54801 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-41966
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow...
ROS-20250819-09
Vulnerability of libxml2 library's xmlSchematronFormatReport function is related to reading data outside of the buffer in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using a specially crafted XML file Vulnerability in the...
Linux Distros Unpatched Vulnerability : CVE-2022-21296
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracl...
Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java and Node.js (CVE-2025-48924, CVE-2025-4949)
Summary There are multiple vulnerabilities in Java and Node.js used by IBM Application Modernization Accelerator. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with...
Lantronix Provisioning Manager 7.10.3 XML Injection
Lantronix Provisioning Manager version 7.10.3 suffers from an XML injection vulnerability...
Amazon Linux 2023 : mod_security, mod_security-mlogc (ALAS2023-2025-1139)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1139 advisory. ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If...
Medium: mod_security
Issue Overview: ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. In versions 2.9.8 to before 2.9.11, an empty XML tag can cause a segmentation fault. If SecParseXmlIntoArgs is set to On or OnlyArgs, and the request type is application/xm...
Linux Distros Unpatched Vulnerability : CVE-2023-27476
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OWSLib is a Python package for client programming with Open Geospatial Consortium OGC web service interface standards, and their related content models. OWSLib'...
Linux Distros Unpatched Vulnerability : CVE-2025-6491
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML...
Linux Distros Unpatched Vulnerability : CVE-2020-25706
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-site scripting XSS vulnerability exists in templatesimport.php Cacti 1.2.13 due to Improper escaping of error message during template import preview in...
Linux Distros Unpatched Vulnerability : CVE-2023-3823
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8 various XML functions rely on libxml global state to track configuration variables...
CVE-2025-26484
Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...
Malicious code in xml-warp-magellan-mira (npm)
The package xml-warp-magellan-mira was found to contain malicious code...
Malicious code in xml-juno-leda-blaze (npm)
The package xml-juno-leda-blaze was found to contain malicious code...
Malicious code in interferometry-hyperion-astrophysics-xml (npm)
The package interferometry-hyperion-astrophysics-xml was found to contain malicious code...
Malicious code in async-sed-small-xml-upsilon (npm)
The package async-sed-small-xml-upsilon was found to contain malicious code...
Malicious code in sisyphe-xml (npm)
The package sisyphe-xml was found to contain malicious code...
Malicious code in xml-sandbox-container-process-long (npm)
The package xml-sandbox-container-process-long was found to contain malicious code...
