Lucene search
+L

608 matches found

osv_suse
osv_suse
•added 2017/07/07 9:25 a.m.•14 views

SUSE-SU-2017:1813-1 Security update for libxml2

This update for libxml2 fixes the following issues: Security issues fixed: CVE-2017-0663: Fixed a heap buffer overflow in xmlAddID bsc1044337 CVE-2017-5969: Fixed a NULL pointer deref in xmlDumpElementContent bsc1024989 CVE-2017-7375: Prevented an unwanted external entity reference bsc1044894...

10CVSS7.9AI score0.22981EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2017/07/07 12:00 a.m.•73 views

openSUSE Security Update : libxml2 (openSUSE-2017-793)

This update for libxml2 fixes the following issues : Security issues fixed : - CVE-2017-7376: Increase buffer space for port in HTTP redirect support bsc1044887 - CVE-2017-7375: Prevent unwanted external entity reference bsc1044894 This update was imported from the SUSE:SLE-12-SP2:Update update...

10CVSS7AI score0.22981EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/06/07 12:00 a.m.•10 views

CVE-2015-7326: Improper Restriction of XML External Entity Reference

XML External Entity XXE vulnerability in Milton Webdav before 2.7.0.3...

9.8CVSS8.2AI score0.02936EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2017/05/01 12:00 a.m.•9 views

PT-2023-10261 · Libplist +2 · Libplist +2

Name of the Vulnerable Software and Affected Versions: libplist version 1.12 Description: A problematic issue has been found in the XML Handler component of libplist, specifically affecting the plist from xml function in the src/xplist.c file. This issue leads to an xml external entity reference...

9.8CVSS6.2AI score0.03768EPSS
SaveExploits6References35
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/24 12:00 a.m.•8 views

CVE-2017-3548: Improper Restriction of XML External Entity Reference

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Integration Broker. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.5CVSS5.8AI score0.50837EPSS
SaveExploits10References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/14 12:00 a.m.•8 views

CVE-2016-7051: Improper Restriction of XML External Entity Reference

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

8.6CVSS5.9AI score0.02356EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/10 12:00 a.m.•9 views

CVE-2015-7273: Improper Restriction of XML External Entity Reference

Dell Integrated Remote Access Controller iDRAC 7/8 before 2.21.21.21 has XXE...

9.8CVSS5.7AI score0.01424EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/10/03 12:00 a.m.•7 views

CVE-2012-3489: Improper Restriction of XML External Entity Reference

The xmlparse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote authenticated users to determine the existence of arbitrary files or URLs, and possibly obtain file or URL content tha...

6.5CVSS6.1AI score0.03057EPSS
SaveExploits1References2
Rows per page
Query Builder