CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

14432 matches found

EUVD•added 2025/10/07 12:30 a.m.•12 views

EUVD-2021-23351

Malware in sbrugna...

7.5CVSS8.2AI score0.01014EPSS

SaveExploits0References2

EUVD•added 2025/10/07 12:30 a.m.•13 views

EUVD-2000-0630

Malware in sbrugna...

5CVSS6.4AI score0.07853EPSS

SaveExploits2References5

EUVD•added 2025/10/07 12:30 a.m.•10 views

EUVD-2009-1149

Malware in sbrugna...

5CVSS6.1AI score0.01586EPSS

SaveExploits0References7

Github Security Blog•added 2025/10/06 6:31 p.m.•19 views

LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing

The HTMLSectionSplitter class in langchain-text-splitters is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSLT without any...

7.5CVSS6.9AI score0.00508EPSS

SaveExploits0References5Affected Software1

Vulnrichment•added 2025/10/06 5:58 p.m.•14 views

CVE-2025-6985 XXE Vulnerability in langchain-ai/langchain

The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSL...

7.5CVSS6.5AI score0.00508EPSS

SaveExploits0References1

CVE•added 2025/10/06 5:58 p.m.•140 views

CVE-2025-6985

The CVE-2025-6985 entry concerns LangChain Text Splitters (langchain-text-splitters) v0.3.8, with an XML External Entity (XXE) risk due to unsafe XSLT parsing. The connected docs explain that arbitrary XSLT stylesheets are parsed using lxml.etree.parse() and lxml.etree.XSLT() without hardening, a...

7.5CVSS7.5AI score0.00508EPSS

SaveExploits0References1

CNNVD•added 2025/10/06 12:00 a.m.•14 views

langchain-text-splitters 代码问题漏洞

langchain-text-splitters is a Python package open-sourced by LangChain. A code issue vulnerability exists in langchain-text-splitters version 0.3.8, which stems from the HTMLSectionSplitter class allowing the use of arbitrary XSLT stylesheets, which could lead to an XML External Entity Attack,...

7.5CVSS7.4AI score0.00508EPSS

SaveExploits0References2

Snyk•added 2025/10/05 12:30 p.m.•19 views

Directory Traversal

Overview clearml is a ClearML - Auto-Magical Experiment Manager, Version Control, and MLOps for AI Affected versions of this package are vulnerable to Directory Traversal via the safeextract function. An attacker can write arbitrary files outside the intended directory by exploiting improper...

6.8CVSS7.7AI score0.00302EPSS

SaveExploits0References2

EUVD•added 2025/10/03 8:07 p.m.•7 views

EUVD-2023-46427