Lucene search
+L

3939 matches found

OSV
OSV
added 2021/01/14 3:15 p.m.5 views

DEBIAN-CVE-2021-23926

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0...

9.1CVSS6.4AI score0.06215EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2021/01/14 3:15 p.m.69 views

CVE-2021-23926

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0...

9.1CVSS6.8AI score0.06215EPSS
SaveExploits0References3
OSV
OSV
added 2021/01/14 3:15 p.m.16 views

UBUNTU-CVE-2021-23926

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0...

9.1CVSS6.6AI score0.06215EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2021/01/14 2:45 p.m.39 views

CVE-2021-23926

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0...

9.1CVSS4.5AI score0.06215EPSS
SaveExploits0
CVE
CVE
added 2021/01/14 2:45 p.m.386 views

CVE-2021-23926

CVE-2021-23926 involves Apache XMLBeans up to 2.6.0, where XML parsers did not set necessary protections against malicious XML input, enabling an XML External Entity (XXE) attack and related.entity expansion concerns. The main impact cited is a potential denial of service or information disclosur...

9.1CVSS9.3AI score0.06215EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2021/01/14 2:45 p.m.32 views

CVE-2021-23926 XMLBeans XML Entity Expansion

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0...

9.5AI score0.06215EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2021/01/14 12:00 a.m.12 views

Apache Xmlbeans 输入验证错误漏洞

Apache Xmlbeans is the Apache Foundation , a software used to support Java and XMl format data to interact . Apache Xmlbeans up to version 2.6.0 suffers from an Input Validation Error vulnerability that stems from a failure to set an attribute required to protect a user from malicious XML input. ...

9.1CVSS6.7AI score0.06215EPSS
SaveExploits0References21
Vulnrichment
Vulnrichment
added 2021/01/13 9:45 p.m.8 views

CVE-2021-1267 Cisco Firepower Management Center XML Entity Expansion Vulnerability

A vulnerability in the dashboard widget of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit th...

4.3CVSS7AI score0.01009EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/01/13 9:45 p.m.30 views

CVE-2021-1267 Cisco Firepower Management Center XML Entity Expansion Vulnerability

A vulnerability in the dashboard widget of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit th...

4.3CVSS5AI score0.01009EPSS
SaveExploits0References1
Cisco
Cisco
added 2021/01/13 4:00 p.m.57 views

Cisco Firepower Management Center XML Entity Expansion Vulnerability

A vulnerability in the dashboard widget of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit th...

4.3CVSS4.7AI score0.01009EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/05 12:00 a.m.18 views

Softmaker Office 安全漏洞

Softmaker Office is a multi-platform office software from Softmaker Germany. A symbol expansion vulnerability exists in SoftMaker Office 2021, which originates when the index of the TextMaker document parsing function loop of the TextMaker application is written outside the boundaries of the heap...

8.8CVSS7.2AI score0.01581EPSS
SaveExploits1References2
OSV
OSV
added 2021/01/03 7:15 p.m.15 views

CVE-2020-35963

flbgzipcompress in flbgzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion...

7.8CVSS7.2AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/01/03 7:15 p.m.5 views

CVE-2020-35963

flbgzipcompress in flbgzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion...

7.8CVSS5.3AI score0.0131EPSS
SaveExploits1References4
Prion
Prion
added 2021/01/03 7:15 p.m.17 views

Out-of-bounds

flbgzipcompress in flbgzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion...

6.8CVSS7.7AI score0.0131EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/01/03 6:15 p.m.32 views

CVE-2020-35963

flbgzipcompress in flbgzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion...

7.7AI score0.0131EPSS
SaveExploits1References3
Imperva Blog
Imperva Blog
added 2020/12/22 2:41 p.m.44 views

Opportunities and Threats – IoT and the Rise of 5G

The Internet of Things IoT is expanding rapidly. The number of connected devices in homes, businesses, and vehicles across the world is expected to increase from around 8 billion today to over 24 billion within the next decade, with much of this growth enabled by the introduction of 5G. This...

0.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2020/12/14 5:52 p.m.6 views

jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity XXE attacks. The highest threat from this vulnerability is data integrity...

7.5CVSS7.3AI score0.17814EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/12/03 7:18 p.m.12 views

jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity XXE attacks. The highest threat from this vulnerability is data integrity...

7.5CVSS7.3AI score0.17814EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/12/03 7:16 p.m.6 views

jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity XXE attacks. The highest threat from this vulnerability is data integrity...

7.5CVSS7.3AI score0.17814EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/12/03 7:13 p.m.5 views

jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity XXE attacks. The highest threat from this vulnerability is data integrity...

7.5CVSS7.3AI score0.17814EPSS
SaveExploits0References5
Rows per page
Query Builder