8557 matches found
[SECURITY] [DLA 4799-1] lxml security update
Debian LTS Advisory DLA-4799-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin September 28, 2026 https://wiki.debian.org/LTS Package : lxml Version : 4.9.2-1+deb12u1 CVE ID : CVE-2026-28348 CVE-2026-28350 CVE-2026-41066 CVE-2026-49825 Multiple vulnerabilities were...
CVE-2026-82386
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and reach internal network addresses by importing a crafted OPML document, because the bookmark import parser does not disable external entity...
CVE-2026-82376
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on a weblog to cause the server to parse an attacker-influenced trackback response with an XML parser that does not disable external entity resolution, leading to disclosure of fil...
CVE-2026-82376
Apache Roller 6.1.5 is vulnerable to an XML External Entity (XXE) processing issue within the trackback response parser. An attacker with entry-editing rights on a weblog can trigger the server to parse a malicious trackback response. Because the XML parser fails to disable external entity resolu...
CVE-2026-82376 Apache Roller: XML external entity processing in trackback response parser
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on a weblog to cause the server to parse an attacker-influenced trackback response with an XML parser that does not disable external entity resolution, leading to disclosure of fil...
EUVD-2026-88135
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on a weblog to cause the server to parse an attacker-influenced trackback response with an XML parser that does not disable external entity resolution, leading to disclosure of fil...
CVE-2026-82376 Apache Roller: XML external entity processing in trackback response parser
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on a weblog to cause the server to parse an attacker-influenced trackback response with an XML parser that does not disable external entity resolution, leading to disclosure of fil...
CVE-2026-82386 Apache Roller: XML external entity processing in OPML bookmark import
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and reach internal network addresses by importing a crafted OPML document, because the bookmark import parser does not disable external entity...
EUVD-2026-88130
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and reach internal network addresses by importing a crafted OPML document, because the bookmark import parser does not disable external entity...
CVE-2026-82386 Apache Roller: XML external entity processing in OPML bookmark import
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and reach internal network addresses by importing a crafted OPML document, because the bookmark import parser does not disable external entity...
CVE-2026-82386
Apache Roller version 6.1.5 is vulnerable to an XML external entity (XXE) processing flaw within the OPML bookmark import function. Because the parser fails to disable external entity resolution, a weblog administrator can read local files accessible to the Roller process or perform internal netw...
CVE-2026-82386 Apache Roller: XML external entity processing in OPML bookmark import
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and reach internal network addresses by importing a crafted OPML document, because the bookmark import parser does not disable external entity...
CVE-2026-82376: Improper Restriction of XML External Entity Reference
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on a weblog to cause the server to parse an attacker-influenced trackback response with an XML parser that does not disable external entity resolution, leading to disclosure of fil...
CVE-2026-82386: Improper Restriction of XML External Entity Reference
Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and reach internal network addresses by importing a crafted OPML document, because the bookmark import parser does not disable external entity...
Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by an improper restriction of XML External Entity Reference vulnerability due to Apache CXF (CVE-2026-49875)
Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server Liberty with the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, xmlWS-4.0 or wsAtomicTransaction-1.2 enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...
Security Bulletin: jackson-mapper vulnerability addressed in IBM Big Replicate LiveData Migrator 3.4
Summary jackson-mapper vulnerability addressed in IBM Big Replicate LiveData Migrator Vulnerability Details CVEID:CVE-2019-10172 DESCRIPTION: A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehau...
CVE-2026-93030
FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw...
CVE-2026-93030
FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity injection flaw...