Lucene search
+L

1330 matches found

Github Security Blog
Github Security Blog
•added 2023/06/29 9:30 p.m.•38 views

easy-parse XML External Entity Injection vulnerability

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.3AI score0.00802EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2023/06/29 9:15 p.m.•27 views

CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00737EPSS
SaveExploits0References2
NVD
NVD
•added 2023/06/29 9:15 p.m.•32 views

CVE-2020-26710

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS
SaveExploits0References1
OSV
OSV
•added 2023/06/29 9:15 p.m.•20 views

CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.5AI score
SaveExploits0References2
NVD
NVD
•added 2023/06/29 9:15 p.m.•39 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS7.8AI score0.00802EPSS
SaveExploits0References1
PyPA
PyPA
•added 2023/06/29 9:15 p.m.•19 views

PYSEC-2023-97

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.5AI score0.00802EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/06/29 9:15 p.m.•27 views

PYSEC-2023-97

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS8.3AI score0.00802EPSS
SaveExploits0References2
OSV
OSV
•added 2023/06/29 9:15 p.m.•15 views

PYSEC-2023-96

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.5CVSS6.2AI score0.00737EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/06/29 12:00 a.m.•30 views

Requests-XML 代码问题漏洞

Requests-XML is a library for parsing XML from the individual developers at erinxocon. A security vulnerability exists in requests-xml version v0.2.3, which stems from the inclusion of an XML External Entity Injection XXE vulnerability that allows an attacker to execute arbitrary code via a craft...

7.5CVSS7.8AI score0.00737EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/06/29 12:00 a.m.•9 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

8.6AI score0.00802EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/06/29 12:00 a.m.•35 views

CVE-2020-26708

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.8AI score0.00737EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/06/29 12:00 a.m.•43 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

7.8AI score0.00802EPSS
SaveExploits0References1
Mend
Mend
•added 2023/06/29 12:00 a.m.•1 views

CVE-2020-26710

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

8.7CVSS0.00802EPSS
SaveExploits0References4
Mend
Mend
•added 2023/06/29 12:00 a.m.•1 views

CVE-2020-26709

py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

8.7CVSS0.00802EPSS
SaveExploits0References4
OSV
OSV
•added 2023/06/05 4:15 p.m.•15 views

CVE-2023-33693

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

5.5CVSS6.3AI score0.00428EPSS
SaveExploits1References3
NVD
NVD
•added 2023/06/05 4:15 p.m.•25 views

CVE-2023-33693

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

7.8CVSS5.6AI score0.00428EPSS
SaveExploits1References3
Prion
Prion
•added 2023/06/05 4:15 p.m.•28 views

Buffer overflow

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

1.9CVSS5.6AI score0.00428EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/06/05 12:00 a.m.•13 views

EasyPlayerPro 缓冲区错误漏洞

EasyPlayerPro is a full-featured streaming media player open-sourced by TSINGSEE in China. A security vulnerability exists in EasyPlayerPro versions v3.2.19.0106 through v3.6.19.0823, which stems from the presence of a buffer overflow vulnerability that allows an attacker to cause a denial of...

7.8CVSS6AI score0.00428EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/06/05 12:00 a.m.•11 views

CVE-2023-33693

A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service DoS via a crafted XML file...

7.4AI score0.00428EPSS
SaveExploits1References3
CVE
CVE
•added 2023/06/05 12:00 a.m.•54 views

CVE-2023-33693

A buffer overflow vulnerability exists in EasyPlayerPro-Win versions v3.2.19.0106 to v3.6.19.0823 . An attacker can exploit this flaw by providing a crafted XML file to cause a Denial of Service (DoS) . As a temporary workaround, users should restrict the processing of XML files to minimize explo...

7.8CVSS5.6AI score0.00428EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder