62256 matches found
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the processing of XML data in cryptographic operations. An attacker can cause excessive resource consumption and application unavailability by submitting specially crafted XML input that triggers...
CVE-2026-110084
Adobe Experience Manager is affected by an XML Injection (Blind XPath Injection) vulnerability (CWE-91). A low-privileged attacker can exploit this flaw to bypass security features and gain unauthorized read and limited write access . This vulnerability does not require any user interaction for e...
CVE-2026-110084 Adobe Experience Manager | XML Injection (aka Blind XPath Injection) (CWE-91)
Adobe Experience Manager is affected by an XML Injection aka Blind XPath Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitatio...
CVE-2026-83935
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network...
CVE-2026-83914
Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network...
CVE-2026-104817
Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs synchronous XML parsing. An attacker can trigger unbounded outbound HTTP requests and synchronous parsing,...
CVE-2026-83935
A heap-based buffer overflow vulnerability exists in Microsoft XML , which allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is categorized as CRITICAL with a CVSSv3.1 score of 9.8 . The NCSC confirms that this flaw allows malicious actors to exec...
CVE-2026-83914
A use after free vulnerability in Microsoft XML allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as HIGH severity with a CVSS 3.1 score of 8.1 . No specific versions or exploit links are provided in the documents, but an official fix...
CVE-2026-104817 Misskey: Lack of rate limiting and size restrictions in RSS fetching API
Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs synchronous XML parsing. An attacker can trigger unbounded outbound HTTP requests and synchronous parsing,...
CVE-2026-104817
The open-source federated social media platform Misskey versions 12.112.1 through 2026.7.0 contains a vulnerability in the unauthenticated fetch-rss API . The flaw stems from a lack of rate limiting, insufficient response-size restrictions, and the use of synchronous XML parsing . This allows an ...
qt: Qt XML: XML injection via improper output neutralization in QDom serialization.
A flaw was found in Qt XML. This vulnerability, categorized as improper output neutralization, allows an attacker to inject arbitrary XML Extensible Markup Language markup. This occurs because the QDom component, when serializing comments, CDATA Character Data, and processing instructions, does n...