EUVD-2018-0651

Malware in sbrugna...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libgsf (UTSA-2025-658553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-658553 advisory. An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library libgsf. A...

EUVD-2022-43600

Malicious code in bioql PyPI...

EUVD-2022-3866

Malicious code in bioql PyPI...

EUVD-2025-15126

Malicious code in bioql PyPI...

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

...

SUSE CVE-2025-59375

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing...

K000151869: libexpat vulnerability CVE-2024-8176

Security Advisory Description A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stac...

DEBIAN-CVE-2025-1219

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may...

Ubuntu: Security Advisory (USN-7256-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-28587

A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. An attacker can entice the victim to open a document to...

BIT-RUBY-MIN-2021-28965

The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing...

The vulnerability of the Tungsten Automation Power PDF software for working with PDF files lies in the ability to read data beyond the acceptable range of memory, allowing an intruder to disclose protected information.

The vulnerability of the software for working with PDF files from Tungsten Automation Power PDF is related to reading beyond the allowed range in memory during PDF file syntax analysis. Exploiting this vulnerability can allow an attacker to disclose protected information...

[SECURITY] Fedora 40 Update: libxml2-2.12.9-1.fc40

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

CVE-2024-9737

Tungsten Automation Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in th...

CVE-2024-8844

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target...

FastStone Image Viewer 缓冲区错误漏洞

FastStone Image Viewer is an image viewer from FastStone open source. The product supports image browsing, conversion, and editing. FastStone Image Viewer suffers from a buffer error vulnerability that stems from an out-of-bounds write in PSD file parsing, which could lead to remote code executio...

Tungsten Automation Power PDF 缓冲区错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from a PSD file parsing that contains an out-of-bounds write issue. An attacker exploiting this...

Tungsten Automation Power PDF 安全漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, USA. A security vulnerability exists in Tungsten Automation Power PDF that stems from a PSD file parsing issue that contains a heap-based buffer overflow. An attacker exploiting this...

Tungsten Automation Power PDF 缓冲区错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation. Tungsten Automation Power PDF suffers from a buffer error vulnerability that stems from a PDF file parsing issue that includes an out-of-bounds write problem. An attacker could exploit th...