Lucene search
+L

29 matches found

OpenVAS
OpenVAS
•added 2024/10/28 12:00 a.m.•13 views

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2024-2638)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.02428EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2024/07/16 12:00 a.m.•26 views

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2024-1889)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02428EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/07/16 12:00 a.m.•28 views

EulerOS 2.0 SP9 : libxml2 (EulerOS-SA-2024-1940)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with...

7.5CVSS6.4AI score0.02428EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/07/15 12:00 a.m.•21 views

EulerOS 2.0 SP10 : libxml2 (EulerOS-SA-2024-1889)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with...

7.5CVSS6.4AI score0.02428EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2023/07/26 12:00 a.m.•20 views

EulerOS Virtualization 3.0.6.6 : python-lxml (EulerOS-SA-2023-2401)

According to the versions of the python-lxml package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is...

7.5CVSS6.3AI score0.02428EPSS
SaveExploits1References2
Mageia
Mageia
•added 2023/05/06 6:19 p.m.•102 views

Updated libxml2 packages fix security vulnerability

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS7.1AI score0.02428EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
•added 2022/10/08 12:00 a.m.•18 views

EulerOS 2.0 SP5 : python-lxml (EulerOS-SA-2022-2447)

According to the versions of the python-lxml package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together wi...

7.5CVSS6.3AI score0.02428EPSS
SaveExploits1References2
OSV
OSV
•added 2022/07/05 10:15 a.m.•33 views

UBUNTU-CVE-2022-2309

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.4AI score0.02428EPSS
SaveExploits1References9
Prion
Prion
•added 2022/07/05 10:15 a.m.•46 views

Null pointer dereference

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

5CVSS6AI score0.02428EPSS
SaveExploits1References6Affected Software2
UbuntuCve
UbuntuCve
•added 2022/07/05 10:15 a.m.•86 views

CVE-2022-2309

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.5AI score0.02428EPSS
SaveExploits1References8
Debian CVE
Debian CVE
•added 2022/07/05 9:00 a.m.•131 views

CVE-2022-2309

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

7.5CVSS6.1AI score0.02428EPSS
SaveExploits1
OSV
OSV
•added 2022/07/05 9:00 a.m.•46 views

CVE-2022-2309 NULL Pointer Dereference in lxml/lxml

NULL Pointer Dereference allows attackers to cause a denial of service or application crash. This only applies when lxml is used together with libxml2 2.9.10 through 2.9.14. libxml2 2.9.9 and earlier are not affected. It allows triggering crashes through forged input data, given a vulnerable code...

5.3CVSS5.7AI score
SaveExploits0References9
CNVD
CNVD
•added 2021/11/11 12:00 a.m.•45 views

pdftoxml null pointer dereference vulnerability

pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 of the TextPage::restoreState function has a null pointer dereference vulnerability. An attacker can exploit this vulnerability to cause a denial of service...

7.5CVSS3.9AI score0.01406EPSS
SaveExploits1References1
Prion
Prion
•added 2021/11/01 2:15 a.m.•27 views

Xxe

Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity XXE attack to cause a denial of service DoS condition by processing a specially crafted XML document...

5CVSS7.5AI score0.0152EPSS
SaveExploits0References2Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2021/08/17 12:00 a.m.•18 views

VulnCheck KEV: CVE-2011-0097

Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary cod...

9.3CVSS6.8AI score0.31553EPSS
SaveIn wildExploits5References2
VulnCheck KEV
VulnCheck KEV
•added 2021/08/17 12:00 a.m.•12 views

VulnCheck KEV: CVE-2010-3336

Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."...

9.3CVSS6.2AI score0.23915EPSS
SaveIn wildExploits0References2
Github Security Blog
Github Security Blog
•added 2018/10/16 11:08 p.m.•45 views

Apache Camel XML External Entity vulnerability

XML external entity XXE vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource...

5CVSS8.9AI score0.07474EPSS
SaveExploits0References14Affected Software1
Spring Security Advisories
Spring Security Advisories
•added 2015/06/30 12:00 a.m.•21 views

DoS Attack with XML Input

XML external entities were previously disabled with the publication of http://pivotal.io/security/cve-2013-6429 . If DTD is not entirely disabled, inline DTD declarations can be used to perform Denial of Service attacks known as XML bombs. Such declarations are both well-formed and valid accordin...

5.5CVSS5.3AI score0.02555EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2015/06/03 8:00 p.m.•44 views

CVE-2015-0263

XML external entity XXE vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 allows remote attackers to read arbitrary files via an external entity in an SAXSource...

9.4AI score0.07474EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2015/06/03 12:00 a.m.•4 views

PT-2015-4551

Name of the Vulnerable Software and Affected Versions Apache Camel versions prior to 2.13.4 Apache Camel versions 2.14.x prior to 2.14.2 Description The issue is related to an XML external entity XXE vulnerability in the XML converter setup. This allows remote attackers to read arbitrary files vi...

5CVSS6.1AI score0.07474EPSS
SaveExploits0References19
Rows per page
Query Builder