CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1189 matches found

Tenable Nessus•added 2025/11/13 12:0 a.m.•5 views

Siemens SIMATIC S7-1500 Improper Restriction of Recursive Entity References in DTDs (CVE-2024-28757)

libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XMLExternalEntityParserCreate. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

7.5CVSS6.7AI score0.02006EPSS

Exploits1References5

Tenable Nessus•added 2025/11/13 12:0 a.m.•4 views

Siemens SIMATIC S7-1500 Improper Restriction of Recursive Entity References in DTDs (CVE-2023-52426)

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

5.5CVSS6.7AI score0.00373EPSS

Exploits0References5

OSV•added 2025/10/31 9:17 a.m.•4 views

CLSA-2025-1761902260 Fix CVE(s): CVE-2024-45490

SECURITY UPDATE: Improper restriction of XML External Entity Reference - debian/patches/CVE-2024-45490.patch: Reject negative len for XMLParseBuffer - CVE-2024-45490...

9.8CVSS7.3AI score0.01686EPSS

Exploits0References1

OSV•added 2025/10/18 4:49 p.m.•6 views

MGASA-2025-0240 Updated expat packages fix security vulnerabilities

Improper restriction of xml entity expansion depth in libexpat. CVE-2024-8176 This is an extension of the fix published in MGASA-2025-0109 that was determined by upstream to be incomplete. Libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small...

7.5CVSS6.8AI score0.01569EPSS

Exploits1References5

Mageia•added 2025/10/18 4:49 p.m.•6 views

Updated expat packages fix security vulnerabilities

7.5CVSS6.1AI score0.01569EPSS

Exploits1References4

OSV•added 2025/10/17 5:40 p.m.•4 views

JLSEC-2025-72 There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this...

8.6CVSS6.5AI score0.0828EPSS

Exploits0References26