Lucene search
+L

9 matches found

OSV
OSV
•added 2026/10/08 12:55 a.m.•3 views

CLEANSTART-2026-WN90580 flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature

Security vulnerability affects the apache-hive package. A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature...

5.3CVSS6.6AI score0.01292EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2022-1221

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.01292EPSS
SaveExploits0References13
OSV
OSV
•added 2022/02/15 1:37 a.m.•68 views

GHSA-W4JQ-QH47-HVJQ Improper Input Validation in Xerces

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This iss...

5.3CVSS6.6AI score0.01292EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/02/15 1:37 a.m.•56 views

Improper Input Validation in Xerces

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This iss...

5.3CVSS3.1AI score0.01292EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2020/09/17 3:15 p.m.•36 views

CVE-2020-14338

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This iss...

5.3CVSS0.01292EPSS
SaveExploits0References2
Mend
Mend
•added 2020/09/17 2:06 p.m.•0 views

CVE-2020-14338

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This iss...

6.9CVSS0.01292EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/17 12:00 a.m.•1 views

CVE-2020-14338: Improper Input Validation

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This iss...

5.3CVSS5.7AI score0.01292EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/08/27 1:38 p.m.•68 views

CVE-2020-14338

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validation process in certain cases. This iss...

5.3CVSS6.4AI score0.0435EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/08/27 12:00 a.m.•0 views

PT-2020-3788

Name of the Vulnerable Software and Affected Versions: WildFly versions prior to 2.12.0.SP3 Xerces JBoss versions prior to 2.12.0.SP3 Description: The issue is related to insufficient input validation in the XMLSchemaValidator class of the JAXP component in WildFly. This allows a remote attacker ...

5.3CVSS0.01292EPSS
SaveExploits0References9
Rows per page
Query Builder