CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

775 matches found

osv_cve•added 2022/10/11 12:00 a.m.•38 views

CVE-2022-37616

A prototype pollution vulnerability exists in the function copy in dom.js in the xmldom published as @xmldom/xmldom package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states "we are in the process of marking this report as invalid"; however, some third parties takes the positio...

9.4AI score

SaveExploits0References12

Positive Technologies•added 2022/10/11 12:00 a.m.•7 views

PT-2022-24028 · Npm +2 · @Xmldom/Xmldom +2

Name of the Vulnerable Software and Affected Versions: @xmldom/xmldom versions prior to 0.8.3 Description: A prototype pollution vulnerability exists in the function copy in dom.js via the p variable. This issue is disputed by the vendor and some third parties, with attempts to create a proof of...

9.8CVSS6.3AI score0.02119EPSS

SaveExploits1References35

nodejs•added 2021/08/03 4:57 p.m.•91 views

Misinterpretation of malicious XML input

Overview Impact xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes during XML processing in some downstream applications. Patches Update to 0.7.0 see issue 271 for the stat...

5CVSS3.8AI score0.01358EPSS

SaveExploits0Affected Software1

osv_ghsa•added 2021/08/03 4:57 p.m.•23 views

GHSA-5FG8-2547-MR8Q Misinterpretation of malicious XML input

Impact xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes during XML processing in some downstream applications. Patches Update to one of the fixed versions of @xmldom/xmld...

6.5CVSS6.8AI score0.01358EPSS

SaveExploits0References7

RedhatCVE•added 2021/07/29 2:25 p.m.•43 views

CVE-2021-32796

A flaw was found in nodejs-xmldom. The xmldom library is an open-source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Xmldom does not correctly escape special characters when serializing elements removed from their ancestor. This flaw may lead to...

6.5CVSS2.8AI score0.01358EPSS

SaveExploits0References4

Veracode•added 2021/07/29 3:04 a.m.•25 views

XML Injection

xmldom is vulnerable to XML injection. The library correctly escapes special characters when serializing elements removed from their ancestor, potentially leading to unexpected syntactic changes during XML processing...

6.5CVSS4.2AI score0.01358EPSS

SaveExploits0References5Affected Software2

osv_cve•added 2021/07/27 10:15 p.m.•24 views

CVE-2021-32796

xmldom is an open source pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes duri...

5.3CVSS6.5AI score

SaveExploits0References3

NVD•added 2021/07/27 10:15 p.m.•18 views

CVE-2021-32796

6.5CVSS0.01358EPSS

SaveExploits0References3

Prion•added 2021/07/27 10:15 p.m.•26 views

Input validation

5CVSS5.4AI score0.01358EPSS

SaveExploits0References3Affected Software1

osv_ubuntu•added 2021/07/27 10:15 p.m.•11 views

UBUNTU-CVE-2021-32796

6.5CVSS6.7AI score0.01358EPSS

SaveExploits0References5

attackerkb•added 2021/07/27 10:15 p.m.•13 views

CVE-2021-32796

6.5CVSS6.5AI score0.01358EPSS

SaveExploits0References4Affected Software1

UbuntuCve•added 2021/07/27 10:15 p.m.•30 views

CVE-2021-32796

6.5CVSS6.7AI score0.01358EPSS

SaveExploits0References4

Cvelist•added 2021/07/27 9:45 p.m.•35 views

CVE-2021-32796 Misinterpretation of malicious XML input in xmldom

6.5CVSS6.9AI score0.01358EPSS

SaveExploits0References3

CVE•added 2021/07/27 9:45 p.m.•165 views

CVE-2021-32796

CVE-2021-32796 affects the xmldom library where versions

6.5CVSS5.4AI score0.01358EPSS

SaveExploits0References3Affected Software1

Mend•added 2021/07/27 9:45 p.m.•3 views

CVE-2021-32796

6.9CVSS0.01358EPSS

SaveExploits0References8

Debian CVE•added 2021/07/27 9:45 p.m.•35 views

CVE-2021-32796

6.5CVSS6AI score0.01358EPSS

SaveExploits0

Rapid7 Vulnerability Database (full)•added 2021/07/27 12:00 a.m.•5 views

CVE-2021-32796: Improper Encoding or Escaping of Output

6.5CVSS5.7AI score0.01358EPSS

SaveExploits0References4

CNNVD•added 2021/07/27 12:00 a.m.•17 views

xmldom 安全漏洞

Chris Brody xmldom is an open source application by Chris Brody, a JavaScript implementation of the W3C DOM for Node.js, Rhino, and browsers. xmldom has a security vulnerability in 0.6.0 and earlier versions that stems from an inability to properly escape special characters. A security...

6.5CVSS6.3AI score0.01358EPSS

SaveExploits0References6

Positive Technologies•added 2021/07/10 12:00 a.m.•3 views

PT-2021-6454

Name of the Vulnerable Software and Affected Versions xmldom versions 0.6.0 and older Description The issue is related to the incorrect filtering of special characters in the XML DOM implementation. This may lead to unexpected syntactic changes during XML processing in some downstream application...

6.5CVSS0.01358EPSS

SaveExploits0References18

IBM Security Bulletins•added 2021/05/13 7:23 p.m.•63 views

Security Bulletin: A security vulnerability in Node.js xmldom and msgpack5 module affects IBM Cloud Pak for Multicloud Management Managed Service

Summary A security vulnerability in Node.js xmldom and msgpack5 module affects IBM Cloud Pak for Multicloud Management Managed Service. Vulnerability Details CVEID: CVE-2021-21366 DESCRIPTION: Node.js xmldom module could allow a remote attacker to bypass security restrictions, caused by improper...

8.8CVSS2.1AI score0.01649EPSS

SaveExploits1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by