444 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-83618
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.9.10 until 0.9.12, the requireWellFormed: true...
CVE-2026-83615
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83618
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83605
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83607
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83614
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83606
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83610
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83612
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83614
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
UBUNTU-CVE-2026-83610
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core...
CVE-2026-83618
A flaw was found in xmldom, a JavaScript XML parser and serializer module. A remote attacker could bypass the requireWellFormed strict-serialization mitigation for DocumentType injection by embedding line terminators within the publicId or systemId of a DocumentType declaration. This allows for t...
CVE-2026-83616
A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. An attacker can exploit a vulnerability in how processing instructions are handled to inject arbitrary XML structures. This occurs because the software fails to properly validate input, allowing special characters to...
CVE-2026-83615
A flaw was found in xmldom, a JavaScript library for parsing XML documents. A remote attacker could exploit this vulnerability by providing a specially crafted XML document. When processed, this document would cause the library to consume an excessive amount of memory, leading to the application...
CVE-2026-83614
A flaw was found in xmldom. Two independent quadratic paths in the XML DOM Document Object Model parser can lead to a denial of service DoS. A remote attacker could exploit this by providing specially crafted XML input, causing the parser to repeatedly rescan malformed tag names or reindex and...
CVE-2026-83613
A flaw was found in xmldom, a JavaScript module for parsing XML Extensible Markup Language documents. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing an element with numerous distinct attributes. The way xmldom processes these attributes...
CVE-2026-83611
A flaw was found in xmldom, a JavaScript XML DOM parser. The DOMParser.parseFromString function can silently accept malformed XML end tags that include a line break and additional content. This unexpected parsing behavior causes the parser to close the element prematurely and discard the trailing...
CVE-2026-83612
A flaw was found in xmldom, a JavaScript module used for parsing HTML documents. This vulnerability allows a remote attacker to craft a malicious HTML document with specific mixed-case closing tags. When processed, this document can cause the parser to consume excessive CPU and memory, leading to...
CVE-2026-83610
A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. The Document.createEntityReference function incorrectly accepts invalid names, which are then directly emitted during serialization. This vulnerability allows an attacker to inject arbitrary XML fragments when an...
CVE-2026-83607
A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. This vulnerability allows a remote attacker to inject malicious content, such as attributes or elements, into serialized XML or HTML documents. This occurs because the Document.createElement function does not properl...