125 matches found
CVE-2019-10392_EXP
CVE-2019-10392EXP Jenkins Git Client Authenticated RCE CVE-2019-10392Exp Usage usage: Jenkins Git Client 2.8.2. -h -u TARGET -U USERNAME -P PASSWORD -i ITEM -I INTERACTIVE -c COMMAND optional arguments: -h, --help show this help message and exit -u TARGET, --target TARGET Target. -U USERNAME,...
CLSA-2026-1788257456 TuxCare security update for league/commonmark (6 CVEs)
TuxCare rebuilt league/commonmark to address 6 CVEs. Fixed in 2.8.2-p2+tuxcare...
JLSEC-2026-1228
libexpat before 2.8.2 has an integer overflow in addBinding...
JLSEC-2026-1230
libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse...
CLEANSTART-2026-QW40696 Security fixes in mongosh 2.8.2-r0
Package mongosh version 2.8.2-r0 fixes 23 vulnerabilities: ghsa-2w6w-674q-4c4q, ghsa-3mfm-83xf-c92r, ghsa-xhpv-hc6g-r9c6, ghsa-9cx6-37pm-9jff, ghsa-xjpj-3mr7-gcpf...
Amazon Linux 2023 : expat, expat-devel, expat-static (ALAS2023-2026-1913)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1913 advisory. libexpat before 2.8.2 has an integer overflow in storeAtts. CVE-2026-56403 libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLPars...
CVE-2026-56412 affecting package expat for versions less than 2.8.2-1
CVE-2026-56412 affecting package expat for versions less than 2.8.2-1. An upgraded version of the package is available that resolves this issue...
Cobbler vulnerable to arbitrary code execution
Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user...
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId.
...
xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used.
...
libexpat before 2.8.2 has an integer overflow in addBinding.
...
CVE-2026-56412
A flaw was found in libexpat. This vulnerability, present in versions before 2.8.2, stems from improper handling of XML CDATA sections, where the library fails to adequately track the depth of handler calls. This can result in a 'use-after-free' error, a type of memory corruption that could allow...
ALPINE-CVE-2026-56412
libexpat before 2.8.2 does not consider XMLTOKDATACHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within handlers in cases of a policy violation. Thus, a use-after-free can occur. NOTE: this issue exists because of an incomplete fix for CVE-2026-50219...
ALPINE-CVE-2026-56409
xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used...
CVE-2026-56410
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...
CVE-2026-56404
libexpat before 2.8.2 has an integer overflow in addBinding...
ALPINE-CVE-2026-56406
libexpat before 2.8.2 has an integer overflow in XMLParseBuffer because it lacked a check that was present in XMLParse...
CVE-2026-56405
libexpat before 2.8.2 has an integer overflow in getAttributeId...
