CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

Github Security Blog•added 2022/05/13 1:04 a.m.•38 views

Exposure of Sensitive Information to an Unauthorized Actor in OpenSAML

The 1 BasicParserPool, 2 StaticBasicParserPool, 3 XML Decrypter, and 4 SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote attackers to conduct XML external entity XXE attacks via a crafted XML DOCTYPE declaration...

5CVSS5.6AI score0.02752EPSS

SaveExploits0References10Affected Software1

Prion•added 2014/02/14 3:55 p.m.•26 views

Xxe

5CVSS6.8AI score0.02752EPSS

SaveExploits0References8Affected Software1

UbuntuCve•added 2014/02/14 3:55 p.m.•44 views

CVE-2013-6440

5CVSS6.3AI score0.02752EPSS

SaveExploits0References3

Mend•added 2014/02/14 3:00 p.m.•3 views

CVE-2013-6440

6.9CVSS0.02752EPSS

SaveExploits0References9

Cvelist•added 2014/02/14 3:00 p.m.•48 views

CVE-2013-6440

6.2AI score0.02752EPSS

SaveExploits0References8

Positive Technologies•added 2014/02/14 12:00 a.m.•5 views

PT-2014-3116

Name of the Vulnerable Software and Affected Versions Shibboleth OpenSAML-Java versions prior to 2.6.1 Description The issue allows remote attackers to conduct XML external entity XXE attacks via a crafted XML DOCTYPE declaration. This is due to the expandEntityReferences property being set to tr...

5CVSS0.02752EPSS

SaveExploits0References10

Rapid7 Vulnerability Database (full)•added 2014/02/14 12:00 a.m.•8 views

CVE-2013-6440: Exposure of Sensitive Information to an Unauthorized Actor

5CVSS5.9AI score0.02752EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by