689 matches found
EUVD-2022-5030
Malicious code in bioql PyPI...
EUVD-2022-3625
Malicious code in bioql PyPI...
EUVD-2025-15126
Malicious code in bioql PyPI...
CVE-2023-53165 udf: Fix uninitialized array access for some pathnames
In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are between 2 and 5 characters long, UDF charset conversion code would read uninitialized memory in the output buffer. The only practical...
Linux Distros Unpatched Vulnerability : CVE-2014-6393
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset field in HTTP Content-Type headers in 400 level responses, which...
Linux Distros Unpatched Vulnerability : CVE-2025-1219
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when requesting a HTTP resource using the DOM or...
BIT-LIBPHP-2025-1219 libxml streams use wrong content-type header when requesting a redirected resource
In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may...
CVE-2012-10043
A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...
qt6-qtbase: qt5-qtbase: QtCore Assertion Failure Denial of Service
A flaw was found in QtCore's qDecodeDataUrl function. This vulnerability allows an application level denial of service via a malformed data URL with a missing charset value when assertions are enabled...
The vulnerability of the PHP web application development platform PHPPHPStudy lies in the improper encoding of the HTTP header Accept-Charset, allowing attackers to execute arbitrary code.
The vulnerability of the PHP web application development platform PHPPHPStudy is related to incorrect encoding of the HTTP header Accept-Charset using Base64 encoding. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
qt6-qtbase: qt5-qtbase: QtCore Assertion Failure Denial of Service
A flaw was found in QtCore's qDecodeDataUrl function. This vulnerability allows an application level denial of service via a malformed data URL with a missing charset value when assertions are enabled...
qt6-qtbase: qt5-qtbase: QtCore Assertion Failure Denial of Service
A flaw was found in QtCore's qDecodeDataUrl function. This vulnerability allows an application level denial of service via a malformed data URL with a missing charset value when assertions are enabled...
Astra Linux – Vulnerability in PHP 8.2
In PHP versions 8.1. up to 8.1.32, 8.2. up to 8.2.28, 8.3. up to 8.3.19, and 8.4. up to 8.4.5, when requesting an HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may result in...
GHSA-6R3C-XF4W-JXJM Spring Framework vulnerable to a reflected file download (RFD)
Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file download RFD attack when it sets a “Content-Disposition” header with a non-ASCII charset, where the filename attribute is derived from user-supplied input...
RFD Attack via “Content-Disposition” Header Sourced from Request
In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file download RFD attack when it sets a “Content-Disposition” header with a non-ASCII charset, where the filename attribute is derived from user-supplied input. Specifically, an...
The vulnerability of the qDecodeDataUrl() function in the QtCore module of the cross-platform software framework for developing Qt software, which allows a hacker to trigger a service failure.
The vulnerability of the qDecodeDataUrl function in the QtCore module of the cross-platform software framework for Qt development is related to insufficient validation of input data during the processing of the charset parameter. Exploiting this vulnerability could allow an attacker to cause...
CVE-2025-5455
An issue was found in the private API function qDecodeDataUrl in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code. If the function was called with malformed data, for example, an URL that contained a "charset" parameter that lacked a value such as...
CVE-2014-5018
Incomplete blacklist vulnerability in the autoEscape function in commonhelper.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to conduct cross-site scripting XSS attacks via the GBK charset in the loadname parameter to index.php, related to the survey resume...
python3.12-charset-normalizer bug fix and enhancement update
An update is available for python3.12-charset-normalizer. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, se...
python3.12-charset-normalizer bug fix and enhancement update
An update is available for python3.12-charset-normalizer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, se...