1318 matches found
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20230302.103100)
The version of AHV installed on the remote host is prior to 20230302.102005. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20230302.103100 advisory. - A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.14)
The version of AOS installed on the remote host is prior to 6.10.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-6.10.1.14 advisory. - Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject...
macOS 26.x < 26.3 Multiple Vulnerabilities (126348)
The remote host is running a version of macOS / Mac OS X that is 26.x prior to 26.3. It is, therefore, affected by multiple vulnerabilities: - A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Tahoe 26.3, macOS Sonoma 14.8.4, iOS 18.7.5 and iPad...
macOS 14.x < 14.8.4 Multiple Vulnerabilities (126350)
The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8.4. It is, therefore, affected by multiple vulnerabilities: - A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Tahoe 26.3, macOS Sonoma 14.8.4, iOS 18.7.5 and...
Siemens S7-1500 Inefficient Algorithmic Complexity (CVE-2025-66382)
In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Tenable Nessus < 10.10.2 / 10.11.0 < 10.11.2 Multiple Vulnerabilities (TNS-2026-04)
According to its self-reported version, the Tenable Nessus application running on the remote host prior to 10.10.2, 10.11.0 prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-04 advisory. - In libexpat before 2.7.4, XMLExternalEntityParserCreate...
Updated expat packages fix security vulnerabilities
In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data. CVE-2026-24515 In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...
SUSE CVE-2026-25210
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...
EulerOS Virtualization 2.10.0 : expat (EulerOS-SA-2026-1164)
According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted fo...
EulerOS Virtualization 2.10.1 : expat (EulerOS-SA-2026-1113)
According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted fo...
CLEANSTART-2026-YT18139 issue was discovered in libexpat before 2
Multiple security vulnerabilities affect the expat package. An issue was discovered in libexpat before 2. See references for individual vulnerability details...
CLEANSTART-2026-NR68832 libexpat in Expat before 2
Multiple security vulnerabilities affect the python3 package. libexpat in Expat before 2. See references for individual vulnerability details...
CVE-2026-25210
A flaw was found in libexpat. A local attacker could exploit an integer overflow vulnerability in the doContent function. This flaw occurs because the buffer size is not properly determined during tag buffer reallocation, which can lead to memory corruption. Successful exploitation may result in...
OESA-2026-1274 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: In libexpat before 2.7.4, XMLExternalEntityParserCreate does not copy unknown encoding handler user data.CVE-2026-24515...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the doContent function in xmlparse.c. An attacker can cause memory corruption or potentially execute arbitrary code by providing specially crafted input that triggers an integer overflow. Remediation...
CVE-2026-25210
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...
ALPINE-CVE-2026-25210
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...
AZL-76340 CVE-2026-25210 affecting package expat for versions less than 2.6.4-4
In libexpat before 2.7.4, the doContent function does not properly determine the buffer size bufSize because there is no integer overflow check for tag buffer reallocation...
