CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1939 matches found

Tenable Nessus•added 2026/05/05 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-40682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML External Entity XXE via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3...

9.1CVSS7.8AI score0.00844EPSS

SaveExploits0References3

Github Security Blog•added 2026/05/04 6:30 p.m.•27 views

Apache OpenNLP DictionaryEntryPersistor Vulnerable to XML External Entity (XXE) via Unsanitized Dictionary Parsing

XML External Entity XXE via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class initializes a static SAXParserFactory at class-load time without enabling FEATURESECUREPROCESSING ...

9.1CVSS7.9AI score0.00844EPSS

SaveExploits0References7Affected Software1

OSV•added 2026/05/04 6:30 p.m.•35 views

GHSA-4V8G-86X5-3VRC Apache OpenNLP DictionaryEntryPersistor Vulnerable to XML External Entity (XXE) via Unsanitized Dictionary Parsing

9.1CVSS7.9AI score0.00844EPSS

SaveExploits0References7

Snyk•added 2026/05/04 6:27 p.m.•13 views

XML External Entity (XXE) Injection

Overview org.apache.opennlp:opennlp-tools is an is a machine learning based toolkit for the processing of natural language text. Affected versions of this package are vulnerable to XML External Entity XXE Injection via the create method in the DictionaryEntryPersistor class, which initializes a...

9.1CVSS5.9AI score0.00844EPSS

SaveExploits0References2

Snyk•added 2026/05/04 6:27 p.m.•11 views

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the create method in the DictionaryEntryPersistor class, which initializes a SAXParserFactory without enabling FEATURESECUREPROCESSING or disabling DTD processing. An attacker can access local files...

9.1CVSS5.9AI score0.00844EPSS

SaveExploits0References2

OSV•added 2026/05/04 5:16 p.m.•41 views

DEBIAN-CVE-2026-40682

9.1CVSS7.9AI score0.00844EPSS

SaveExploits0References1

NVD•added 2026/05/04 5:16 p.m.•42 views

CVE-2026-40682

9.1CVSS0.00844EPSS

SaveExploits0References5

OSV•added 2026/05/04 5:16 p.m.•15 views

UBUNTU-CVE-2026-40682

9.1CVSS5.8AI score0.00844EPSS

SaveExploits0References6

UbuntuCve•added 2026/05/04 5:16 p.m.•15 views

CVE-2026-40682

9.1CVSS5.8AI score0.00844EPSS

SaveExploits0References5

attackerkb•added 2026/05/04 4:55 p.m.•13 views

CVE-2026-40682

9.1CVSS5.8AI score0.00844EPSS

SaveExploits0References2Affected Software1

CVE•added 2026/05/04 4:55 p.m.•168 views

CVE-2026-40682

The Apache OpenNLP DictionaryEntryPersistor component is vulnerable to XML External Entity (XXE) injection in versions prior to 2.5.9 and 3.0.0-M3 . The root cause is that the DictionaryEntryPersistor class initializes a static SAXParserFactory at class-load time without enabling FEATURE_SECURE_P...

9.1CVSS7.9AI score0.00844EPSS

SaveExploits0References5Affected Software1

EUVD•added 2026/05/04 4:55 p.m.•36 views

EUVD-2026-27003

5.8AI score0.00844EPSS

SaveExploits0References1

Cvelist•added 2026/05/04 4:55 p.m.•82 views

CVE-2026-40682 Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor

0.00844EPSS

SaveExploits0References1

OSV•added 2026/05/04 4:55 p.m.•20 views

CVE-2026-40682 Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor

9.1CVSS6AI score

SaveExploits0References8

Vulnrichment•added 2026/05/04 4:55 p.m.•12 views

CVE-2026-40682 Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor

7.9AI score0.00844EPSS

SaveExploits0References1

Positive Technologies•added 2026/05/02 12:00 a.m.•64 views

PT-2026-36635

Name of the Vulnerable Software and Affected Versions Apache OpenNLP versions prior to 2.5.9 Apache OpenNLP versions prior to 3.0.0-M3 Description The DictionaryEntryPersistor class initializes a static SAXParserFactory without enabling FEATURE SECURE PROCESSING or disabling DTD processing. When...

9.1CVSS5.8AI score0.00844EPSS

SaveExploits0References30

Positive Technologies•added 2026/05/02 12:00 a.m.•28 views

PT-2026-36637

Name of the Vulnerable Software and Affected Versions Apache OpenNLP versions prior to 2.5.9 Apache OpenNLP versions prior to 3.0.0-M3 Description An OutOfMemory OOM Denial of Service exists in the AbstractModelReader class. The methods getOutcomes, getOutcomePatterns, and getPredicates read a...

7.5CVSS5.8AI score0.01065EPSS

SaveExploits0References31

Positive Technologies•added 2026/05/02 12:00 a.m.•33 views

PT-2026-36636

Name of the Vulnerable Software and Affected Versions Apache OpenNLP versions prior to 2.5.9 Apache OpenNLP versions prior to 3.0.0-M3 Description The ExtensionLoader.instantiateExtensionClass, String function loads a class by its fully-qualified name using Class.forName and invokes its no-arg...

9.8CVSS6.1AI score0.01271EPSS

SaveExploits0References31

EUVD•added 2026/04/28 4:30 p.m.•20 views

EUVD-2026-26072

A vulnerability was determined in JeecgBoot up to 3.9.1. Impacted is the function SqlInjectionUtil of the file jeecg-boot/jeecg-boot-base-core/src/main/java/org/jeecg/common/util/SqlInjectionUtil.java of the component loadDict Endpoint. This manipulation of the argument keyword causes sql...

6.5CVSS6.2AI score0.00333EPSS

SaveExploits0References7

OSV•added 2026/04/27 8:35 p.m.•41 views

JLSEC-2026-278

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...

7.5CVSS5.3AI score0.01364EPSS

SaveExploits1References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by