Lucene search
+L

10145 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2024/11/05 12:00 a.m.34 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.01904EPSS
SaveExploits1References5
GitLab Advisory Database
GitLab Advisory Database
added 2024/11/05 12:00 a.m.49 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.01904EPSS
SaveExploits1References5
GitLab Advisory Database
GitLab Advisory Database
added 2024/11/05 12:00 a.m.26 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.01904EPSS
SaveExploits1References5
GitLab Advisory Database
GitLab Advisory Database
added 2024/11/05 12:00 a.m.67 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.01904EPSS
SaveExploits1References5
CVE
CVE
added 2024/11/05 12:00 a.m.121 views

CVE-2024-51132

CVE-2024-51132 describes an XML External Entity (XXE) vulnerability in HAPI FHIR prior to v6.4.0. The root cause is XXE in FHIR parsing (org.hl7.fhir.core) that can allow an attacker to read sensitive information or potentially execute arbitrary code via a crafted XML request. Affected components...

9.8CVSS7.4AI score0.01904EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/11/05 12:00 a.m.36 views

CVE-2024-51132

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

0.01904EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/11/05 12:00 a.m.10 views

HAPI FHIR 安全漏洞

HAPI FHIR is a Java-written HL7 FHIR API for the HAPI FHIR open source. A security vulnerability exists in HAPI FHIR versions prior to v6.4.0 that stems from the presence of an external entity reference that allows an attacker to access sensitive information or execute arbitrary code by providing...

9.8CVSS9AI score0.01904EPSS
SaveExploits1References2
OSV
OSV
added 2024/11/04 8:15 p.m.4 views

CVE-2024-45086

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

5.5CVSS5.8AI score0.00437EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/04 7:29 p.m.19 views

CVE-2024-45086 IBM WebSphere Application Server XML external entity injection

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

5.5CVSS6.6AI score0.00437EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/04 5:15 p.m.27 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

9.8CVSS0.01199EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/04 12:36 p.m.36 views

Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application and IBM HTTP Server which is included as part of IBM Tivoli Monitoring ITM portal server. have been remediated Vulnerability Details CVEID:CVE-2024-45071 DESCRIPTION: IBM WebSphere Application Server is vulnerable to stored cross-site...

7.5CVSS7.5AI score0.00565EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2024/11/04 12:00 a.m.27 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

0.01199EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/11/04 12:00 a.m.7 views

OpenIMAJ 安全漏洞

OpenIMAJ Open Intelligent Multimedia Analysis for Java is an OpenIMAJ open source collection of multimedia image, text, video, audio, etc. content analysis and content generation libraries and tools. A security vulnerability exists in OpenIMAJ version v1.3.10, which stems from an XML external...

9.8CVSS6.8AI score0.01199EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/11/04 12:00 a.m.9 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

7.6AI score0.01199EPSS
SaveExploits1References3
OSV
OSV
added 2024/11/04 12:00 a.m.13 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

9.8CVSS7.3AI score
SaveExploits0References5
OSV
OSV
added 2024/10/28 12:15 p.m.5 views

CVE-2024-50442

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through 1.3.980...

7.2CVSS5.8AI score0.00554EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/28 11:14 a.m.33 views

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

6.5CVSS0.00554EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/28 11:14 a.m.24 views

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

6.5CVSS5.9AI score0.00554EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/28 12:00 a.m.11 views

PT-2024-34218 · WordPress · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: WP Royal Royal Elementor Addons versions 1.3.980 and earlier Description: The issue is related to an Improper Restriction of XML External Entity Reference vulnerability, which allows XML Injection. This vulnerability affects WP Royal Royal...

7.2CVSS6.5AI score0.00554EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/10/28 12:00 a.m.19 views

WordPress plugin Royal Elementor Addons 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

7.2CVSS7AI score0.00554EPSS
SaveExploits0References1
Rows per page
Query Builder