CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1732 matches found

CNNVD•added 2026/05/07 12:00 a.m.•16 views

JeecgBoot 注入漏洞

JeecgBoot is a Java low-code platform developed by Jeecg Corporation, designed for enterprise web applications. JeecgBoot versions 3.9.1 and earlier have a vulnerability related to injection attacks. This vulnerability stems from the parameter condition handled by the JSON object processor in the...

6.5CVSS6.7AI score0.00196EPSS

SaveExploits0References1

Tenable Nessus•added 2026/05/05 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-40682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XML External Entity XXE via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3...

9.1CVSS7.8AI score0.00495EPSS

SaveExploits0References3

Github Security Blog•added 2026/05/04 6:30 p.m.•21 views

Apache OpenNLP DictionaryEntryPersistor Vulnerable to XML External Entity (XXE) via Unsanitized Dictionary Parsing

XML External Entity XXE via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class initializes a static SAXParserFactory at class-load time without enabling FEATURESECUREPROCESSING ...

9.1CVSS5.8AI score0.00495EPSS

SaveExploits0References4Affected Software1

OSV•added 2026/05/04 6:30 p.m.•31 views

GHSA-4V8G-86X5-3VRC Apache OpenNLP DictionaryEntryPersistor Vulnerable to XML External Entity (XXE) via Unsanitized Dictionary Parsing

9.1CVSS5.8AI score0.00495EPSS

SaveExploits0References4

Snyk•added 2026/05/04 6:27 p.m.•13 views

XML External Entity (XXE) Injection

Overview org.apache.opennlp:opennlp-tools is an is a machine learning based toolkit for the processing of natural language text. Affected versions of this package are vulnerable to XML External Entity XXE Injection via the create method in the DictionaryEntryPersistor class, which initializes a...

9.1CVSS5.9AI score0.00495EPSS

SaveExploits0References2

Snyk•added 2026/05/04 6:27 p.m.•10 views

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the create method in the DictionaryEntryPersistor class, which initializes a SAXParserFactory without enabling FEATURESECUREPROCESSING or disabling DTD processing. An attacker can access local files...

9.1CVSS5.9AI score0.00495EPSS

SaveExploits0References2

OSV•added 2026/05/04 5:16 p.m.•38 views

DEBIAN-CVE-2026-40682

9.1CVSS5.8AI score0.00495EPSS

SaveExploits0References1

NVD•added 2026/05/04 5:16 p.m.•37 views

CVE-2026-40682

9.1CVSS0.00495EPSS

SaveExploits0References5

OSV•added 2026/05/04 5:16 p.m.•13 views

UBUNTU-CVE-2026-40682

9.1CVSS5.8AI score0.00495EPSS

SaveExploits0References6

UbuntuCve•added 2026/05/04 5:16 p.m.•12 views

CVE-2026-40682

9.1CVSS5.8AI score0.00495EPSS

SaveExploits0References5

ATTACKERKB•added 2026/05/04 4:55 p.m.•8 views

CVE-2026-40682

9.1CVSS5.8AI score0.00495EPSS

SaveExploits0References2Affected Software1

CVE•added 2026/05/04 4:55 p.m.•145 views

CVE-2026-40682

CVE-2026-40682 (Apache OpenNLP) XXE in DictionaryEntryPersistor via unsanitized dictionary parsing. The DictionaryEntryPersistor initializes a static SAXParserFactory at class-load time without enabling secure features, leaving DOCTYPE processing and external entity resolution enabled. When Dicti...

9.1CVSS5.8AI score0.00495EPSS

SaveExploits0References5Affected Software1

Cvelist•added 2026/05/04 4:55 p.m.•70 views

CVE-2026-40682 Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor

0.00495EPSS

SaveExploits0References1

EUVD•added 2026/05/04 4:55 p.m.•34 views

EUVD-2026-27003

5.8AI score0.00495EPSS

SaveExploits0References1

OSV•added 2026/05/04 4:55 p.m.•17 views

CVE-2026-40682 Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor

9.1CVSS6AI score

SaveExploits0References8

Vulnrichment•added 2026/05/04 4:55 p.m.•11 views

CVE-2026-40682 Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor

5.8AI score0.00495EPSS

SaveExploits0References1

Positive Technologies•added 2026/05/02 12:00 a.m.•62 views

PT-2026-36635

Name of the Vulnerable Software and Affected Versions Apache OpenNLP versions prior to 2.5.9 Apache OpenNLP versions prior to 3.0.0-M3 Description The DictionaryEntryPersistor class initializes a static SAXParserFactory without enabling FEATURE SECURE PROCESSING or disabling DTD processing. When...

9.1CVSS5.8AI score0.00495EPSS

SaveExploits0References30

Positive Technologies•added 2026/05/02 12:00 a.m.•25 views

PT-2026-36637

Name of the Vulnerable Software and Affected Versions Apache OpenNLP versions prior to 2.5.9 Apache OpenNLP versions prior to 3.0.0-M3 Description An OutOfMemory OOM Denial of Service exists in the AbstractModelReader class. The methods getOutcomes, getOutcomePatterns, and getPredicates read a...

7.5CVSS5.8AI score0.00603EPSS

SaveExploits0References31

Positive Technologies•added 2026/05/02 12:00 a.m.•31 views

PT-2026-36636

Name of the Vulnerable Software and Affected Versions Apache OpenNLP versions prior to 2.5.9 Apache OpenNLP versions prior to 3.0.0-M3 Description The ExtensionLoader.instantiateExtensionClass, String function loads a class by its fully-qualified name using Class.forName and invokes its no-arg...

9.8CVSS6.1AI score0.00707EPSS

SaveExploits0References31

EUVD•added 2026/04/28 4:30 p.m.•17 views

EUVD-2026-26072

A vulnerability was determined in JeecgBoot up to 3.9.1. Impacted is the function SqlInjectionUtil of the file jeecg-boot/jeecg-boot-base-core/src/main/java/org/jeecg/common/util/SqlInjectionUtil.java of the component loadDict Endpoint. This manipulation of the argument keyword causes sql...

6.5CVSS6.2AI score0.00204EPSS

SaveExploits0References7

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by