Lucene search
+L

9438 matches found

OSV
OSV
•added 2025/12/26 3:30 p.m.•16 views

GHSA-JV72-59WQ-8RXM libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

7.5CVSS5.9AI score0.00422EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2025/12/26 3:30 p.m.•17 views

libxmljs has segmentation fault, potentially leading to a denial-of-service (DoS)

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

6.9AI score0.00422EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2025/12/26 3:15 p.m.•11 views

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

7.5CVSS0.00422EPSS
SaveExploits1References1
CVE
CVE
•added 2025/12/26 12:00 a.m.•34 views

CVE-2025-25341

A vulnerability exists in libxmljs version 1.0.11 , a LibXML binding for Node.js. When parsing a specially crafted XML document, accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault . This flaw can lead to a denial-of-service (DoS) condition. No inf...

6.5AI score0.00422EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2025/12/26 12:00 a.m.•10 views

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

7.5CVSS6.8AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/12/26 12:00 a.m.•13 views

EUVD-2025-205443

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

7.5CVSS6.4AI score0.00422EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/12/26 12:00 a.m.•5 views

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

6.5AI score0.00422EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/12/26 12:00 a.m.•42 views

CVE-2025-25341

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

0.00422EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/12/26 12:00 a.m.•14 views

PT-2025-53592

Name of the Vulnerable Software and Affected Versions libxmljs version 1.0.11 Description A flaw exists in libxmljs when processing a specifically designed XML document. Accessing the internal ref property on entity ref and entity decl nodes can result in a segmentation fault, potentially causing...

7.5CVSS6.5AI score0.00422EPSS
SaveExploits1References7
NVD
NVD
•added 2025/12/16 2:15 p.m.•17 views

CVE-2025-68229

In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmloop: Fix segfault in tcmlooptpgaddressshow If the allocation of tlhba-sh fails in tcmloopdriverprobe and we attempt to dereference it in tcmlooptpgaddressshow we will get a segfault, see below for an example. So...

0.00204EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/12/14 11:50 p.m.•7 views

CVE-2025-67901

openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEGV by specifying a length of zero for block data, because the relationship between p-rem and p-len is not checked...

5.3CVSS6.5AI score0.00283EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/14 12:00 a.m.•26 views

PT-2025-51180

openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEGV by specifying a length of zero for block data, because the relationship between p-rem and p-len is not checked...

5.3CVSS6.8AI score0.00283EPSS
SaveExploits0References3
Snyk
Snyk
•added 2025/12/12 10:07 p.m.•6 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the parsing process of DICOM files containing encapsulated PixelData fragments. An attacker can cause a segmentation fault and an application crash by supplying a crafted malicious DICOM file. Remediation Upgrade...

6.8CVSS5.8AI score0.00146EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/12 9:15 p.m.•9 views

CVE-2025-11266

An out-of-bounds write vulnerability exists in the Grassroots DICOM library GDCM. The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments compressed image data stored as multiple fragments. This vulnerability leads to a segmentation fault caused...

6.8CVSS0.00146EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/12 8:48 p.m.•42 views

CVE-2025-11266 Grassroots DICOM (GDCM) Out-of-bounds Write

An out-of-bounds write vulnerability exists in the Grassroots DICOM library GDCM. The issue is triggered during parsing of a malformed DICOM file containing encapsulated PixelData fragments compressed image data stored as multiple fragments. This vulnerability leads to a segmentation fault caused...

6.8CVSS0.00146EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/09 12:00 a.m.•36 views

Amazon Linux 2023 : libpq, libpq-devel (ALAS2023-2025-1299)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1299 advisory. Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundre...

5.9CVSS5.4AI score0.0034EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/09 12:00 a.m.•9 views

Amazon Linux 2023 : postgresql15, postgresql15-contrib, postgresql15-llvmjit (ALAS2023-2025-1313)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1313 advisory. Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE...

5.9CVSS5.8AI score0.0034EPSS
SaveExploits0References6
Amazon
Amazon
•added 2025/12/08 12:00 a.m.•14 views

Medium: postgresql15

Issue Overview: Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail...

5.9CVSS6.7AI score0.0034EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/12/08 12:00 a.m.•11 views

Amazon Linux 2 : libpq, --advisory ALAS2POSTGRESQL14-2025-020 (ALASPOSTGRESQL14-2025-020)

The version of libpq installed on the remote host is prior to 14.20-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2POSTGRESQL14-2025-020 advisory. Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network...

5.9CVSS5.5AI score0.0034EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/12/02 7:22 a.m.•16 views

CVE-2025-64704

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4...

5.5CVSS6.6AI score0.00188EPSS
SaveExploits1References1
Rows per page
Query Builder