allowing for Input Data Manipulation. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
xmltodict 安全漏洞
xmltodict is a Python library by the individual developer Martín Blech. A security vulnerability exists in xmltodict version 0.14.2, which stems from an XML injection issue that could lead to input data manipulation...
CVE-2017-20199
A vulnerability was found in Buttercup buttercup-browser-extension up to 0.14.2. Affected by this vulnerability is an unknown functionality of the component Vault Handler. The manipulation results in improper access controls. The attack may be performed from a remote location. A high complexity...
CVE-2017-20199
A vulnerability was found in Buttercup buttercup-browser-extension up to 0.14.2. Affected by this vulnerability is an unknown functionality of the component Vault Handler. The manipulation results in improper access controls. The attack may be performed from a remote location. A high complexity...
Buttercup 安全漏洞
Buttercup is a password manager. A security vulnerability exists in Buttercup 0.14.2 and earlier versions that stems from improper access control...
CVE-2017-20199
Buttercup buttercup-browser-extension
RefindPlus 安全漏洞
RefindPlus is an open source boot manager for Mac and PC by RefindPlusRepo. A security vulnerability exists in RefindPlus version 0.14.2.AB, which stems from a null pointer dereference due to the GetDebugLogFile operation of the function in the file BootLog.c. The vulnerability is caused by a nul...
RefindPlus 安全漏洞
RefindPlus is RefindPlusRepo open source a boot manager for Mac and PC. A security vulnerability exists in RefindPlus version 0.14.2.AB, which stems from a null pointer dereference due to the function InternalApfsTranslateBlock operation in the file RPApfsIo.c. The vulnerability is caused by a nu...
SUSE CVE-2024-46455
unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...
CVE-2024-46455
unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...
PT-2024-35954 · Rpgp · Rpgp
Name of the Vulnerable Software and Affected Versions: rPGP versions prior to 0.14.1 Description: The issue allows attackers to trigger resource exhaustion vulnerabilities in rPGP by providing crafted messages, affecting general message parsing and decryption with symmetric keys. This can cause...
SUSE CVE-2011-1923
The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095...
RUSTSEC-2023-0003 git2 does not verify SSH keys by default
The git2 and libgit2-sys crates are Rust wrappers around the libgit2 C library. It was discovered that libgit2 1.5.0 and below did not verify SSH host keys when establishing an SSH connection, exposing users of the library to Man-In-the-Middle attacks. The libgit2 team assigned...