Lucene search
K

21 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-7060

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.00444EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-25614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at...

9.8CVSS8.2AI score0.00444EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:1 p.m.5 views

CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS7.5AI score0.00444EPSS
Exploits1
Github Security Blog
Github Security Blog
added 2022/10/07 7:20 a.m.22 views

xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS9.2AI score0.00444EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2022/10/07 7:20 a.m.17 views

GHSA-93M7-C69F-5CFJ xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

7.5CVSS9.7AI score0.00444EPSS
Exploits1References6
OSV
OSV
added 2021/04/14 8:4 p.m.12 views

GO-2020-0048 Denial of service in github.com/antchfx/xmlquery

LoadURL does not check the Content-Type of loaded resources, which can cause a panic due to nil pointer deference if the loaded resource is not XML. If user supplied URLs are loaded, this may be used as a denial of service vector...

9.8CVSS9.1AI score0.00444EPSS
Exploits1References2
OSV
OSV
added 2020/09/16 3:15 p.m.21 views

CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS7.4AI score
Exploits0References2
NVD
NVD
added 2020/09/16 3:15 p.m.6 views

CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS0.00444EPSS
Exploits1References2
OSV
OSV
added 2020/09/16 3:15 p.m.2 views

DEBIAN-CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS8.7AI score0.00444EPSS
Exploits1References1
Prion
Prion
added 2020/09/16 3:15 p.m.10 views

Format string

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

7.5CVSS9.7AI score0.00444EPSS
Exploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/09/16 3:15 p.m.16 views

CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS7.2AI score0.00444EPSS
Exploits1References4
OSV
OSV
added 2020/09/16 3:15 p.m.0 views

UBUNTU-CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS5.8AI score0.00444EPSS
Exploits1References5
Cvelist
Cvelist
added 2020/09/16 2:41 p.m.11 views

CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8AI score0.00444EPSS
Exploits1References2
CVE
CVE
added 2020/09/16 2:41 p.m.53 views

CVE-2020-25614

CVE-2020-25614 affects the Go library xmlquery prior to 1.3.1, which omits a check on whether LoadURL responses are XML. This can cause a denial of service (SIGSEGV) in xmlquery.(*Node).InnerText, with possible additional impacts. The issue is resolved by upgrading to xmlquery 1.3.1 (patch exists...

9.8CVSS9.6AI score0.00444EPSS
Exploits1References2Affected Software1
Debian CVE
Debian CVE
added 2020/09/16 2:41 p.m.14 views

CVE-2020-25614

xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...

9.8CVSS9.8AI score0.00444EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2020/09/16 12:0 a.m.2 views

PT-2020-16128 · Xmlquery · Xmlquery

Name of the Vulnerable Software and Affected Versions: xmlquery versions prior to 1.3.1 Description: The issue allows attackers to cause a denial of service SIGSEGV or possibly have other unspecified impacts due to the lack of a check for whether a LoadURL response is in the XML format. This can...

9.8CVSS9.5AI score0.00444EPSS
Exploits1References13
Veracode
Veracode
added 2020/09/07 10:52 a.m.16 views

Denial Of Service (DoS)

github.com/antchfx/xmlquery is vulnerable to denial of service DoS attacks. The vulnerability exists because the LoadURL function in node.go fails to properly validate the type/format of incoming responses from URL before parsing and proceeding to the next process, allowing an attacker to pass UR...

9.8CVSS4.4AI score0.00444EPSS
Exploits1References3Affected Software1
securityvulns
securityvulns
added 2008/09/22 12:0 a.m.32 views

IBM DB2 multiple security vulnerabilities

XMLQUERY and XMLEXIST buffer overflow, CLR stored procedures privilege escalation and DoS...

7.8CVSS3.4AI score0.05355EPSS
Exploits0References2Affected Software1
securityvulns
securityvulns
added 2008/09/22 12:0 a.m.94 views

Team SHATTER Security Advisory: IBM DB2 UDB - Buffer overrun in XMLQUERY and XMLEXISTS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Buffer overrun in XMLQUERY and XMLEXISTS September 15th 2008 Risk Level: High Affected versions: IBM DB2 Database Server v9.1 and 9.5 on Windows platform. Remote exploitable: Yes Authentication to Database Server is need...

7.8CVSS0.2AI score0.05355EPSS
Exploits0
Prion
Prion
added 2008/08/28 5:41 p.m.15 views

Stack overflow

Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service system outage via vectors related to 1 use of XQuery to issue statements; the 2 XMLQUERY, 3 XMLEXISTS, and 4 XMLTABLE statements; and the 5 sqlrlaka...

7.8CVSS6.8AI score0.05355EPSS
Exploits0References10Affected Software1
Rows per page
Query Builder