Lucene search
K

62 matches found

OSV
OSV
added 2026/05/11 9:46 a.m.1 views

MINI-33RC-9375-9H4X

Bulletin has no description...

5.9CVSS5.7AI score0.00005EPSS
Exploits0
OSV
OSV
added 2026/01/29 12:47 a.m.3 views

CGA-9375-H7WM-JWMW

Bulletin has no description...

8.1CVSS5.8AI score0.00074EPSS
Exploits4
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.6 views

TencentOS Server 4: python-xmltodict (TSSA-2025:0945)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0945 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

6.9CVSS5.6AI score0.0013EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/10/10 12:0 a.m.2 views

SUSE SLES15 / openSUSE 15 Security Update : python-xmltodict (SUSE-SU-2025:03511-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03511-1 advisory. - CVE-2025-9375: XML injection vulnerability in xmltodict allows input data manipulation bsc1249036. Tenable has extracted th...

6.9CVSS5.5AI score0.0013EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:0 a.m.1 views

SUSE SLES15 Security Update : python-xmltodict (SUSE-SU-2025:03457-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03457-1 advisory. - CVE-2025-9375: XML injection vulnerability in xmltodict allows input data manipulation bsc1249036. Tenable has extracted the preceding...

6.9CVSS5.5AI score0.0013EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2025/10/07 7:15 a.m.3 views

Security update for python-xmltodict

This update for python-xmltodict fixes the following issues: CVE-2025-9375: XML injection vulnerability in xmltodict allows input data manipulation bsc1249036. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

6.9CVSS7.1AI score0.0013EPSS
Exploits0References4
OSV
OSV
added 2025/10/07 7:15 a.m.2 views

SUSE-SU-2025:03457-1 Security update for python-xmltodict

This update for python-xmltodict fixes the following issues: - CVE-2025-9375: XML injection vulnerability in xmltodict allows input data manipulation bsc1249036...

6.9CVSS7AI score0.0013EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/10/01 1:46 p.m.2 views

Security update for python-xmltodict

This update for python-xmltodict fixes the following issues: CVE-2025-9375: Fixed XML Injection vulnerability in xmltodict bsc1249036 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run t...

6.9CVSS7.3AI score0.0013EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2025/09/17 12:0 a.m.2 views

Ubuntu: Security Advisory (USN-7753-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.8AI score0.0013EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/04 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-9375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is...

6.9CVSS5.7AI score0.0013EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2025/09/01 5:41 p.m.0 views

aaz-dev (>=1.0.2 <=4.5.3), acdc-aws-etl-pipeline (>=0.1.7 <=0.5.9) +1157 more potentially affected by CVE-2025-9375 via xmltodict (>=0.10.1 <=0.14.2)

xmltodict PYPI version =0.10.1, =1.0.2, =0.1.7, =0.0.7, =0.2.5a4, =0.0.1, =0.1.0, =0.17.9, =0.0.0.dev0, =0.1.0, =0.1.6 and more Source cves: CVE-2025-9375 Source advisory: SNYK:PYTHON-XMLTODICT-12427118...

6.9CVSS5.8AI score0.0013EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2025/09/01 5:15 p.m.1 views

CVE-2025-9375

XML Injection vulnerability in xmltodict allows Input Data Manipulation. This issue affects xmltodict: from 0.14.2 before 0.15.1. NOTE: the scope of this CVE is disputed by the vendor on the grounds that xmltodict.unparse delegates element-name handling to Python's xml.sax.saxutils.XMLGenerator,...

6.9CVSS5.8AI score0.0013EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 8:34 a.m.3 views

CVE-2019-9375

In hostapd, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129344244...

6.9CVSS7.1AI score0.0001EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:26 a.m.5 views

CVE-2015-9375

Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

6.1CVSS6AI score0.00368EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2017-9375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - QEMU aka Quick Emulator, when built with USB xHCI controller emulator support, allows local guest OS privileged users to cause a denial of service infinite...

5.5CVSS6.5AI score0.00099EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2016-9375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop, triggered by network traffic or a capture file. This was...

5.9CVSS6.4AI score0.01481EPSS
Exploits0References2
OSV
OSV
added 2025/01/17 11:15 p.m.2 views

CVE-2018-9375

In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00041EPSS
Exploits0References1
NVD
NVD
added 2025/01/17 11:15 p.m.8 views

CVE-2018-9375

In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00041EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/01/17 11:7 p.m.8 views

CVE-2018-9375

In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00041EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/17 11:7 p.m.9 views

CVE-2018-9375

In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.2AI score0.00041EPSS
Exploits0References1
Rows per page
Query Builder