5460 matches found
UBUNTU-CVE-2025-71346
Nokogiri before 1.18.8 packages a vulnerable version of libxml2 before 2.13.8 that contains a heap-based buffer under-read CVE-2025-32415 in the xmlSchemaIDCFillNodeTables function in xmlschemas.c. The issue can be triggered when validating against an untrusted XML Schema, or when validating...
CVE-2023-54354
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2025-71346
Rejected reason: This CVE ID has been rejected as a duplicate...
UBUNTU-CVE-2023-54354
Nokogiri before 1.14.3 CRuby implementation only, when using the packaged libxml2 bundles libxml2 v2.10.3, which is vulnerable to NULL pointer dereferences in XML Schema processing xmlSchemaFixupComplexType, CVE-2023-28484, and xmlSchemaCheckCOSSTDerivedOK. An attacker who supplies a...
CVE-2025-71407
...
CVE-2025-71407 Nokogiri before 1.18.3 Stack Buffer Overflow and Use-After-Free
Nokogiri before 1.18.3 contains a stack buffer overflow vulnerability in libxml2 when reporting DTD validation errors with long QName prefixes, and a use-after-free vulnerability during validation against untrusted XML Schemas. Attackers can trigger these vulnerabilities by providing malicious DT...
CVE-2025-71346
...
CVE-2025-71346 Nokogiri before 1.18.8 Heap Buffer Under-read via XML Schema
Nokogiri before 1.18.8 packages a vulnerable version of libxml2 before 2.13.8 that contains a heap-based buffer under-read CVE-2025-32415 in the xmlSchemaIDCFillNodeTables function in xmlschemas.c. The issue can be triggered when validating against an untrusted XML Schema, or when validating...
CVE-2025-71346
Nokogiri before 1.18.8 packages a vulnerable version of libxml2 (before 2.13.8), introducing a heap-based buffer under-read in the xmlSchemaIDCFillNodeTables function in xmlschemas.c. The flaw is triggered when validating against an untrusted XML Schema, or when validating untrusted documents aga...
EUVD-2025-210772
Nokogiri before 1.18.8 packages a vulnerable version of libxml2 before 2.13.8 that contains a heap-based buffer under-read CVE-2025-32415 in the xmlSchemaIDCFillNodeTables function in xmlschemas.c. The issue can be triggered when validating against an untrusted XML Schema, or when validating...
CVE-2025-71346
Removed by vendor...
EUVD-2023-60605
Nokogiri before 1.14.3 CRuby implementation only, when using the packaged libxml2 bundles libxml2 v2.10.3, which is vulnerable to NULL pointer dereferences in XML Schema processing xmlSchemaFixupComplexType, CVE-2023-28484, and xmlSchemaCheckCOSSTDerivedOK. An attacker who supplies a...
CVE-2023-54354 Nokogiri before 1.14.3 Null Pointer Dereference via libxml2
Nokogiri before 1.14.3 CRuby implementation only, when using the packaged libxml2 bundles libxml2 v2.10.3, which is vulnerable to NULL pointer dereferences in XML Schema processing xmlSchemaFixupComplexType, CVE-2023-28484, and xmlSchemaCheckCOSSTDerivedOK. An attacker who supplies a...
CVE-2023-54354
...
CVE-2023-54354
CVE-2023-54354 has been rejected as a duplicate , but its technical details remain relevant. Nokogiri before 1.14.3 (CRuby implementation only, using the packaged libxml2 v2.10.3 ) is vulnerable to NULL pointer dereferences in XML Schema processing (specifically in xmlSchemaFixupComplexType and x...
CVE-2023-54354
Removed by vendor...
Server-side Request Forgery (SSRF)
Overview org.apache.hive:hive-common is a reading, writing, and managing large datasets residing in distributed storage using SQL. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via Avro SerDe schema resolution in AvroSerdeUtils.determineSchemaOrThrowExceptio...