https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:55:38.870630+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-4472 CVE-2016-4472 2026-10-07T01:55:38.921571+00:00

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1283 and CVE-2015-2716.

 https://cve.radiocsirt.org/vuln/usn-5455-1 USN-5455-1 — libxmltok vulnerabilities 2026-10-07T01:55:38.921627+00:00

Affected: Ubuntu:Pro:16.04:LTS: libxmltok, Ubuntu:Pro:18.04:LTS: libxmltok, Ubuntu:Pro:20.04:LTS: libxmltok, Ubuntu:Pro:22.04:LTS: libxmltok

Tim Boddy, Gustavo Grieco and others discovered that Expat, that is integrated in xmltok library, incorrectly handled certain files. An attacker could possibly use these issues to cause a denial of service, or possibly execute arbitrary code. These issues were only addressed in Ubuntu 16.04 ESM. (CVE-2012-1148, CVE-2015-1283, CVE-2016-0718, CVE-2016-4472, CVE-2018-20843, CVE-2019-15903, CVE-2021-46143, CVE-2022-22822, CVE-2022-22823, CVE-2022-22824, CVE-2022-22825, CVE-2022-22826, CVE-2022-22827)

It was discovered that Expat, that is integrated in xmltok library, incorrectly handled encoding validation of certain files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2022-25235)

It was discovered that Expat, that is integrated in xmltok library, incorrectly handled namespace URIs of certain files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2022-25236)