Lucene search
+L

54184 matches found

Github Security Blog
Github Security Blog
added 2026/07/20 11:2 p.m.14 views

Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial ...

7.5CVSS5.6AI score0.00604EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2026/07/20 10:49 p.m.7 views

Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial ...

7.5CVSS7.2AI score0.0084EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/07/20 10:49 p.m.9 views

GHSA-23RF-6693-G89P Microsoft Security Advisory CVE-2026-50648 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial ...

7.5CVSS7.1AI score0.0084EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/07/20 10:44 p.m.8 views

Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A securit...

9.8CVSS5.5AI score0.00216EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/07/20 10:44 p.m.5 views

GHSA-G8R8-53C2-PM3F Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A securit...

8.1CVSS5.6AI score0.00216EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/07/20 10:44 p.m.7 views

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the CheckSignedInfoKeyedHashAlgorithm method of SignedXml, which compares only the first SignatureValue.Length bytes of the computed HMAC against the supplied signature value. An...

9.8CVSS5.4AI score0.00216EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/20 10:42 p.m.4 views

GHSA-CVVH-RHRC-WG4Q Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML processing System.Security.Cryptography.Xml, System.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerabilit...

7.5CVSS5.5AI score0.01029EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/07/20 10:42 p.m.9 views

Microsoft Security Advisory CVE-2026-47302 – .NET Denial of Service Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML processing System.Security.Cryptography.Xml, System.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerabilit...

7.5CVSS5.5AI score0.01029EPSS
SaveExploits0References6Affected Software13
RedHat Linux
RedHat Linux
added 2026/07/20 9:13 p.m.10 views

glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a node element nested within other elements like method, signal, property or arg. This issue can cause an...

9.1CVSS5.8AI score0.00511EPSS
SaveExploits1References5
OSV
OSV
added 2026/07/20 7:3 p.m.6 views

USN-8571-1 apache2 vulnerabilities

Pavel Kohout and Arkadi Vainbrand discovered that Apache HTTP Server incorrectly handled certain memory operations in modauthnsocache. A remote attacker could possibly use this issue to cause a denial of service. CVE-2026-33007 Haruki Oyama, Merih Mengisteab, and Dawit Jeong discovered that Apach...

9.8CVSS7.2AI score0.27984EPSS
SaveExploits8References16
RedHat Linux
RedHat Linux
added 2026/07/20 6:5 p.m.12 views

glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a node element nested within other elements like method, signal, property or arg. This issue can cause an...

9.1CVSS5.8AI score0.00511EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/07/20 5:1 a.m.94 views

Apache Solr <= 7.1 - XML Entity Injection

Apache Solr with Apache Lucene before 7.1 is susceptible to remote code execution by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external...

9.8CVSS8.7AI score0.91896EPSS
SaveExploits12References5
Nuclei
Nuclei
added 2026/07/20 5:1 a.m.74 views

Apache OFBiz 17.12.03 - Cross-Site Scripting

Apache OFBiz 17.12.03 contains cross-site scripting and unsafe deserialization vulnerabilities via an XML-RPC request. id: CVE-2020-9496 info: name: Apache OFBiz 17.12.03 - Cross-Site Scripting author: dwisiswant0 severity: medium description: Apache OFBiz 17.12.03 contains cross-site scripting a...

6.1CVSS6.2AI score0.98926EPSS
SaveExploits16References5
F5 Networks
F5 Networks
added 2026/07/20 1:12 a.m.11 views

K000162338: PHP vulnerability CVE-2025-6491

Security Advisory Description In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability o...

5.9CVSS5.7AI score0.00944EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/07/20 12:0 a.m.7 views

Cisco ASA/FTD WebVPN Double Free (CVE-2018-0101)

A vulnerability in the Secure Sockets Layer SSL VPN functionality of the Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a...

10CVSS8.9AI score0.8678EPSS
SaveExploits7References2
AlmaLinux
AlmaLinux
added 2026/07/20 12:0 a.m.10 views

Important: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: integer underflow in...

9.1CVSS5.3AI score0.00511EPSS
SaveExploits1References4
OSV
OSV
added 2026/07/20 12:0 a.m.5 views

ALSA-2026:42090 Important: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: integer underflow in...

9.1CVSS5.3AI score0.00511EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/07/19 12:0 a.m.7 views

MiracleLinux 8 : perl-XML-LibXML-2.0132-3.el8_10 (AXSA:2026-1285:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1285:01 advisory. perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names CVE-2026-8177 Tenable has extracted the preceding description block...

7.5CVSS5.6AI score0.00629EPSS
SaveExploits0References2
Fedora
Fedora
added 2026/07/18 12:29 a.m.12 views

[SECURITY] Fedora 43 Update: yq-4.53.3-1.fc43

Yq is a portable command-line YAML, JSON, XML, CSV, TOML, HCL and properties processor...

6.1CVSS5.2AI score0.00223EPSS
SaveExploits0
OSV
OSV
added 2026/07/17 9:17 p.m.31 views

GHSA-PGWW-W46G-26QG AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass

Summary The HTML specification requires that a MathML element with encoding="text/html" or encoding="application/xhtml+xml" is treated as an HTML integration point. Content inside it must be parsed as HTML, not MathML. AngleSharp does not implement this correctly. As a result, the parser produces...

6.9CVSS5.3AI score
SaveExploits0References3
Rows per page
Query Builder