Lucene search
+L

55521 matches found

OSV
OSV
added 2026/04/17 7:56 p.m.14 views

MGASA-2026-0100 Updated polkit-122 packages fix security vulnerability

Polkit: xml policy file with a large number of nested elements may lead to out-of-bounds write. CVE-2025-7519...

6.7CVSS6.6AI score0.00192EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/04/17 7:24 p.m.19 views

cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in xml.dom.minidom methods, such as appendChild, when building excessively nested documents due to a dependency on clearidcache...

6.3CVSS6.5AI score0.00799EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/04/17 6:54 p.m.22 views

cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

A flaw was found in cpython. This vulnerability allows impacted availability via a quadratic algorithm in xml.dom.minidom methods, such as appendChild, when building excessively nested documents due to a dependency on clearidcache...

6.3CVSS6.5AI score0.00799EPSS
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/17 1:36 p.m.13 views

Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the xmldom JavaScript library

Summary Due to use of the xmldom JavaScript library, DevOps Test Performance and Rational Performance Tester contain a potential XML injection vulnerability. Vulnerability Details CVEID:CVE-2026-34601 DESCRIPTION: xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and...

7.5CVSS5.6AI score0.00472EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/04/17 11:16 a.m.15 views

CVE-2026-5131

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

6.9CVSS0.00426EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/17 11:10 a.m.24 views

OESA-2026-1919 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS7AI score0.00566EPSS
SaveExploits0References12
OSV
OSV
added 2026/04/17 11:10 a.m.18 views

OESA-2026-1918 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS7AI score0.00566EPSS
SaveExploits0References12
OSV
OSV
added 2026/04/17 11:10 a.m.23 views

OESA-2026-1917 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS7AI score0.00566EPSS
SaveExploits0References12
OSV
OSV
added 2026/04/17 11:10 a.m.21 views

OESA-2026-1916 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS7AI score0.00566EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2026/04/17 10:45 a.m.20 views

CVE-2026-5131 Server-Side Request Forgery in GREENmod

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

6.9CVSS5.7AI score0.00426EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/17 10:45 a.m.9 views

CVE-2026-5131

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

6.9CVSS5.7AI score0.00426EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/17 10:09 a.m.16 views

RHSA-2026:8610 Red Hat Security Advisory: perl-XML-Parser security update

Bulletin has no description...

8.8CVSS5.6AI score0.00604EPSS
SaveExploits0References17
OSV
OSV
added 2026/04/17 10:09 a.m.15 views

RHSA-2026:8609 Red Hat Security Advisory: perl-XML-Parser security update

Bulletin has no description...

8.8CVSS5.6AI score0.00604EPSS
SaveExploits0References17
OSV
OSV
added 2026/04/17 10:09 a.m.14 views

RHSA-2026:8577 Red Hat Security Advisory: perl-XML-Parser security update

Bulletin has no description...

8.8CVSS5.6AI score0.00604EPSS
SaveExploits0References17
OSV
OSV
added 2026/04/17 10:09 a.m.14 views

RHSA-2026:8578 Red Hat Security Advisory: perl-XML-Parser security update

Bulletin has no description...

8.8CVSS5.6AI score0.00604EPSS
SaveExploits0References17
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/17 5:25 a.m.18 views

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Apache Tika Core and Parsers (CVE-2025-54988, CVE-2025-66516, CVE-2025-66516)

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in Apache Tika Core and Parsers CVE-2025-54988, CVE-2025-66516, CVE-2025-66516. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2025-54988 DESCRIPTION: Critical XXE in Apache Tika...

9.8CVSS5.6AI score0.87688EPSS
SaveExploits7Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:00 a.m.19 views

AlmaLinux 9 : .NET 8.0 (ALSA-2026:8469)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:8469 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotnet:...

7.5CVSS6.4AI score0.02279EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:00 a.m.13 views

SUSE SLES12 Security Update : python3 (SUSE-SU-2026:1385-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1385-1 advisory. - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined bsc1259611. - CVE-2026-3479: improper...

7.5CVSS5.9AI score0.0069EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
added 2026/04/17 12:00 a.m.13 views

SUSE SLES15: libpython3_10-1_0 / libpython3_10-1_0-32bit / python310 / etc (SUSE-SU-2026:1376-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1376-1 advisory. - CVE-2025-13462: incorrect parsing of TarInfo when GNU long name and type AREGTYPE are combined can lead to...

7.5CVSS6.7AI score0.0069EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2026/04/17 12:00 a.m.25 views

PT-2026-33439

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

6.9CVSS5.7AI score0.00426EPSS
SaveExploits0References3
Rows per page
Query Builder