Lucene search
+L

99 matches found

OSV
OSV
•added 2018/10/18 5:43 p.m.•31 views

GHSA-7C2R-3JQF-C9RW jackson-dataformat-xml vulnerable to server side request forgery (SSRF)

Versions of jackson-dataformat-xml prior to 2.7.8 and prior to 2.8.4 allow remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

8.6CVSS7.2AI score0.02356EPSS
SaveExploits0References6
OSV
OSV
•added 2018/10/18 5:43 p.m.•18 views

GHSA-HMQ6-FRV3-4727 jackson-dataformat-xml vulnerable to XML external entity (XXE)

XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impact via unknown vectors...

9.8CVSS6.6AI score0.0278EPSS
SaveExploits0References3
Mend
Mend
•added 2017/04/14 6:00 p.m.•3 views

CVE-2016-7051

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

9.2CVSS0.02356EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2017/04/14 12:00 a.m.•3 views

PT-2017-9078

Name of the Vulnerable Software and Affected Versions jackson-dataformat-xml versions 2.7.0 through 2.7.7 jackson-dataformat-xml versions 2.8.0 through 2.8.3 Description The issue allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD. This can be...

8.6CVSS0.02356EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/14 12:00 a.m.•4 views

CVE-2016-7051: Improper Restriction of XML External Entity Reference

XmlMapper in the Jackson XML dataformat component aka jackson-dataformat-xml before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-side request forgery SSRF attacks via vectors related to a DTD...

8.6CVSS5.9AI score0.02356EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2016/07/14 12:00 a.m.•46 views

Fedora 22 : jackson-dataformat-xml (2016-d708261ce2)

Security fix for CVE-2016-3720 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

9.8CVSS6.8AI score0.0278EPSS
SaveExploits0References2
OSV
OSV
•added 2016/06/10 3:59 p.m.•13 views

UBUNTU-CVE-2016-3720

XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impact via unknown vectors...

9.8CVSS6.6AI score0.0278EPSS
SaveExploits0References3
Prion
Prion
•added 2016/06/10 3:59 p.m.•39 views

Xxe

XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impact via unknown vectors...

7.5CVSS7.1AI score0.0278EPSS
SaveExploits0References1Affected Software2
CVE
CVE
•added 2016/06/10 3:00 p.m.•249 views

CVE-2016-3720

CVE-2016-3720 describes an XML External Entity (XXE) vulnerability in Jackson’s Data format extension, jackson-dataformat-xml, specifically in XmlMapper. The connected documents corroborate a related XXE issue affecting jackson-mapper-asl and related Codehaus Jackson libraries, and reference warn...

9.8CVSS8.5AI score0.0278EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
•added 2016/06/10 3:00 p.m.•110 views

CVE-2016-3720

XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impact via unknown vectors...

9.8CVSS7.1AI score0.0278EPSS
SaveExploits0
Mend
Mend
•added 2016/06/10 3:00 p.m.•3 views

CVE-2016-3720

XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impact via unknown vectors...

9.8CVSS0.0278EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/06/10 12:00 a.m.•4 views

CVE-2016-3720: Undefined Security Weakness

XML external entity XXE vulnerability in XmlMapper in the Data format extension for Jackson aka jackson-dataformat-xml allows attackers to have unspecified impact via unknown vectors...

9.8CVSS7AI score0.0278EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2016/06/08 12:00 a.m.•56 views

Fedora Update for jackson-dataformat-xml FEDORA-2016-f2e2b178ea

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.0278EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2016/06/08 12:00 a.m.•36 views

Fedora Update for jackson-dataformat-xml FEDORA-2016-d708261ce2

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.0278EPSS
SaveExploits0References2
OSV
OSV
•added 2016/05/13 9:54 p.m.•18 views

MGASA-2016-0175 Updated jackson-dataformat-xml packages fix CVE-2016-3720

Updated jackson-dataformat-xml packages fix security vulnerability: It was reported that XmlMapper in jackson-dataformat-xml is vulnerable to XXE attack "Improper Restriction of XML External Entity Reference" CVE-2016-3720...

9.8CVSS8.6AI score0.0278EPSS
SaveExploits0References3
Mageia
Mageia
•added 2016/05/13 9:54 p.m.•95 views

Updated jackson-dataformat-xml packages fix CVE-2016-3720

Updated jackson-dataformat-xml packages fix security vulnerability: It was reported that XmlMapper in jackson-dataformat-xml is vulnerable to XXE attack "Improper Restriction of XML External Entity Reference" CVE-2016-3720...

9.8CVSS2.8AI score0.0278EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/05/13 12:00 a.m.•3 views

PT-2016-5677

Name of the Vulnerable Software and Affected Versions jackson-dataformat-xml affected versions not specified Description The issue is related to an XML external entity XXE vulnerability in XmlMapper. This vulnerability allows attackers to have an unspecified impact via unknown vectors...

9.8CVSS0.0278EPSS
SaveExploits0References23
Tenable Nessus
Tenable Nessus
•added 2016/05/12 12:00 a.m.•43 views

Fedora 24 : jackson-dataformat-xml-2.6.3-3.fc24 (2016-13b4cae9df)

Security fix for CVE-2016-3720 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

9.8CVSS6.8AI score0.0278EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2016/05/11 12:00 a.m.•45 views

Fedora Update for jackson-dataformat-xml FEDORA-2016-13

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.0278EPSS
SaveExploits0References2
Rows per page
Query Builder