https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:27:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2016-01470 bdu:2016-01470 https://cve.radiocsirt.org/vuln/bdu:2016-01470 https://cve.radiocsirt.org/vuln/certfr-2016-avi-239 certfr-2016-avi-239 https://cve.radiocsirt.org/vuln/certfr-2016-avi-239 https://cve.radiocsirt.org/vuln/cnvd-2016-03323 cnvd-2016-03323 https://cve.radiocsirt.org/vuln/cnvd-2016-03323 https://cve.radiocsirt.org/vuln/euvd-2026-81523 EUVD-2026-81523 https://cve.radiocsirt.org/vuln/euvd-2026-81523 https://cve.radiocsirt.org/vuln/fkie_cve-2016-0718 <p>Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.</p> <p>Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-0718 https://cve.radiocsirt.org/vuln/ghsa-3f8j-8ww3-q7v6 <p>Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.</p> <p>Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.</p> https://cve.radiocsirt.org/vuln/ghsa-3f8j-8ww3-q7v6 https://cve.radiocsirt.org/vuln/gsd-2016-0718 gsd-2016-0718 https://cve.radiocsirt.org/vuln/gsd-2016-0718 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 <p>MozillaFirefox-50.1.0-1.1 on GA media</p> <p>MozillaFirefox-50.1.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 https://cve.radiocsirt.org/vuln/rhsa-2018:2486 <p>expat: Out-of-bounds heap read on crafted input causing crash httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir libxml2: Use after free triggered by XPointer paths beginning with range-to curl: escape and unescape integer overflows curl: Cookie injection for other servers curl: Case insensitive password comparison curl: Out-of-bounds write via unchecked multiplication curl: Double-free in curl_maprintf curl: Double-free in krb5 code curl: curl_getdate out-of-bounds read curl: URL unescape heap overflow via integer truncation curl: Use-after-free via shared cookies curl: Invalid URL parsing with &#39;#&#39; curl: IDNA 2003 makes curl use wrong host libxml2: XML External Entity vulnerability libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS) libxml2: stack overflow before detecting invalid XML file (unfixed CVE-2016-3705 in JBCS) libxml2: out-of-bounds read (unfixed CVE-2016-4483 in JBCS) pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3) pcre: Invalid Unicode property lookup (8.41/7, 10.24/2) pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c) pcre: stack-based buffer overflow write in pcre32_copy_substring pcre: stack-based buffer overflow write in pcre32_copy_substring libxml2: Buffer overflow in function xmlSnprintfElementContent libxml2: Stack-based buffer overflow in function xmlSnprintfElementContent libxml2: Heap-based buffer over-read in function xmlDic…</p> <p>expat: Out-of-bounds heap read on crafted input causing crash httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir libxml2: Use after free triggered by XPointer paths beginning with range-to curl: escape and unescape integer overflows curl: Cookie injection for other servers curl: Case insensitive password comparison curl: Out-of-bounds write via unchecked multiplication curl: Double-free in curl_maprintf curl: Double-free in krb5 code curl: curl_getdate out-of-bounds read curl: URL unescape heap overflow via integer truncation curl: Use-after-free via shared cookies curl: Invalid URL parsing with &#39;#&#39; curl: IDNA 2003 makes curl use wrong host libxml2: XML External Entity vulnerability libxml2: stack exhaustion while parsing xml files in recovery mode (unfixed CVE-2016-3627 in JBCS) libxml2: stack overflow before detecting invalid XML file (unfixed CVE-2016-3705 in JBCS) libxml2: out-of-bounds read (unfixed CVE-2016-4483 in JBCS) pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3) pcre: Invalid Unicode property lookup (8.41/7, 10.24/2) pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c) pcre: stack-based buffer overflow write in pcre32_copy_substring pcre: stack-based buffer overflow write in pcre32_copy_substring libxml2: Buffer overflow in function xmlSnprintfElementContent libxml2: Stack-based buffer overflow in function xmlSnprintfElementContent libxml2: Heap-based buffer over-read in function xmlDic…</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2486 https://cve.radiocsirt.org/vuln/suse-su-2016:1508-1 <p>Security update for expat</p> <p>Security update for expat</p> https://cve.radiocsirt.org/vuln/suse-su-2016:1508-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0718 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: expat, Ubuntu:14.04:LTS: firefox, Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:16.04:LTS: expat, Ubuntu:16.04:LTS: firefox, Ubuntu:Pro:16.04:LTS: libxmltok, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig and 44 more</p> <p>Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: expat, Ubuntu:14.04:LTS: firefox, Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:Pro:14.04:LTS: xmlrpc-c, Ubuntu:16.04:LTS: expat, Ubuntu:16.04:LTS: firefox, Ubuntu:Pro:16.04:LTS: libxmltok, Ubuntu:Pro:16.04:LTS: ayttm, Ubuntu:Pro:16.04:LTS: cableswig and 44 more</p> <p>Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-0718 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0045 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in expat ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in expat ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0045