Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 6:21 a.m.3 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

9.8CVSS7.4AI score0.01377EPSS
Exploits1References1
Veracode
Veracode
added 2024/11/18 3:33 a.m.9 views

XML External Entity (XXE) Injection

org.openimaj, openimaj is vulnerable to XML External Entity XXE injection. The vulnerability is due to improper handling of external entities in XML files. Specifically, the system fails to properly validate or sanitize XML input, allowing attackers to craft malicious XML that can trigger...

9.8CVSS7.1AI score0.01377EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2024/11/04 5:15 p.m.12 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

9.8CVSS0.01377EPSS
Exploits1References3
OSV
OSV
added 2024/11/04 5:15 p.m.8 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

9.8CVSS7.3AI score
Exploits0References3
CVE
CVE
added 2024/11/04 12:0 a.m.43 views

CVE-2024-51136

The CVE-2024-51136 entry describes an XML External Entity (XXE) vulnerability in OpenIMAJ’s Dmoz2CSV component for OpenIMAJ v1.3.10. The root cause is improper handling of external entities in XML files, enabling an attacker to read sensitive data or potentially execute arbitrary code by supplyin...

9.8CVSS7.6AI score0.01377EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2024/11/04 12:0 a.m.12 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

0.01377EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/11/04 12:0 a.m.1 views

PT-2024-34535 · Openimaj · Openimaj

Name of the Vulnerable Software and Affected Versions: openimaj version 1.3.10 Description: An XML External Entity XXE issue allows attackers to access sensitive information or execute arbitrary code by supplying a crafted XML file. This can lead to unauthorized access to data or execution of...

9.8CVSS7.9AI score0.01377EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2024/11/04 12:0 a.m.7 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

7.6AI score0.01377EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/11/04 12:0 a.m.2 views

OpenIMAJ 安全漏洞

OpenIMAJ Open Intelligent Multimedia Analysis for Java is an OpenIMAJ open source collection of multimedia image, text, video, audio, etc. content analysis and content generation libraries and tools. A security vulnerability exists in OpenIMAJ version v1.3.10, which stems from an XML external...

9.8CVSS6.8AI score0.01377EPSS
Exploits1References3
vulnersOsv
vulnersOsv
added 2019/05/14 4:0 a.m.1 views

br.net.woodstock.rockframework:rockframework-core (>=1.2.1 <=1.2.4), com.day.cq.dam:cq-dam-commons (>=5.4.0 <=5.5.0) +84 more potentially affected by CVE-2018-17202 via org.apache.sanselan:sanselan (=0.97-incubator)

org.apache.sanselan:sanselan MAVEN version =0.97-incubator is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.sanselan:sanselan and may be impacted: - br.net.woodstock.rockframework:rockframework-core =1.2.1, =5.4.0, =0.3.11, =2.0.0-alpha,...

7.5CVSS7.1AI score0.02054EPSS
Exploits0
Rows per page
Query Builder