40892 matches found
UBUNTU-CVE-2026-7210
xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch...
Improper Validation of Specified Quantity in Input
Overview oxidize-pdf is a Python bindings for oxidize-pdf — generate, parse, split, merge, and manipulate PDF files Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via the emission of non-finite color values in the content stream. An attacker...
GHSA-88Q9-CMP2-C2VQ oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)
Impact oxidize-pdf defines Color as a pub enum with public tuple-struct variants Rgbf64, f64, f64, Grayf64, and Cmykf64, f64, f64, f64. The constructors Color::rgb, Color::gray, and Color::cmyk clamp incoming components to 0.0, 1.0, but because the variants are pub, callers can construct values...
MINI-RP6C-GJ23-FWP2
Bulletin has no description...
MINI-2332-RHJ3-6CR8
Bulletin has no description...
MINI-99H2-3HHR-PQGV
Bulletin has no description...
MINI-XW49-VP38-4HHW
Bulletin has no description...
MINI-V7JV-537M-F8FW
Bulletin has no description...
MINI-R4RQ-C899-2JQ2
Bulletin has no description...
MINI-3HFR-PVGX-9J6C
Bulletin has no description...
MINI-PWHV-33M6-GH3C
Bulletin has no description...
MINI-R3PC-6F99-4944
Bulletin has no description...
MINI-8Q5R-8PM6-56V8
Bulletin has no description...
MINI-5J7C-73XP-WF6M
Bulletin has no description...
MINI-73F5-JC3M-XVJC
Bulletin has no description...
MINI-3PGP-2XF4-MQQP
Bulletin has no description...
MINI-F24C-J6HW-QVWX
Bulletin has no description...
MINI-59MV-67M7-6682
Bulletin has no description...
NGINX: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module
A flaw was found in NGINX. A remote attacker can exploit a buffer overflow vulnerability within the ngxhttpdavmodule module. This occurs when the NGINX configuration uses DAV module MOVE or COPY methods in conjunction with prefix location and alias directives. Successful exploitation may lead to...