Lucene search
+L

6 matches found

OSV
OSV
•added 2026/05/12 8:50 a.m.•23 views

BIT-LIBPHP-2026-7263 DoS attack via DOMNode::C14N()

In PHP versions 8.4. before 8.4.21 and 8.5. before 8.5.6, DOMNode::C14N method may process the XML data incorrectly, causing a circular linked list in the data structure representing the XML document. This may cause subsequent processing of the XML document to enter infinite loop, causing denial ...

7.5CVSS7.1AI score0.0063EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/09/10 12:34 a.m.•18 views

CVE-2022-50238

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...

6.9AI score0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/08 12:00 a.m.•29 views

CVE-2022-50238

The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...

7.4CVSS0.00237EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•27 views

PT-2025-36472

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list...

7.4CVSS6.4AI score0.00237EPSS
SaveExploits0References9
CVE
CVE
•added 2025/09/08 12:00 a.m.•51 views

CVE-2022-50238

CVE-2022-50238 describes that the on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft rules. Some entries have been excluded from the on-endpoint blocklist longer than expected, which can lead to inconsistent enforcement. The documents indicate th...

7.4CVSS6.3AI score0.00237EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/20 12:00 a.m.•6 views

CVE-2007-1008: Undefined Security Weakness

Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service application crash via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an attacker to perform DNS spoofing or...

2.6CVSS5.8AI score0.02245EPSS
SaveExploits2References1
Rows per page
Query Builder