Lucene search
+L

21042 matches found

Prion
Prion
•added 2023/03/24 10:15 p.m.•19 views

Xxe

An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

7.5CVSS9.3AI score0.00746EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2023/03/24 8:15 p.m.•19 views

CVE-2023-28151

An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

9.8CVSS5.8AI score0.00792EPSS
SaveExploits0References3
Prion
Prion
•added 2023/03/24 8:15 p.m.•25 views

Xxe

An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

7.5CVSS9.3AI score0.00792EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2023/03/24 4:15 p.m.•29 views

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

9.8CVSS6.5AI score0.00746EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/03/24 4:15 p.m.•17 views

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

9.8CVSS5.8AI score0.00746EPSS
SaveExploits0References3
Prion
Prion
•added 2023/03/24 4:15 p.m.•18 views

Xxe

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

7.5CVSS9.3AI score0.00746EPSS
SaveExploits0References2Affected Software1
Mageia
Mageia
•added 2023/03/24 5:55 a.m.•45 views

Updated python-owslib packages fix security vulnerability

XML External Entity XXE Injection CVE-2023-27476...

8.2CVSS7.9AI score0.00977EPSS
SaveExploits0References2
osv_mgasa
osv_mgasa
•added 2023/03/24 5:55 a.m.•12 views

MGASA-2023-0112 Updated python-owslib packages fix security vulnerability

XML External Entity XXE Injection CVE-2023-27476...

8.2CVSS8.3AI score0.00977EPSS
SaveExploits0References3
CVE
CVE
•added 2023/03/24 12:00 a.m.•71 views

CVE-2023-28151

CVE-2023-28151 affects Independentsoft JSpreadsheet before 1.1.110. The issue is an XML External Entity (XXE) injection via a remote DTD in a DOCX file, arising from the API behavior. Public detail confirms the vulnerable component as JSpreadsheet’s API and the root cause as XXE in DOCX processin...

9.8CVSS9.3AI score0.00792EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/24 12:00 a.m.•8 views

CVE-2023-28150

An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

5.3CVSS7.2AI score0.00746EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/03/24 12:00 a.m.•15 views

Independentsoft JODF 代码问题漏洞

Independentsoft JODF is an open document format API for Java and Android from Independentsoft, Germany. A security vulnerability exists in Independentsoft JODF versions prior to 1.1.110, which stems from the API's susceptibility to XML External Entity XXE injection via a remote DTD in a DOCX file...

9.8CVSS8.4AI score0.00746EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/03/24 12:00 a.m.•30 views

CVE-2023-28150

An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

5.3CVSS9.6AI score0.00746EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/03/24 12:00 a.m.•36 views

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

5.3CVSS9.6AI score0.00746EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/03/24 12:00 a.m.•14 views

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

5.3CVSS9.5AI score0.00746EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/03/24 12:00 a.m.•41 views

CVE-2023-28151

An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

5.3CVSS9.6AI score0.00792EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/03/24 12:00 a.m.•16 views

Independentsoft JWord 代码问题漏洞

Independentsoft JWord is a Microsoft Word-compatible API for Java and Android from Independentsoft, Germany. A security vulnerability exists in Independentsoft JWord versions prior to 1.1.110, which stems from the API's susceptibility to XML External Entity XXE injection via a remote DTD in a DOC...

9.8CVSS8.4AI score0.00746EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/03/24 12:00 a.m.•11 views

CVE-2023-28151

An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

5.3CVSS9.5AI score0.00792EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•30 views

PT-2023-21597 · Independentsoft · Jspreadsheet

Name of the Vulnerable Software and Affected Versions: Independentsoft JSpreadsheet versions prior to 1.1.110 Description: An issue was discovered in the API, which is prone to XML external entity XXE injection via a remote DTD in a DOCX file. Recommendations: For versions prior to 1.1.110, updat...

9.8CVSS9.4AI score0.00792EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/03/24 12:00 a.m.•20 views

Independentsoft JSpreadsheet 代码问题漏洞

Independentsoft JSpreadsheet is a Microsoft Excel-compatible API for Java and Android from Independentsoft, Germany. A security vulnerability exists in Independentsoft JSpreadsheet versions prior to 1.1.110, which stems from the API's susceptibility to XML External Entity XXE injection via a remo...

9.8CVSS8.4AI score0.00792EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/03/23 11:26 a.m.•6 views

CVE-2023-28684

Jenkins remote-jobs-view-plugin Plugin 0.0.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

6.4AI score0.00715EPSS
SaveExploits0References1
Rows per page
Query Builder