Most recent entries from all

BREW-mikutter-CVE-2017-15412 — Nokogiri gem, via libxml, is affected by DoS vulnerabilities

Affected: Homebrew: mikutter

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

certfr-2017-avi-450 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Certaines d'entre elles permettent à un attaquant d…

certfr-2017-avi-450

cnvd-2018-04212

EUVD-2026-78649

fkie_cve-2017-15412

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

GHSA-r58r-74gx-6wx3 — Nokogiri gem, via libxml, is affected by DoS vulnerabilities

Affected: RubyGems: nokogiri

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

gsd-2017-15412

openSUSE-SU-2017:3245-1 — Security update for chromium

Security update for chromium

RHBA-2020:1539 — Red Hat Bug Fix Advisory: Red Hat Ansible Tower 3.5.6-1 - RHEL7 Container

expat: Integer overflow leading to buffer overflow in XML_GetBuffer() libxml2: DoS caused by incorrect error detection during XZ decompression libxml2: Use after free triggered by XPointer paths beginning with range-to libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c libxml2: Unrestricted memory usage in xz_head() function in xzlib.c file: out-of-bounds read via a crafted ELF file libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c libxml2: Infinite loop caused by incorrect error detection during LZMA decompression python-requests: Redirect from HTTPS to HTTP does not remove Authorization header python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure python: Cookie domain check returns incorrect results gnome-shell: partial lock screen bypass curl: TFTP receive heap buffer overflow in tftp_receive_packet() function bash: BASH_CMD is writable in restricted bash shells python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service python: email.utils.parseaddr wrongly parses email addresses rsyslog: heap-based overflow in contrib/pmaixforwardedfrom/pmaixforwardedfrom.c rsyslog: heap-based overflow in contrib/pmcisconames/pmcisconames.c ansible: shell enabled by default in a pipe lookup plugin subprocess ansible: path injection on dest parameter in fetch module ansible: atomic_move primitive sets permissive permiss…

SUSE-SU-2018:0395-1 — Security update for libxml2

Security update for libxml2

UBUNTU-CVE-2017-15412

Affected: Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: libxml2, Ubuntu:16.04:LTS: chromium-browser, Ubuntu:16.04:LTS: libxml2, Ubuntu:16.04:LTS: oxide-qt, Ubuntu:18.04:LTS: chromium-browser, Ubuntu:18.04:LTS: libxml2

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

WID-SEC-W-2023-1614 — Tenable Security Nessus Network Monitor: Mehrere Schwachstellen

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Tenable Security Nessus Network Monitor ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und Daten zu manipulieren.