https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:23:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-07045 bdu:2015-07045 https://cve.radiocsirt.org/vuln/bdu:2015-07045 https://cve.radiocsirt.org/vuln/certfr-2014-avi-542 certfr-2014-avi-542 https://cve.radiocsirt.org/vuln/certfr-2014-avi-542 https://cve.radiocsirt.org/vuln/euvd-2026-99378 EUVD-2026-99378 https://cve.radiocsirt.org/vuln/euvd-2026-99378 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3660 <p>parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the &#34;billion laughs&#34; attack.</p> <p>parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the &#34;billion laughs&#34; attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-3660 https://cve.radiocsirt.org/vuln/ghsa-xrph-4qjj-gj25 <p>parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the &#34;billion laughs&#34; attack.</p> <p>parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the &#34;billion laughs&#34; attack.</p> https://cve.radiocsirt.org/vuln/ghsa-xrph-4qjj-gj25 https://cve.radiocsirt.org/vuln/gsd-2014-3660 gsd-2014-3660 https://cve.radiocsirt.org/vuln/gsd-2014-3660 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10192-1 <p>libxml2-2-2.9.4-1.22 on GA media</p> <p>libxml2-2-2.9.4-1.22 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10192-1 https://cve.radiocsirt.org/vuln/rhsa-2014:1885 <p>libxml2: denial of service via recursive entity expansion</p> <p>libxml2: denial of service via recursive entity expansion</p> https://cve.radiocsirt.org/vuln/rhsa-2014:1885 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3660 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libxml2</p> <p>parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the &#34;billion laughs&#34; attack.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libxml2</p> <p>parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted XML document containing a large number of nested entity references, a variant of the &#34;billion laughs&#34; attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3660 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1614 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1614