https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:01:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-339984 EUVD-2026-339984 https://cve.radiocsirt.org/vuln/euvd-2026-339984 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15037 <p>Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under the default InvalidDataPolicy (AcceptInvalidChars). Fixed in Qt 6.12.</p> <p>Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under the default InvalidDataPolicy (AcceptInvalidChars). Fixed in Qt 6.12.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-15037 https://cve.radiocsirt.org/vuln/ghsa-7xx4-xq65-r6v3 <p>Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under the default InvalidDataPolicy (AcceptInvalidChars). Fixed in Qt 6.12.</p> <p>Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under the default InvalidDataPolicy (AcceptInvalidChars). Fixed in Qt 6.12.</p> https://cve.radiocsirt.org/vuln/ghsa-7xx4-xq65-r6v3 https://cve.radiocsirt.org/vuln/msrc_cve-2026-15037 msrc_CVE-2026-15037 https://cve.radiocsirt.org/vuln/msrc_cve-2026-15037 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-15037 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: qt4-x11, Ubuntu:16.04:LTS: qt4-x11, Ubuntu:Pro:16.04:LTS: qtbase-opensource-src, Ubuntu:Pro:18.04:LTS: qtbase-opensource-src, Ubuntu:18.04:LTS: qt4-x11, Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:22.04:LTS: qt6-base, Ubuntu:Pro:22.04:LTS: qtbase-opensource-src, Ubuntu:24.04:LTS: qt6-base, Ubuntu:Pro:24.04:LTS: qtbase-opensource-src and 2 more</p> <p>Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under the default InvalidDataPolicy (AcceptInvalidChars). Fixed in Qt 6.12.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: qt4-x11, Ubuntu:16.04:LTS: qt4-x11, Ubuntu:Pro:16.04:LTS: qtbase-opensource-src, Ubuntu:Pro:18.04:LTS: qtbase-opensource-src, Ubuntu:18.04:LTS: qt4-x11, Ubuntu:Pro:20.04:LTS: qtbase-opensource-src, Ubuntu:22.04:LTS: qt6-base, Ubuntu:Pro:22.04:LTS: qtbase-opensource-src, Ubuntu:24.04:LTS: qt6-base, Ubuntu:Pro:24.04:LTS: qtbase-opensource-src and 2 more</p> <p>Improper output neutralization (XML injection) in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under the default InvalidDataPolicy (AcceptInvalidChars). Fixed in Qt 6.12.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-15037 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2500 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QT ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in QT ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2500