CVE-2024-39908

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that has many specific characters such as . If you need to parse untrusted XMLs, you many be impacted to these vulnerabilities. The REXML gem 3.3.2 or later include the patches to fix...

CVE-2024-39908 Denial of service in REXML

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that has many specific characters such as . If you need to parse untrusted XMLs, you many be impacted to these vulnerabilities. The REXML gem 3.3.2 or later include the patches to fix...

DoS in REXML

There is a DoS vulnerability in REXML gem. This vulnerability has been assigned the CVE identifier CVE-2024-39908. We strongly recommend upgrading the REXML gem. Details When it parses an XML that has many specific characters such as . REXML gem may take long time. Please update REXML gem to...

CVE-2023-39908

The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. This may lead to disclosure of uninitialized and previously used memory...

CVE-2023-39908

CVE-2023-39908 affects the PKCS11 module of the YubiHSM 2 SDK (through 2023.01). The issue is an improper validation of the length in specific read operations on object metadata, which may disclose uninitialized and previously used memory. Connected Nessus and Red Hat/NVD entries corroborate an u...

CVE-2022-39908

TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write...

CVE-2022-39908

CVE-2022-39908 affects Samsung decoding library used for video thumbnails on Samsung Mobile devices prior to SMR Dec-2022 Release 1. The root cause is a TOCTOU condition enabling a local attacker to perform an Out-Of-Bounds Write. Affected component: Samsung decoding library for video thumbnails;...

CVE-2021-39908

creationtimestamp| type| source ---|---|--- 2022-04-02 02:26:21+00:00| seen| https://t.me/cibsecurity/40057...

CVE-2021-39908

GitLab CVE-2021-39908 affects GitLab CE/EE: any version from 0.8.0 up to before 14.2.6, from 14.3 up to before 14.3.4, and from 14.4 up to before 14.4.1. The issue allows certain Unicode characters to be abused to commit malicious code into projects without being noticed in merge request or sourc...