344 matches found
CVE-2024-32643
Masa CMS exposes an authentication-bypass vulnerability where adding a /tag/ declaration to a page URL causes the CMS to render content regardless of group restrictions. Affected versions are prior to 7.2.8, 7.3.13, and 7.4.6. The issue is fixed in 7.2.8, 7.3.13, and 7.4.6. The CVSS data from the...
expat: integer overflow in the doProlog function
A flaw was found in expat. The vulnerability occurs due to large content in element type declarations when there is an element declaration handler present which leads to an integer overflow. This flaw allows an attacker to inject an unsigned integer, leading to a crash or a denial of service...
EUVD-2015-8201
Malware in sbrugna...
EUVD-2016-0319
Malware in sbrugna...
EUVD-2016-0280
Malware in sbrugna...
EUVD-2019-4571
Malware in sbrugna...
EUVD-2016-2457
Malware in sbrugna...
EUVD-2016-0354
Malware in sbrugna...
EUVD-2015-3022
Malware in sbrugna...
EUVD-2017-0720
Malware in sbrugna...
EUVD-2006-0002
Malware in sbrugna...
EUVD-2013-0350
Malware in sbrugna...
EUVD-2022-4369
Malicious code in bioql PyPI...
EUVD-2022-3731
Malicious code in bioql PyPI...
EUVD-2024-35792
Malicious code in bioql PyPI...
AZL-67611 CVE-2025-58767 affecting package ruby 3.3.5-7
REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these...
BIT-NIFI-2023-22832 Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes
The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...
BIT-NIFI-2022-29265 Improper Restriction of XML External Entity References in Multiple Components
Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The following Processors attempt to resolve XML...