Lucene search
+L

21122 matches found

UbuntuCve
UbuntuCve
•added 2024/02/04 8:15 p.m.•71 views

CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

5.5CVSS6.8AI score0.00391EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2024/02/04 8:15 p.m.•17 views

UBUNTU-CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

5.5CVSS6.8AI score0.00391EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/02/04 12:00 a.m.•26 views

CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

6.7AI score0.00391EPSS
SaveExploits0References6
Mend
Mend
•added 2024/02/04 12:00 a.m.•6 views

CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

6.8CVSS0.00391EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/04 12:00 a.m.•3 views

CVE-2023-52426: Improper Restriction of Recursive Entity References in DTDs

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

5.5CVSS7.2AI score0.00391EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2024/02/04 12:00 a.m.•40 views

CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

5.5CVSS6.6AI score0.00391EPSS
SaveExploits0
osv_cve
osv_cve
•added 2024/02/04 12:00 a.m.•56 views

CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

5.5CVSS6.8AI score
SaveExploits0References11
CNNVD
CNNVD
•added 2024/02/04 12:00 a.m.•7 views

libexpat Security Vulnerabilities

libexpat is a streaming XML parser written in C. It has a vulnerability that can lead to recursive XML entity extensions if the XMLDTD is not defined at compile time. A security vulnerability exists in libexpat version 2.5.0 and earlier versions, which stems from a vulnerability that could result...

5.5CVSS6.8AI score0.00391EPSS
SaveExploits0References6
CVE
CVE
•added 2024/02/04 12:00 a.m.•142 views

CVE-2023-52426

CVE-2023-52426 affects libexpat up to version 2.5.0 and allows recursive XML Entity Expansion when XML_DTD is undefined at compile time. The connected advisories indicate the issue is real across multiple vendors (e.g., Broadcom/Brocade and Mariner/MSR contexts) and that fixes exist in libexpat 2...

5.5CVSS5.6AI score0.00391EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
•added 2024/02/04 12:00 a.m.•68 views

CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

6AI score0.00391EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/02/04 12:00 a.m.•13 views

PT-2024-3924

Name of the Vulnerable Software and Affected Versions: libexpat versions through 2.5.0 Description: The issue is related to the incorrect limitation of recursive references to objects in DTD, which can lead to a denial of service. This is caused by recursive XML Entity Expansion if XML DTD is...

9.8CVSS7.7AI score0.051EPSS
SaveExploits0References126
AlpineLinux
AlpineLinux
•added 2024/02/04 12:00 a.m.•43 views

CVE-2023-52426

libexpat through 2.5.0 allows recursive XML Entity Expansion if XMLDTD is undefined at compile time...

5.5CVSS5.9AI score0.00391EPSS
SaveExploits0
osv_cve
osv_cve
•added 2024/02/03 1:15 a.m.•20 views

CVE-2023-32327

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this...

7.1CVSS5.8AI score0.00963EPSS
SaveExploits1References3
NVD
NVD
•added 2024/02/03 1:15 a.m.•48 views

CVE-2023-32327

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this...

7.1CVSS7.1AI score0.00963EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/02/03 12:57 a.m.•48 views

CVE-2023-32327 IBM Security Access Manager Container XML external entity injection

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this...

7.1CVSS6.9AI score0.00963EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/02/03 12:57 a.m.•15 views

CVE-2023-32327 IBM Security Access Manager Container XML external entity injection

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this...

7.1CVSS6.5AI score0.00963EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/03 12:00 a.m.•4 views

CVE-2023-32327: Improper Restriction of XML External Entity Reference

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this...

7.1CVSS8.2AI score0.00963EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/02/03 12:00 a.m.•20 views

IBM Security Access Manager Container code-related vulnerabilities

IBM Security Access Manager is a product for information security management applications from International Business Machines IBM. The product enables access management control through integrated appliances for web, mobile and cloud computing. An XML external entity injection vulnerability exist...

7.1CVSS6.8AI score0.00963EPSS
SaveExploits1References3
osv_mal
osv_mal
•added 2024/02/02 12:48 p.m.•18 views

MAL-2024-956 Malicious code in hub-blockly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a569a2ddf66ac93b021560bb8b3ef62f8c0a81db49d53de3ce5e1648b68de76f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/02/02 3:49 a.m.•11 views

MAL-2024-958 Malicious code in hardhat-gas-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ccb0cd4a0911c7a0eca2730092d818c34541534af8f612810d4d5cf463a397f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder