Lucene search
+L

1677 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2017-14542

Malware in sbrugna...

9.8CVSS9.2AI score0.03319EPSS
SaveExploits1References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.37 views

EUVD-2007-3700

Malware in sbrugna...

9.3CVSS8.9AI score0.03554EPSS
SaveExploits0References15
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2011-1210

Malware in sbrugna...

4.3CVSS9.4AI score0.02436EPSS
SaveExploits1References18
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2017-12111

Malware in sbrugna...

9.3CVSS8.6AI score0.05804EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-12172

Malware in sbrugna...

4.3CVSS6.8AI score0.04443EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/06 6:31 p.m.7 views

GHSA-M42M-M8CR-8M58 LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing

The HTMLSectionSplitter class in langchain-text-splitters is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSLT without any...

7.5CVSS7.2AI score0.00604EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/10/06 5:58 p.m.24 views

CVE-2025-6985 XXE Vulnerability in langchain-ai/langchain

The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSL...

7.5CVSS0.00604EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/06 5:58 p.m.14 views

CVE-2025-6985 XXE Vulnerability in langchain-ai/langchain

The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSL...

7.5CVSS6.5AI score0.00604EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/06 12:00 a.m.14 views

langchain-text-splitters 代码问题漏洞

langchain-text-splitters is a Python package open-sourced by LangChain. A code issue vulnerability exists in langchain-text-splitters version 0.3.8, which stems from the HTMLSectionSplitter class allowing the use of arbitrary XSLT stylesheets, which could lead to an XML External Entity Attack,...

7.5CVSS7.4AI score0.00604EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/04 12:11 a.m.11 views

RLSA-2025:11748 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefox: thunderbird:...

7.5CVSS7.4AI score0.00472EPSS
SaveExploits0References10
OSV
OSV
added 2025/10/04 12:11 a.m.8 views

RLSA-2025:12187 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefox: thunderbird: Incorrect URL stripping in CSP reports CVE-2025-80...

7.5CVSS7.4AI score0.00472EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2025/10/04 12:00 a.m.5 views

RockyLinux 9 : thunderbird (RLSA-2025:12187)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:12187 advisory. firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefo...

9.8CVSS8.8AI score0.00472EPSS
SaveExploits0References19
Metasploit
Metasploit
added 2025/10/04 12:00 a.m.398 views

Oracle E-Business Suite CVE-2025-61882 RCE

This module exploits CVE-2025-61882 in Oracle E-Business Suite by combining SSRF, Path Traversal, HTTP request smuggling and XSLT injection. The exploit hosts a malicious XSL file that the target will fetch and process, leading to RCE. This module provides an interactive shell session. Vulnerable...

9.8CVSS8.1AI score0.99722EPSS
SaveExploits16
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2022-5013

Malicious code in bioql PyPI...

4.3CVSS6.7AI score0.06905EPSS
SaveExploits0References83
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2024-22744

Malicious code in bioql PyPI...

9.1CVSS6.6AI score0.01492EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.7 views

EUVD-2022-41056

Malicious code in bioql PyPI...

8.8CVSS8.7AI score0.0069EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2022-1679

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.2855EPSS
SaveExploits1References18
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2022-41055

Malicious code in bioql PyPI...

6.5CVSS8.1AI score0.00364EPSS
SaveExploits0References6
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2022-0689

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.01701EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2022-27972

Malicious code in bioql PyPI...

8.8CVSS7AI score0.145EPSS
SaveExploits2References4
Rows per page
Query Builder