29537 matches found
CVE-2026-19614 XML External Entity (XXE) Injection in CyberELF NanoXML
The API is prone to XML external entity XXE injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3...
CVE-2026-19614
The API is prone to XML external entity XXE injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3...
CVE-2026-19614
CVE-2026-19614 is an XML External Entity (XXE) injection vulnerability in the API of CyberELF NanoXML version 2.2.3 . The root cause is that XML external entity support is enabled by default , allowing an attacker to craft malicious XML input that references external entities. The CVSS 4.0 base s...
EUVD-2026-72683
The API is prone to XML external entity XXE injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3...
CLSA-2026-1788863171 TuxCare security update for socket.io-parser (1 CVE)
TuxCare rebuilt socket.io-parser to address 1 CVE. Fixed in 3.3.4-tuxcare.2...
CLSA-2026-1788863169 TuxCare security update for socket.io-parser (1 CVE)
TuxCare rebuilt socket.io-parser to address 1 CVE. Fixed in 3.1.3-tuxcare.2...
CLSA-2026-1788863154 TuxCare security update for socket.io-parser (1 CVE)
TuxCare rebuilt socket.io-parser to address 1 CVE. Fixed in 3.2.0-tuxcare.3...
expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking
A flaw was found in libexpat. This vulnerability occurs because the library, in versions before 2.8.2, does not properly track handler call depth when certain XML parsing functions are invoked from within handlers during a policy violation. This oversight can lead to a use-after-free condition,...
Security update for wireshark
This update for wireshark fixes the following issues: CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops bsc1271133. CVE-2026-15164: Denial of Service vulnerability in ciscodump bsc1271134. CVE-2026-15166: Denial of Service via IEEE 802.11 protocol dissector crash...
SUSE-SU-2026:4077-1 Security update for wireshark
This update for wireshark fixes the following issues: - CVE-2026-15163: Denial of Service via multiple protocol dissector infinite loops bsc1271133. - CVE-2026-15164: Denial of Service vulnerability in ciscodump bsc1271134. - CVE-2026-15166: Denial of Service via IEEE 802.11 protocol dissector...
Moderate: Red Hat Security Advisory: expat security update
An update for expat is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking
A flaw was found in libexpat. This vulnerability occurs because the library, in versions before 2.8.2, does not properly track handler call depth when certain XML parsing functions are invoked from within handlers during a policy violation. This oversight can lead to a use-after-free condition,...
Moderate: Red Hat Security Advisory: expat security update
An update for expat is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
CVE-2026-86515
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function addentry of the file src/meta/txtpparser.c of the component txtp. Such manipulation of the argument rangestart/rangeend leads to resource consumption. The attack may be performed from remote. The exploit...
CVE-2026-86515 vgmstream txtp txtp_parser.c add_entry resource consumption
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function addentry of the file src/meta/txtpparser.c of the component txtp. Such manipulation of the argument rangestart/rangeend leads to resource consumption. The attack may be performed from remote. The exploit...
CVE-2026-86515 vgmstream txtp txtp_parser.c add_entry resource consumption
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function addentry of the file src/meta/txtpparser.c of the component txtp. Such manipulation of the argument rangestart/rangeend leads to resource consumption. The attack may be performed from remote. The exploit...
CVE-2026-86515 vgmstream txtp txtp_parser.c add_entry resource consumption
A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function addentry of the file src/meta/txtpparser.c of the component txtp. Such manipulation of the argument rangestart/rangeend leads to resource consumption. The attack may be performed from remote. The exploit...
CVE-2026-86515
vgmstream up to r2117 is affected by a vulnerability in the txtp parser component, specifically the add_entry function in src/meta/txtp_parser.c. Manipulation of the range_start/range_end arguments leads to resource consumption , resulting in a low availability impact. The attack is remote over t...
CVE-2026-86513 java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...
CVE-2026-86513 java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...