353 matches found
CVE-2025-15251
The CVE-2025-15251 entry describes a vulnerability in beecue FastBee (SIP Message Handler) up to version 2.1. The issue is in getRootElement (springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java) and manifests as an XML External Entity (XXE) refer...
NULL Pointer Dereference
Overview libxmljs is a libxml bindings for v8 javascript engine Affected versions of this package are vulnerable to NULL Pointer Dereference in the parsing process of specially crafted XML documents when accessing the ref property on entityref and entitydecl nodes. An attacker can cause a...
CVE-2025-25341
A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...
CVE-2025-25341
CVE-2025-25341 affects libxmljs 1.0.11. The vulnerability occurs when parsing specially crafted XML documents: accessing the internal _ref property on entity_ref and entity_decl nodes can cause a segmentation fault, leading to a denial-of-service. Multiple sources (Red Hat, OSV, NVD, CNNVD, GHSA,...
CVE-2025-25341
A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...
CVE-2025-25341
A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...
EUVD-2025-205443
A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...
PT-2025-53592
Name of the Vulnerable Software and Affected Versions libxmljs version 1.0.11 Description A flaw exists in libxmljs when processing a specifically designed XML document. Accessing the internal ref property on entity ref and entity decl nodes can result in a segmentation fault, potentially causing...
libxmljs 安全漏洞
libxmljs is the LibXML binding for node.js of the libxmljs open source. A security vulnerability exists in libxmljs version 1.0.11, which stems from the fact that accessing the internalref attribute of the entityref and entitydecl nodes when parsing a specially crafted XML document may result in ...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-58360link is external OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability This type of vulnerability is a frequent attack...
Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor
ktor-xxe This project was created using the Ktor Project Gen...
CVE-2025-11341
CVE-2025-11341 affects Jinher OA (versions up to 2.0) via an XML External Entity (XXE) vulnerability in the function handling a request to /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. The issue arises from manipulating an unknown function in that file, enabling rem...
EUVD-2022-52095
Malicious code in bioql PyPI...
EUVD-2021-30851
Malicious code in bioql PyPI...
EUVD-2021-34141
Malicious code in bioql PyPI...
EUVD-2023-58442
Malicious code in bioql PyPI...
EUVD-2024-44871
Malicious code in bioql PyPI...
EUVD-2023-34259
Malicious code in bioql PyPI...