Lucene search
+L

12574 matches found

osv_ghsa
osv_ghsa
•added 2023/06/05 6:30 a.m.•62 views

GHSA-7GF7-JV65-WJMH xml-rs vulnerable to denial of service via invalid token in XML document

The xml-rs crate = 0.8.9 and 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document...

7.5CVSS7.3AI score0.01162EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2023/06/05 6:30 a.m.•32 views

xml-rs vulnerable to denial of service via invalid token in XML document

The xml-rs crate = 0.8.9 and 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document...

7.5CVSS7.1AI score0.01162EPSS
SaveExploits1References7Affected Software1
attackerkb
attackerkb
•added 2023/06/05 4:15 a.m.•13 views

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid...

7.5CVSS5.8AI score0.01162EPSS
SaveExploits1References5
NVD
NVD
•added 2023/06/05 4:15 a.m.•39 views

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

7.5CVSS7.4AI score0.01162EPSS
SaveExploits1References4
Prion
Prion
•added 2023/06/05 4:15 a.m.•13 views

Design/Logic Flaw

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

5CVSS7.4AI score0.01162EPSS
SaveExploits1References4Affected Software1
osv_ubuntu
osv_ubuntu
•added 2023/06/05 4:15 a.m.•21 views

UBUNTU-CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

7.5CVSS5.8AI score0.01162EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2023/06/05 4:15 a.m.•36 views

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

7.5CVSS7.1AI score0.01162EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2023/06/05 12:00 a.m.•9 views

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

7.5AI score0.01162EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2023/06/05 12:00 a.m.•28 views

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

7.5CVSS7.1AI score0.01162EPSS
SaveExploits1References6
CVE
CVE
•added 2023/06/05 12:00 a.m.•98 views

CVE-2023-34411

The CVE-2023-34411 issue affects the xml-rs crate for Rust (and Crab), with versions before 0.8.14 vulnerable to a denial-of-service (panic) caused by an invalid XML token, such as a malformed

7.5CVSS7.3AI score0.01162EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2023/06/05 12:00 a.m.•10 views

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

8.7CVSS0.01162EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/05 12:00 a.m.•5 views

CVE-2023-34411: Improper Restriction of XML External Entity Reference

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as...

7.5CVSS5.8AI score0.01162EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/06/05 12:00 a.m.•49 views

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

7.6AI score0.01162EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/06/05 12:00 a.m.•25 views

xml-rs code issues and vulnerabilities

xml-rs is an XML library for Rust. A code issue vulnerability exists in xml-rs crate versions prior to 0.8.14, which stems from allowing token errors to be caused by invalid xml markup...

7.5CVSS7.2AI score0.01162EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2023/06/05 12:00 a.m.•95 views

CVE-2023-34411

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service panic via an invalid ! token such as !DOCTYPEs/%!A nesting in an XML document. The earliest affected version is 0.8.9...

7.5CVSS7.4AI score0.01162EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2023/06/01 12:00 p.m.•9 views

acct (>=0.2.0, <=0.5.0), almel (>=1.0.0, <=1.4.7) +188 more potentially affected by unknown CVE via users (>=0.4.4, <=0.11.0)

users CARGO version =0.4.4, =0.2.0, =1.0.0, =0.1.0, =0.9.0, =0.9.0, =0.1.0, =0.9.0, =0.2.4, =0.1.0, =0.4.2, =0.4.0, =0.7.4, =0.1.1, =0.8.2, =0.8.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0040...

5.8AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2023/06/01 9:19 a.m.•47 views

Improved BlackCat Ransomware Strikes with Lightning Speed and Stealthy Tactics

The threat actors behind BlackCat ransomware have come up with an improved variant that prioritizes speed and stealth in an attempt to bypass security guardrails and achieve their goals. The new version, dubbed Sphynx and announced in February 2023, packs a "number of updated capabilities that...

6.7AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2023/06/01 9:19 a.m.•16 views

Improved BlackCat Ransomware Strikes with Lightning Speed and Stealthy Tactics

The threat actors behind BlackCat ransomware have come up with an improved variant that prioritizes speed and stealth in an attempt to bypass security guardrails and achieve their goals. The new version, dubbed Sphynx and announced in February 2023, packs a "number of updated capabilities that...

6.6AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2023/05/28 12:00 a.m.•16 views

Fedora: Security Advisory for rust-rpm-sequoia (FEDORA-2023-1d0d71b6aa)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/05/28 12:00 a.m.•13 views

Fedora: Security Advisory for rust-nettle (FEDORA-2023-1d0d71b6aa)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder