1436 matches found
Siemens SIMATIC S7-1500 Improper Restriction of Recursive Entity References in DTDs (CVE-2024-28757)
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XMLExternalEntityParserCreate. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...
Siemens SIMATIC S7-1500 Improper Restriction of Recursive Entity References in DTDs (CVE-2023-52426)
libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
CLSA-2025-1761902260 Fix CVE(s): CVE-2024-45490
SECURITY UPDATE: Improper restriction of XML External Entity Reference - debian/patches/CVE-2024-45490.patch: Reject negative len for XMLParseBuffer - CVE-2024-45490...
MGASA-2025-0240 Updated expat packages fix security vulnerabilities
Improper restriction of xml entity expansion depth in libexpat. CVE-2024-8176 This is an extension of the fix published in MGASA-2025-0109 that was determined by upstream to be incomplete. Libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small...
Updated expat packages fix security vulnerabilities
Improper restriction of xml entity expansion depth in libexpat. CVE-2024-8176 This is an extension of the fix published in MGASA-2025-0109 that was determined by upstream to be incomplete. Libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small...
JLSEC-2025-72 There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11
There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this...
PT-2025-46052
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked...
PT-2025-46046
There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this...
PT-2025-46034
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers created via XML ExternalEntityParserCreate...
PT-2025-46031
libexpat through 2.5.0 allows recursive XML Entity Expansion if XML DTD is undefined at compile time...
EUVD-2020-0079
Malware in sbrugna...
EUVD-2020-0127
Malware in sbrugna...
EUVD-2011-1752
Malware in sbrugna...
EUVD-2019-13403
Malware in sbrugna...
EUVD-2009-2964
Malware in sbrugna...
EUVD-2011-1755
Malware in sbrugna...
EUVD-2017-0174
Malware in sbrugna...
EUVD-2013-0333
Malware in sbrugna...