67 matches found
Astra Linux – Vulnerability found in Python 3.11, Python 2.7, and Python 3.7
There is a medium-severity vulnerability affecting CPython. The email module does not properly quote newlines for email headers when serializing an email message, allowing for header injection when an email is serialized...
HTML Sanitizer 跨站脚本漏洞
HTML Sanitizer is an HTML security filtering component open-sourced by the TYPO3 GitHub Department. Versions of HTML Sanitizer prior to 2.3.2 contained a cross-site scripting vulnerability. This vulnerability stemmed from incorrect encoding of namespace attributes during HTML serialization, which...
Linux Distros Unpatched Vulnerability : CVE-2026-43353
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i3c: mipi-i3c-hci: Fix race in DMA ring dequeue The HCI DMA dequeue path hcidmadequeuexfer may be invoked for multiple transfers that timeout around the same...
CVE-2026-41674 xmldom: XML injection through unvalidated DocumentType serialization
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom version 0.6.0 and prior, the package serializes DocumentType node fields internalSubset, publicId, systemId verbatim without any...
CVE-2026-43220: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: serialize sequence allocation under concurrent TLB invalidations With concurrent TLB invalidations, completion wait randomly gets timed out because cmdsemval was incremented outside the IOMMU spinlock, allowing...
Mix PHP 代码问题漏洞
Mix PHP is Mix PHP open source a PHP command line mode development framework that supports seamless multi-server ecosystem switching. A code issue vulnerability exists in Mix PHP versions 2.x through 2.2.17 that stems from a session and cache handler call to unserialize on file system data in the...
Allocation of Resources Without Limits or Throttling
Overview seroval is a Stringify JS values Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when serializing objects with very large depth. An attacker can cause resource exhaustion and disrupt service availability by submitting objects with...
CVE-2021-0970
In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-1...
EUVD-2021-2511
Malware in sbrugna...
EUVD-2021-2578
Malware in sbrugna...
EUVD-2020-0497
Malware in sbrugna...
EUVD-2016-5470
Malware in sbrugna...
EUVD-2021-2576
Malware in sbrugna...
EUVD-2021-2482
Malware in sbrugna...
EUVD-2021-26985
Malware in sbrugna...
EUVD-2018-17123
Malware in sbrugna...
EUVD-2020-0495
Malware in sbrugna...
EUVD-2006-6000
Malware in sbrugna...