https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:34:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-06384 bdu:2015-06384 https://cve.radiocsirt.org/vuln/bdu:2015-06384 https://cve.radiocsirt.org/vuln/certfr-2014-avi-507 certfr-2014-avi-507 https://cve.radiocsirt.org/vuln/certfr-2014-avi-507 https://cve.radiocsirt.org/vuln/euvd-2026-96755 EUVD-2026-96755 https://cve.radiocsirt.org/vuln/euvd-2026-96755 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0191 <p>The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.</p> <p>The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0191 https://cve.radiocsirt.org/vuln/ghsa-hwp3-c628-9f7v <p>The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.</p> <p>The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.</p> https://cve.radiocsirt.org/vuln/ghsa-hwp3-c628-9f7v https://cve.radiocsirt.org/vuln/gsd-2014-0191 gsd-2014-0191 https://cve.radiocsirt.org/vuln/gsd-2014-0191 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10192-1 <p>libxml2-2-2.9.4-1.22 on GA media</p> <p>libxml2-2-2.9.4-1.22 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10192-1 https://cve.radiocsirt.org/vuln/rhsa-2014:0513 <p>libxml2: Out-of-bounds read via a document that ends abruptly libxml2: external parameter entity loaded when entity substitution is disabled</p> <p>libxml2: Out-of-bounds read via a document that ends abruptly libxml2: external parameter entity loaded when entity substitution is disabled</p> https://cve.radiocsirt.org/vuln/rhsa-2014:0513 https://cve.radiocsirt.org/vuln/suse-ru-2016:2413-1 <p>Recommended update for libxml2</p> <p>Recommended update for libxml2</p> https://cve.radiocsirt.org/vuln/suse-ru-2016:2413-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0191 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libxml2</p> <p>The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: libxml2</p> <p>The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0191 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0620 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libxml2 ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libxml2 ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0620