CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

21036 matches found

osv_ghsa•added 2023/06/29 9:30 p.m.•83 views

GHSA-VV6Q-6HWP-VRGP easy-parse XML External Entity Injection vulnerability

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS

SaveExploits0References4

osv_ghsa•added 2023/06/29 9:30 p.m.•59 views

GHSA-J6V2-MWXM-F952 py-xml XML External Entity Injection vulnerability

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS

SaveExploits0References4

Github Security Blog•added 2023/06/29 9:30 p.m.•41 views

easy-parse XML External Entity Injection vulnerability

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.3AI score0.00802EPSS

SaveExploits0References4Affected Software1

Github Security Blog•added 2023/06/29 9:30 p.m.•49 views

py-xml XML External Entity Injection vulnerability

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.3AI score0.00802EPSS

SaveExploits0References4Affected Software1

osv_ghsa•added 2023/06/29 9:30 p.m.•16 views

GHSA-CCRC-9X59-3VC4 requests-xml XML External Entity Injection vulnerability

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS6.2AI score0.00737EPSS

SaveExploits0References5

NVD•added 2023/06/29 9:15 p.m.•27 views

CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00737EPSS

SaveExploits0References2

osv_cve•added 2023/06/29 9:15 p.m.•17 views

CVE-2020-26710

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS6.1AI score0.00802EPSS

SaveExploits0References1

osv_cve•added 2023/06/29 9:15 p.m.•19 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS6.1AI score0.00802EPSS

SaveExploits0References1

NVD•added 2023/06/29 9:15 p.m.•42 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS

SaveExploits0References1

NVD•added 2023/06/29 9:15 p.m.•34 views

CVE-2020-26710

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS

SaveExploits0References1

osv_pysec•added 2023/06/29 9:15 p.m.•30 views

PYSEC-2023-97

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.3AI score0.00802EPSS

SaveExploits0References2

osv_pysec•added 2023/06/29 9:15 p.m.•17 views

PYSEC-2023-96

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS6.2AI score0.00737EPSS

SaveExploits0References2

Prion•added 2023/06/29 9:15 p.m.•22 views

Xxe

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

5CVSS7.9AI score0.00737EPSS

SaveExploits0References2Affected Software1

PyPA•added 2023/06/29 9:15 p.m.•14 views

PYSEC-2023-95

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.5AI score0.00802EPSS

SaveExploits0References2Affected Software1

PyPA•added 2023/06/29 9:15 p.m.•19 views

PYSEC-2023-97

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.5AI score0.00802EPSS

SaveExploits0References2Affected Software1

Prion•added 2023/06/29 9:15 p.m.•28 views

Xxe

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

5CVSS7.9AI score0.00802EPSS

SaveExploits0References1Affected Software1

PyPA•added 2023/06/29 9:15 p.m.•10 views

PYSEC-2023-96

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.5AI score0.00737EPSS

SaveExploits0References2Affected Software1

Positive Technologies•added 2023/06/29 12:00 a.m.•18 views

PT-2023-11757 · Unknown · Easy-Parse

Name of the Vulnerable Software and Affected Versions: easy-parse version 0.1.1 Description: The issue allows attackers to execute arbitrary code via a crafted XML file, exploiting a XML External Entity Injection XXE vulnerability. Recommendations: For easy-parse version 0.1.1, update to a versio...

7.5CVSS7.8AI score0.00802EPSS

SaveExploits0References7

Cvelist•added 2023/06/29 12:00 a.m.•47 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.8AI score0.00802EPSS

SaveExploits0References1

Positive Technologies•added 2023/06/29 12:00 a.m.•20 views

PT-2023-11756 · Pyxml · Pyxml

Name of the Vulnerable Software and Affected Versions: py-xml version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted XML file, exploiting an XML External Entity Injection XXE vulnerability. Recommendations: For py-xml version 1.0, consider disabling the XML...

7.5CVSS7.8AI score0.00802EPSS

SaveExploits0References7

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by