Most recent entries from all

bdu:2018-00112

Withdrawn: BELL-CVE-2017-9233 — CVE-2017-9233 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2017-avi-320 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu…

certfr-2017-avi-320

Withdrawn: CLEANSTART-2026-EM10970 — Security fixes for CVE-2017-9233, CVE-2019-15903, CVE-2021-45960, CVE-2021-46143, CVE-2022-22822, CVE-2022-22823, CVE-2…

Withdrawn by the publisher.

Affected: CleanStart: expat

Multiple security vulnerabilities affect the expat package. These issues are resolved in later releases. See references for individual vulnerability details.

cnvd-2017-16034

EUVD-2026-75703

fkie_cve-2017-9233

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

GHSA-6j8w-m4cc-r7hm

gsd-2017-9233

ICSA-19-155-01 — PHOENIX CONTACT PLCNext AXC F 2152

A remote attacker can exploit a server 's private key by sending carefully constructed UserIdentityTokens encrypted with the Basic128Rsa15 security policy. This could allow an attacker to decrypt passwords even if encrypted with another security policy such as Basic256Sha256. CVE-2018-7559 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L). An attacker with physical access to the device can manipulate SD card data, which could allow an attacker to bypass the authentication of the device. This device is designed for use in a protected industrial environment with restricted physical access.CVE-2019-10998 has been assigned to this vulnerability. A CVSS v3 base score of 6.8 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). An attacker trying to connect to the device using a man-in-the-middle setup may crash the PLC service, resulting in a denial of service condition. The device must then be rebooted, or the PLC service must be restarted manually via Linux shell.CVE-2019-10997 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly ha…

openSUSE-SU-2024:10748-1 — expat-2.4.1-1.2 on GA media

expat-2.4.1-1.2 on GA media

SUSE-SU-2017:2299-1 — Security update for expat

Security update for expat

UBUNTU-CVE-2017-9233

Affected: Ubuntu:14.04:LTS: expat, Ubuntu:Pro:14.04:LTS: coin3, Ubuntu:Pro:14.04:LTS: vnc4, Ubuntu:16.04:LTS: expat, Ubuntu:Pro:16.04:LTS: coin3, Ubuntu:Pro:16.04:LTS: cableswig, Ubuntu:16.04:LTS: insighttoolkit4, Ubuntu:16.04:LTS: matanza, Ubuntu:Pro:16.04:LTS: swish-e, Ubuntu:Pro:16.04:LTS: vnc4 and 16 more

VDE-2019-009 — PHOENIX CONTACT: Multiple Vulnerabilities in AXC F 2152

Multiple vulnerabilities have been identified in PHOENIX CONTACT AXC F 2152 with firmware versions 1.x

WID-SEC-W-2022-2037 — expat: Schwachstelle ermöglicht Denial of Service

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in expat ausnutzen, um einen Denial of Service Angriff durchzuführen.