PT-2020-6174

Name of the Vulnerable Software and Affected Versions Libxml2 version 2.9.10 Description The issue is related to a global buffer over-read vulnerability in the xmlEncodeEntitiesInternal function at libxml2/entities.c in the Libxml2 library. This vulnerability allows a remote attacker to access...

libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-oldNs...

[SECURITY] Fedora 30 Update: libxml2-2.9.10-3.fc30

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

Libxml2 Infinite Loop Vulnerability

libxml2 is a library written in C for parsing XML documents . A security vulnerability exists in the xmlStringLenDecodeEntities of the parser.c file in libxml2 version 2.9.10. An attacker can exploit this vulnerability to cause an infinite loop...

libxml2 Memory Leak Vulnerability

libxml2 is a software library for parsing XML documents. An xmlSchemaValidateStream memory leak vulnerability exists in xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10. No detailed vulnerability details are provided at this time...

CVE-2019-20388

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...

ALPINE-CVE-2020-7595

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

CVE-2020-7595

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

Memory corruption

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...

CVE-2019-20388

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...

libxml2 Memory Leak Vulnerability

libxml2 is a library written in C for parsing XML documents . A memory leak vulnerability exists in the xmlParseBalancedChunkMemoryRecover of the parser.c file in versions of libxml2 prior to 2.9.10. No detailed vulnerability details are provided at this time...

Security Bulletin: Multiple vulnerabilities in jackson-databind affect IBM Platform Symphony and IBM Spectrum Symphony

Summary Multiple vulnerabilities exist in the Jackson databind, core, and annotations version used by IBM Spectrum Symphony V7.2.1, V7.2.0.2, and V7.1.2, and IBM Platform Symphony V7.1.1 and V7.1 Fix Pack 1. Interim fixes that provide instructions on upgrading the Jackson databind, core, and...

DEBIAN-CVE-2019-16335

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540...

Unspecified vulnerability in FasterXML jackson-databind (CNVD-2019-37174)

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . A security vulnerability exists in FasterXML jackson-databind versions prior to 2.9.10, which can be exploited by attackers to execute code...

phpMyFAQ <= 2.9.10 Multiple Vulnerabilities

phpMyFAQ is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if description...

Design/Logic Flaw

The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports...

PT-2019-4182

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.0.0 through 2.9.10 Description A Polymorphic Typing issue exists in the jackson-databind library. When Default Typing is enabled for an externally exposed JSON endpoint and the service has the commons-dbcp...

SoftPerfect Bandwidth Manager Authentication Bypass Vulnerability

SoftPerfect Bandwidth Manager is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication process and gain unauthorized access to the affected system. SoftPerfect Bandwidth Manager 2.9.10 is vulnerable; other versions may also be affected...