CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

689 matches found

EUVD•added 2025/12/26 12:00 a.m.•16 views

EUVD-2025-205443

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal ref property on entityref and entitydecl nodes causes a segmentation fault, potentially leading to a denial-of-service DoS...

7.5CVSS6.4AI score0.00422EPSS

SaveExploits1References2

Positive Technologies•added 2025/12/26 12:00 a.m.•17 views

PT-2025-53592

Name of the Vulnerable Software and Affected Versions libxmljs version 1.0.11 Description A flaw exists in libxmljs when processing a specifically designed XML document. Accessing the internal ref property on entity ref and entity decl nodes can result in a segmentation fault, potentially causing...

7.5CVSS6.5AI score0.00422EPSS

SaveExploits1References7

CNNVD•added 2025/12/26 12:00 a.m.•17 views

libxmljs 安全漏洞

libxmljs is the LibXML binding for node.js of the libxmljs open source. A security vulnerability exists in libxmljs version 1.0.11, which stems from the fact that accessing the internalref attribute of the entityref and entitydecl nodes when parsing a specially crafted XML document may result in ...

7.5CVSS6.4AI score0.00422EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2025/12/18 12:00 a.m.•4 views

CVE-2025-68463: Improper Restriction of XML External Entity Reference

Bio.Entrez in Biopython through 186 allows doctype XXE...

4.9CVSS5.8AI score0.00316EPSS

SaveExploits0References1

CISA•added 2025/12/11 12:00 p.m.•15 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-58360link is external OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability This type of vulnerability is a frequent attack...

9.8CVSS6.9AI score0.60522EPSS

SaveIn wildExploits4References6

Rapid7 Vulnerability Database (full)•added 2025/11/15 12:00 a.m.•3 views

CVE-2025-13209: Improper Restriction of XML External Entity Reference

A weakness has been identified in bestfeng oagitfree up to 9.5. This affects the function updateWriteBack of the file yimioa-oa9.5\server\c-flow\src\main\java\com\cloudweb\oa\controller\WorkflowPredefineController.java. This manipulation of the argument writeProp causes xml external entity...

6.5CVSS5.3AI score0.00291EPSS

SaveExploits0References1

GithubExploit•added 2025/11/04 2:16 p.m.•252 views

Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor

ktor-xxe This project was created using the Ktor Project Gen...

9.8CVSS7.8AI score0.00595EPSS

SaveExploits6

CVE•added 2025/10/06 5:02 p.m.•57 views

CVE-2025-11341

CVE-2025-11341 affects Jinher OA (versions up to 2.0) via an XML External Entity (XXE) vulnerability in the function handling a request to /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. The issue arises from manipulating an unknown function in that file, enabling rem...

9.8CVSS6.2AI score0.0053EPSS

SaveExploits1References4Affected Software1

Rapid7 Vulnerability Database (full)•added 2025/10/06 12:00 a.m.•2 views

CVE-2025-11341: Improper Restriction of XML External Entity Reference

A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. Performing manipulation results in xml external entity reference. Remote exploitation of the attack is possible. Th...

9.8CVSS5.2AI score0.0053EPSS

SaveExploits1References1

EUVD•added 2025/10/03 8:07 p.m.•15 views

EUVD-2023-58442