Lucene search
+L

43 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-0888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147. CVE-2026-0888 Note that Nessus relies on the...

5.3CVSS6.1AI score0.00313EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/01/14 12:25 a.m.3 views

SUSE CVE-2026-0888

Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

4.3CVSS5.8AI score0.00313EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/13 2:16 p.m.14 views

CVE-2026-0888

Information disclosure in the XML component. This vulnerability affects Firefox 147 and Thunderbird 147...

5.3CVSS5.8AI score0.00313EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/13 2:16 p.m.6 views

CVE-2026-0888

Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

5.3CVSS0.00313EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/13 1:30 p.m.2 views

CVE-2026-0888 Information disclosure in the XML component

Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

5.8AI score0.00313EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/13 1:30 p.m.5 views

CVE-2026-0888

Information disclosure in the XML component. This vulnerability affects Firefox 147 and Thunderbird 147...

5.3CVSS5.5AI score0.00313EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/13 1:30 p.m.20 views

CVE-2026-0888

CVE-2026-0888 relates to information disclosure in the XML component in Mozilla Firefox and Thunderbird prior to version 147. Affected products include Firefox < 147 and Thunderbird

5.3CVSS5.8AI score0.00313EPSS
SaveExploits0References3Affected Software2
AlpineLinux
AlpineLinux
added 2026/01/13 1:30 p.m.6 views

CVE-2026-0888

Information disclosure in the XML component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

5.3CVSS5.8AI score0.00313EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.2 views

PT-2026-2650

CVE-2026-0888 Firefox XML Component Information Disclosure Vulnerability Before ... https://t.co/j6X4ysK4qT Customizable Vulnerability Alerts: https://t.co/U7998fz7yk...

5.3CVSS6.4AI score0.00313EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/11/12 4:29 a.m.5 views

EUVD-2025-124757

Malicious code in mongoose-nextjs-tailwindcss-xml npm...

6.6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2024/10/16 10:26 a.m.14 views

CVE-2024-21242

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 19.3-19.24, 21.3-21.15 and 23.4-23.5. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via HTTP to compromise XML...

3.5CVSS5.5AI score0.00438EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/08/23 12:0 a.m.8 views

The vulnerability of the Google Chrome XML browser component allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Google Chrome XML browser component is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

7.5CVSS7.6AI score0.45912EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/08/11 12:0 a.m.10 views

The vulnerability of the XML component of the Google Chrome browser allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the Google Chrome XML browser component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass the ASLR protection mechanism by using a specially created HTML page...

7.5CVSS6.5AI score0.0044EPSS
SaveExploits1References5Affected Software2
SUSE CVE
SUSE CVE
added 2023/02/15 6:2 a.m.8 views

SUSE CVE-2009-3852

Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."...

7.5CVSS6.8AI score0.01664EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/09/19 12:0 a.m.5 views

Vulnerability in the Server: XML component of the MySQL Server subcomponent of the Oracle MySQL database management system that allows an attacker to cause a denial of service

A vulnerability in the Server: XML subcomponent of the MySQL Server XML component of the Oracle MySQL database management system is related to improper access control. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

6.5CVSS6.7AI score0.03972EPSS
SaveExploits0References24Affected Software7
BDU FSTEC
BDU FSTEC
added 2018/12/25 12:0 a.m.8 views

The vulnerability of the Castor XML software component for Cisco WebEx Meetings Server allows a attacker to disclose protected information.

The vulnerability of the Castor XML software component for Cisco WebEx Meetings Server relates to errors in restricting XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

5.3CVSS5.4AI score
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2017/10/19 5:0 p.m.28 views

CVE-2017-10261

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with logon to the infrastructure where XML Database executes to...

6.5AI score0.01297EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.4 views

The vulnerability of the MySQL database management system allows unauthorized users, after passing authentication, to affect the accessibility of data.

The vulnerability of the Oracle MySQL database management system, related to the MySQL Server component within Oracle MySQL, allows unauthorized users who have been authenticated to influence data accessibility by using a sub-component XML...

4CVSS6.2AI score0.03206EPSS
SaveExploits0References4Affected Software1
securityvulns
securityvulns
added 2011/09/20 12:0 a.m.462 views

XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke

Hello, Microsoft recently published MS11-074. This bulletin concerns mainly SharePoint 2007 and 2010 but CVE-2011-1892 applies too to Office Groove client and server, Office Forms Server 2007 and Office Web Apps 2010. The vulnerability is a "XML External Entity Reference" one, as described in...

4CVSS0.4AI score0.38332EPSS
SaveExploits6
NVD
NVD
added 2009/11/03 4:30 p.m.18 views

CVE-2009-3852

Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."...

7.5CVSS6.4AI score0.01664EPSS
SaveExploits0References5
Rows per page
Query Builder