62287 matches found
DEBIAN-CVE-2026-44036
Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet and DcmXMLParseHelper::parseSequence in the XML-to-DICOM converter dcmdata/libdcxml/xml2dcm.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML file with...
CVE-2026-44033
Uncontrolled recursion in XMLNode::ParseXMLElement and XMLNode::emptyTheNode in the bundled XML parser ofstd/libsrc/ofxml.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML document with deeply nested elements. The parser i...
UBUNTU-CVE-2026-44033
Uncontrolled recursion in XMLNode::ParseXMLElement and XMLNode::emptyTheNode in the bundled XML parser ofstd/libsrc/ofxml.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML document with deeply nested elements. The parser i...
CVE-2026-44033
Uncontrolled recursion in XMLNode::ParseXMLElement and XMLNode::emptyTheNode in the bundled XML parser ofstd/libsrc/ofxml.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML document with deeply nested elements. The parser i...
CVE-2026-44033 Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service
Uncontrolled recursion in XMLNode::ParseXMLElement and XMLNode::emptyTheNode in the bundled XML parser ofstd/libsrc/ofxml.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML document with deeply nested elements. The parser i...
CVE-2026-44033
The bundled XML parser in OFFIS DCMTK 3.7.0 (specifically ofstd/libsrc/ofxml.cc) contains an uncontrolled recursion vulnerability within the XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() functions. An attacker can trigger a denial of service (stack exhaustion and process crash) by provid...
CVE-2026-44033 Uncontrolled recursion in the DCMTK bundled XML parser allows denial of service
Uncontrolled recursion in XMLNode::ParseXMLElement and XMLNode::emptyTheNode in the bundled XML parser ofstd/libsrc/ofxml.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML document with deeply nested elements. The parser i...
CVE-2026-44033
Uncontrolled recursion in XMLNode::ParseXMLElement and XMLNode::emptyTheNode in the bundled XML parser ofstd/libsrc/ofxml.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML document with deeply nested elements. The parser i...
EUVD-2026-94936
Uncontrolled recursion in XMLNode::ParseXMLElement and XMLNode::emptyTheNode in the bundled XML parser ofstd/libsrc/ofxml.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML document with deeply nested elements. The parser i...
resteasy-core: RESTeasy SourceProvider remote unauthenticated file read
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...
OPENSUSE-SU-2026:22051-1 Security update for librsvg
This update for librsvg fixes the following issues: - CVE-2026-96889: use-after-free when XML includes have duplicated entities bsc1282612. Changes for librsvg: - Update to version 2.60.3: - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for RUSTSEC-2026-0204, time for...
SUSE-SU-2026:24202-1 Security update for librsvg
This update for librsvg fixes the following issues: - CVE-2026-96889: use-after-free when XML includes have duplicated entities bsc1282612. Changes for librsvg: - Update to version 2.60.3: - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for RUSTSEC-2026-0204, time for...
SUSE-SU-2026:24117-1 Security update for librsvg
This update for librsvg fixes the following issues: - CVE-2026-96889: use-after-free when XML includes have duplicated entities bsc1282612. Changes for librsvg: - Update to version 2.60.3: - Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for RUSTSEC-2026-0204, time for...
CLEANSTART-2026-HR57844 There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads
Security vulnerability affects the apache-hive package. There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads...
CLEANSTART-2026-IX04206 Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS)
Security vulnerability affects the apache-hive package. Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks DOS...
CLEANSTART-2026-RP42469 Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1
CVE-2026-34479 affects multiple packages. The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1. See references for individual vulnerability details...
CLEANSTART-2026-VO44592 Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS)
Security vulnerability affects the apache-hive package. Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks DOS...
CLEANSTART-2026-CF84062 Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit
Security vulnerability affects the apache-nifi-registry package. A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit...
PT-2026-108010
Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22 IBM DataPower Gateway versions 10.6.0.0 through 10.6.0.10 IBM DataPower Gateway versions 10.6.1 through 10.6.6 IBM DataPower Gateway versions 11.0.0.0 through 11.0.0.2 Description An XM...
PT-2026-107942
Uncontrolled recursion in XMLNode::ParseXMLElement and XMLNode::emptyTheNode in the bundled XML parser ofstd/libsrc/ofxml.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted XML document with deeply nested elements. The parser i...