Lucene search
+L

585 matches found

Github Security Blog
Github Security Blog
•added 2023/01/07 9:30 p.m.•33 views

kelvinmo simplexrd vulnerable to Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The name of...

9.8CVSS9.2AI score0.00811EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2023/01/07 9:30 p.m.•41 views

GHSA-RH3M-PR36-XH2F kelvinmo simplexrd vulnerable to Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The name of...

9.8CVSS7.6AI score0.00811EPSS
SaveExploits0References6
NVD
NVD
•added 2023/01/07 8:15 p.m.•30 views

CVE-2015-10029

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is...

9.8CVSS6.7AI score0.00811EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/01/07 7:36 p.m.•37 views

CVE-2015-10029 kelvinmo simplexrd simplexrd.class.php xml external entity reference

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is...

5.5CVSS9.7AI score0.00811EPSS
SaveExploits0References4
Mend
Mend
•added 2023/01/07 7:36 p.m.•0 views

CVE-2015-10029

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is...

9.8CVSS0.00811EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/07 12:00 a.m.•7 views

CVE-2015-10029: Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is...

9.8CVSS5.2AI score0.00811EPSS
SaveExploits0References2
Prion
Prion
•added 2023/01/06 10:15 a.m.•23 views

Xxe

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

7.5CVSS7.1AI score0.00737EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2023/01/06 9:46 a.m.•1 views

CVE-2016-15011

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS0.00737EPSS
SaveExploits0References6
CVE
CVE
•added 2023/01/06 9:46 a.m.•81 views

CVE-2016-15011

The CVE-2016-15011 issue affects e-Contract dssp up to 1.3.1, specifically the function checkSignResponse in dssp-client/src/main/java/be/e_contract/dssp/client/SignResponseVerifier.java. The root cause is a vulnerability leading to XML External Entity (XXE) reference. A fix is available in dssp ...

9.8CVSS7.5AI score0.00737EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/06 12:00 a.m.•3 views

CVE-2016-15011: Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS5.2AI score0.00737EPSS
SaveExploits0References2
OSV
OSV
•added 2023/01/05 12:15 p.m.•26 views

CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS9.6AI score
SaveExploits0References4
Prion
Prion
•added 2023/01/05 12:15 p.m.•25 views

Xxe

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

7.5CVSS9.5AI score0.00845EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2023/01/05 11:29 a.m.•1 views

CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS0.00845EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2023/01/05 9:09 a.m.•52 views

CVE-2020-36640 bonitasoft bonita-connector-webservice SecureWSConnector.java TransformerConfigurationException xml external entity reference

A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...

5.5CVSS9.6AI score0.0077EPSS
SaveExploits0References5
Mend
Mend
•added 2023/01/05 9:09 a.m.•0 views

CVE-2020-36640

A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...

9.8CVSS0.0077EPSS
SaveExploits0References7
CVE
CVE
•added 2023/01/05 9:09 a.m.•97 views

CVE-2020-36640

In CVE-2020-36640, Bonitasoft bonita-connector-webservice (up to 1.3.0) contains a vulnerability in TransformerConfigurationException in SecureWSConnector.java that leads to an XML External Entity (XXE) reference. The issue is mitigated by upgrading to version 1.3.1; the patch is identified as a1...

9.8CVSS7.5AI score0.0077EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/05 12:00 a.m.•5 views

CVE-2020-36641: Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS5.2AI score0.00845EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/05 12:00 a.m.•7 views

CVE-2020-36640: Improper Restriction of XML External Entity Reference

A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...

9.8CVSS5.2AI score0.0077EPSS
SaveExploits0References3
NVD
NVD
•added 2022/12/30 12:15 p.m.•35 views

CVE-2017-20151

A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xml external entity reference. The patch is identified as ac5590925874ef810018a6b60fec216eee54fb32. ...

9.8CVSS0.00752EPSS
SaveExploits0References3
Prion
Prion
•added 2022/12/30 12:15 p.m.•31 views

Xxe

A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/XfaFile.java. The manipulation leads to xml external entity reference. The patch is identified as ac5590925874ef810018a6b60fec216eee54fb32. ...

7.5CVSS9.5AI score0.00752EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder