1170 matches found
ALPINE-CVE-2026-56411
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations...
CVE-2026-56411
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the endDoctypeDecl process when handling NOTATION declarations. An attacker can cause memory corruption or potentially execute arbitrary code by providing specially crafted XML input. Remediation A fix...
CVE-2026-56411
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations...
CVE-2026-56411
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations...
CVE-2026-56411
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations...
CVE-2026-56411
CVE-2026-56411 affects libexpat’s xmlwf binary, with an integer overflow in endDoctypeDecl triggered by NOTATION declarations prior to version 2.8.2. The CVSS metrics indicate a Local attack vector, high confidentiality and integrity impact, and low availability impact, with no user interaction r...
EUVD-2026-38188
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations...
CVE-2026-56411
xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations...
PT-2026-51247
Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.8.2 Description The xmlwf component contains an integer overflow in the endDoctypeDecl function. This issue is triggered via NOTATION declarations, which are used in XML to define the format of non-XML data...
Linux Distros Unpatched Vulnerability : CVE-2026-56411
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. CVE-2026-56411 Note that Nessus relies on the presence of th...
PT-2026-51140
Name of the Vulnerable Software and Affected Versions WordPress Time Capsule Plugin version 1.21.16 Description An authentication bypass allows unauthenticated attackers to gain administrative access by sending a crafted POST request containing the IWP JSON PREFIX header. This flaw enables the...
GHSA-VQX6-6J84-2794 Duplicate Advisory: Hostname checks could treat trailing-dot hosts inconsistently
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-gxg4-2rrr-jhc7. This link is maintained to preserve external references. Original Description OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist...
GHSA-WFQV-66VQ-46RM vulnerabilities
Vulnerabilities for packages: teleport, trivy-operator, kyverno-policy-reporter-plugins-kyverno-fips, ratify-fips, vexctl, kyverno-policy-reporter-plugins-kyverno, tkn, commercial-chainloop-cli, ko, kyverno-notation-aws, tkn-fips, slsa-verifier, crossplane-fips, aactl, trivy-fips, skaffold, ratif...
CVE-2026-24122 vulnerabilities
Vulnerabilities for packages: teleport, trivy-operator, kyverno-policy-reporter-plugins-kyverno-fips, ratify-fips, vexctl, kyverno-policy-reporter-plugins-kyverno, tkn, commercial-chainloop-cli, ko, kyverno-notation-aws, tkn-fips, slsa-verifier, crossplane-fips, aactl, trivy-fips, skaffold, ratif...
GHSA-WFQV-66VQ-46RM vulnerabilities
Vulnerabilities for packages: teleport, kyverno, ko, tkn, kyverno-notation-aws, slsa-verifier, vexctl, zot, aactl, skaffold, trivy, ratify, trivy-operator, tekton-chains...
CVE-2026-24122 vulnerabilities
Vulnerabilities for packages: teleport, kyverno, ko, tkn, kyverno-notation-aws, slsa-verifier, vexctl, zot, aactl, skaffold, trivy, ratify, trivy-operator, tekton-chains...
CVE-2026-53859 OpenClaw < 2026.5.26 - Hostname Validation Bypass via Trailing-Dot Inconsistency
OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparisons using trailing-dot notation in model or workspace-derived URLs. Attackers can exploit inconsistent hostname checks to reach destinations that operators intended to block throu...
CVE-2026-10825
A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot...
