484 matches found
CVE-2024-45490 affecting package expat for versions less than 2.6.3-1
CVE-2024-45490 affecting package expat for versions less than 2.6.3-1. An upgraded version of the package is available that resolves this issue...
[R1] Nessus Version 10.7.6 Fixes Multiple Vulnerabilities
R1 Nessus Version 10.7.6 Fixes Multiple Vulnerabilities Arnie Cabral Wed, 09/11/2024 - 12:57 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components OpenSSL, expat were found to contain vulnerabilities, and updated versions have been...
[SECURITY] Fedora 40 Update: expat-2.6.3-1.fc40
This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...
Fedora 40 : expat (2024-f27c29c09c)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-f27c29c09c advisory. Rebase to version 2.6.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
OESA-2024-2102 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for...
ALPINE-CVE-2024-45492
An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms where UINTMAX equals SIZEMAX...
AZL-48466 CVE-2024-45492 affecting package expat for versions less than 2.6.3-1
An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms where UINTMAX equals SIZEMAX...
AZL-48369 CVE-2024-45490 affecting package expat for versions less than 2.6.3-1
An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer...
libexpat 输入验证错误漏洞
libexpat is a streaming XML parser written in C by the libexpat team. An input validation error vulnerability exists in libexpat versions prior to 2.6.3, which stems from dtdCopy in xmlparse.c on 32-bit platforms that can lead to an nDefaultAtts integer overflow...
PT-2024-6340
Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.6.3 Description An issue was discovered in libexpat that is related to an integer overflow in the dtdCopy function in the xmlparse.c file. This issue can occur on 32-bit platforms and may allow a remote attacker to...
RockOA cross-site scripting vulnerability (CNVD-2024-33675)
RockOA Xinhuo is an open source office OA system. A cross-site scripting vulnerability exists in RockOA 2.6.3, which originates from a callback parameter in the /webmain/public/upload/tplupload.html file containing cross-site scripting. No details of the vulnerability are available at this time...
PT-2024-37977 · Unknown · Xinhu Rockoa
Name of the Vulnerable Software and Affected Versions: Xinhu RockOA version 2.6.3 Description: A vulnerability was found in the function okla of the file /webmain/public/upload/tpl upload.html. The manipulation of the argument callback leads to cross site scripting. The attack may be launched...
PT-2024-27609
Name of the Vulnerable Software and Affected Versions WooCommerce Social Login versions 2.6.3 and earlier Description The issue is related to the deserialization of untrusted data in WooCommerce Social Login. This can potentially lead to security issues. No information is provided about the...
WordPress WooCommerce Social Login Plugin <= 2.6.3 is vulnerable to PHP Object Injection
Software WooCommerce Social Login Type Plugin Vulnerable versions = 2.6.3 Fixed in 2.7.0 OWASP Top 10 A5: Security Misconfiguration Classification PHP Object Injection CVE CVE-2024-37502 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 642655a733d8 Credits Ananda Dhak...
WordPress plugin WP 2FA Log Message Disclosure Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A log information...
CVE-2024-37622
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the num parameter at /flow/flow.php...
PT-2024-27679 · Unknown · Xinhu Rockoa
Name of the Vulnerable Software and Affected Versions: Xinhu RockOA version 2.6.3 Description: A reflected cross-site scripting XSS issue was found in Xinhu RockOA via the num parameter at the "/flow/flow.php" endpoint. Recommendations: For version 2.6.3, avoid using the num parameter in the...
PT-2024-27680 · Xinhu · Rockoa
Name of the Vulnerable Software and Affected Versions: Xinhu RockOA version 2.6.3 Description: A reflected cross-site scripting XSS issue was found in the /kaoqin/tpl kaoqin locationchange.html component. Recommendations: For version 2.6.3, consider disabling access to the /kaoqin/tpl kaoqin...
RockOA Security Breach
RockOA Xinhu is an open source office OA system. A security vulnerability exists in Xinhu RockOA version v2.6.3, which originates from the inclusion of a Reflected Cross-Site Scripting XSS vulnerability via the /chajian/inputChajian.php component...