32530 matches found
RHSA-2026:9605 Red Hat Security Advisory: perl-XML-Parser security update
Bulletin has no description...
RHSA-2026:9246 Red Hat Security Advisory: perl-XML-Parser security update
Bulletin has no description...
RHSA-2026:9259 Red Hat Security Advisory: perl-XML-Parser security update
Bulletin has no description...
RHSA-2026:9258 Red Hat Security Advisory: perl-XML-Parser security update
Bulletin has no description...
Important: Red Hat Security Advisory: perl-XML-Parser security update
An update for perl-XML-Parser is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files
A flaw was found in XML::Parser, a Perl module for parsing XML. This vulnerability, an off-by-one heap buffer overflow, occurs when processing an XML file with very deep element nesting. A remote attacker could exploit this by providing a specially crafted XML file, potentially leading to memory...
EUVD-2026-24583
facil.io is a C micro-framework for web applications. Prior to commit 5128747363055201d3ecf0e29bf0a961703c9fa0, fiojsonparse can enter an infinite loop when it encounters a nested JSON value starting with i or I. The process spins in user space and pegs one CPU core at 100% instead of returning a...
CVE-2026-41146
facil.io is a C micro-framework for web applications. Prior to commit 5128747363055201d3ecf0e29bf0a961703c9fa0, fiojsonparse can enter an infinite loop when it encounters a nested JSON value starting with i or I. The process spins in user space and pegs one CPU core at 100% instead of returning a...
CVE-2026-41146
facil.io (C micro-framework) contains a vulnerability in fio_json_parse that can enter an infinite loop when parsing a nested JSON value starting with i or I, causing a CPU core to be pegged at ~100% and not returning a parse error. The issue also affects downstream iodine Ruby gem that vendors t...
OSV-2026-609 Security exception in com.github.javaparser.ast.NodeList.forEach
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=504814677 Crash type: Security exception Crash state: com.github.javaparser.ast.NodeList.forEach com.github.javaparser.ast.visitor.VoidVisitorAdapter.visit...
Radare2 operating system command injection vulnerability
Radare2 is an open-source reverse framework for Unix-based geeks, developed by Radare. Versions of Radare2 prior to 6.1.4 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the printgvars function in the PDB parser, which allowed command...
PT-2026-45092
Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.8 Description A remote denial of service issue exists within the Shared NF-profile Parser component, specifically affecting the lib/sbi/nnrf-handler.c library. Manipulation of this component allows a remote attack...
PT-2026-34573
Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.1.4 Description A command injection issue exists in the PDB parser's print gvars function. An attacker can execute arbitrary OS commands by crafting a malicious PDB file containing newline characters in symbol names...
PT-2026-72011
Name of the Vulnerable Software and Affected Versions actix-http versions prior to 3.12.1 Description An issue exists in the HTTP/1.1 parser that allows the processing of requests containing both Content-Length and Transfer-Encoding: chunked headers. This can be exploited by unauthenticated remot...
CVE-2026-40517: Improper Neutralization of Special Elements used in an OS Command
radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's printgvars function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbitrary radare2 commands through unsanitiz...
PT-2026-45082
Name of the Vulnerable Software and Affected Versions Open5GS versions prior to 2.7.8 Description An issue exists in the Shared NF-profile Parser component within the lib/sbi/nnrf-handler.c library. Remote manipulation of an unknown functionality in this library can lead to a denial of service...
CPython security vulnerabilities
CPython is a Python interpreter implemented in C language by the Python Foundation. CPython has a security vulnerability, which stems from the http.cookies.Morsel.jsoutput function returning inline script fragments and only escaping double quotes. This approach fails to neutralize the HTML...
RHEL 9 : perl-XML-Parser (RHSA-2026:9605)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:9605 advisory. This module provides ways to parse XML documents. It is built on top of XML::Parser::Expat, which is a lower level interface to James Clark'...
Amazon Corretto Java 8.x < 8.492.09.1 Multiple Vulnerabilities
The version of Amazon Corretto installed on the remote host is 8 prior to 8.492.09.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2026-Apr-21 advisory. - An integer overflow in the ttvarloaditemvariationstore function of the Freetype library in versions...
