297 matches found
EUVD-2021-0193
Malware in sbrugna...
EUVD-2022-6131
Malicious code in bioql PyPI...
EUVD-2024-27293
Malicious code in bioql PyPI...
EUVD-2023-0897
Malicious code in bioql PyPI...
EUVD-2023-32154
Malicious code in bioql PyPI...
FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint
An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...
Malicious code in marketing_extension_schemas (npm)
The package marketingextensionschemas was found to contain malicious code...
Malicious code in claris-schemas (npm)
The package claris-schemas was found to contain malicious code...
MAL-2025-17090 Malicious code in claris-schemas (npm)
The package claris-schemas was found to contain malicious code...
MAL-2025-25953 Malicious code in marketing_extension_schemas (npm)
The package marketingextensionschemas was found to contain malicious code...
EulerOS 2.0 SP13 : libxml2 (EulerOS-SA-2025-1981)
According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap- based buffer under-read. To exploit thi...
K000152932: libxml2 vulnerability CVE-2024-56171
Security Advisory Description libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or ...
VulnCheck KEV: CVE-2025-30220
GeoServer is an open source server that allows users to share and edit geospatial data. GeoTools Schema class use of Eclipse XSD library to represent schema data structure is vulnerable to XML External Entity XXE exploit. This impacts whoever exposes XML processing with gt-xsd-core involved in...
Malicious code in ist-schemas (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 807cc830c415e871b4c5756949d1211465844ecf7ea5103fbe2ac2f5de3a09ab Any computer that has this package installed or running should be considered...
MAL-2025-5034 Malicious code in ist-schemas (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 807cc830c415e871b4c5756949d1211465844ecf7ea5103fbe2ac2f5de3a09ab Any computer that has this package installed or running should be considered...
CVE-2022-29814
In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible...
DEBIAN-CVE-2025-32415
In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used...
CVE-2025-32381
XGrammar (open-source library for structured generation) has a DoS in-memory cache vulnerability. Before version 0.1.18, an unbounded in-memory cache of compiled grammars can be filled by many unique inputs (e.g., numerous JSON schemas), exhausting host memory and causing denial of service. The i...
GHSA-389X-67PX-MJG3 xgrammar Vulnerable to Denial of Service (DoS) by abusing unbounded cache in memory
Summary Xgrammar includes a cache for compiled grammars to increase performance with repeated use of the same grammar. This cache is held in memory. Since the cache is unbounded, a system making use of xgrammar can be abused to fill up a host's memory and case a denial of service. For example,...
libxml2: Use-After-Free in libxml2
A flaw was found in libxml2. This vulnerability allows a use-after-free via a crafted XML document validated against an XML schema with certain identity constraints or a crafted XML schema...