37343 matches found
MINI-RJXF-M767-P3XW
Bulletin has no description...
DEBIAN-CVE-2026-15037
Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under th...
EUVD-2026-48254
Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under th...
PYSEC-2026-3495 Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
Summary PdfParser.PdfStream.decode in Pillow's PdfParser.py calls zlib.decompress with the bufsize parameter set to the value of the PDF stream's Length field, without any upper bound on the actual decompressed output size. Python's zlib.decompress bufsize argument is an initial output buffer hin...
ECHO-60A1-36C5-6226
Bulletin has no description...
ECHO-6F24-CDD7-9E3E
Bulletin has no description...
ECHO-BE32-8712-2A19
Bulletin has no description...
CGA-PR26-896C-WGC6
Bulletin has no description...
EUVD-2026-47579
Netty XML: Injection / Risky Sink — unconfigured XML factory with active DTD and entity handling...
CGA-98RG-M8C3-2RM5
Bulletin has no description...
MINI-24FR-2CJW-RFV9
Bulletin has no description...
MINI-VVJ8-5V85-VFR9
Bulletin has no description...
MINI-GRRJ-7RFC-MQ2M
Bulletin has no description...
MINI-265P-6QJG-CP85
Bulletin has no description...
MINI-WMHQ-XH82-C3C9
Bulletin has no description...
MINI-5W27-87GG-VJR2
Bulletin has no description...
MINI-6664-V4V4-RJ2M
Bulletin has no description...
MINI-494Q-MHX8-QRXJ
Bulletin has no description...
EUVD-2026-47697
In Progress® Telerik® UI for AJAX prior to v2026.2.708, insufficient validation of content submitted to the RadEditor PDF export feature may allow an authenticated attacker to trigger server-side requests to arbitrary hosts, resulting in outbound network connections and potential exposure of...