PT-2026-2650

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 147 Description An information disclosure issue exists in the XML component. Recommendations Update to Firefox version 147 or later...

EUVD-2025-124757

Malicious code in mongoose-nextjs-tailwindcss-xml npm...

CVE-2024-21242

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 19.3-19.24, 21.3-21.15 and 23.4-23.5. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via HTTP to compromise XML...

The vulnerability of the Google Chrome XML browser component allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Google Chrome XML browser component is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

The vulnerability of the XML component of the Google Chrome browser allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the Google Chrome XML browser component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass the ASLR protection mechanism by using a specially created HTML page...

SUSE CVE-2009-3852

Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."...

Vulnerability in the Server: XML component of the MySQL Server subcomponent of the Oracle MySQL database management system that allows an attacker to cause a denial of service

A vulnerability in the Server: XML subcomponent of the MySQL Server XML component of the Oracle MySQL database management system is related to improper access control. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

The vulnerability of the Castor XML software component for Cisco WebEx Meetings Server allows a attacker to disclose protected information.

The vulnerability of the Castor XML software component for Cisco WebEx Meetings Server relates to errors in restricting XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2017-10261

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with logon to the infrastructure where XML Database executes to...

The vulnerability of the MySQL database management system allows unauthorized users, after passing authentication, to affect the accessibility of data.

The vulnerability of the Oracle MySQL database management system, related to the MySQL Server component within Oracle MySQL, allows unauthorized users who have been authenticated to influence data accessibility by using a sub-component XML...

XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke

Hello, Microsoft recently published MS11-074. This bulletin concerns mainly SharePoint 2007 and 2010 but CVE-2011-1892 applies too to Office Groove client and server, Office Forms Server 2007 and Office Web Apps 2010. The vulnerability is a "XML External Entity Reference" one, as described in...

CVE-2009-3852

Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."...

Design/Logic Flaw

Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."...

CVE-2009-3852

CVE-2009-3852 is an unspecified vulnerability in the IBM Runtimes for Java Technology XML4J component (XML4J parsing) linked to IBM XML4J 4.4.17, affecting IBM Tivoli Application Dependency Discovery Manager 7.3.0.0–7.3.0.9. The initial sources describe unknown impact/attack vectors; NVD lists a ...

CVE-2009-3852: Undefined Security Weakness

Unspecified vulnerability in the XML component in IBM Runtimes for Java Technology 5.0.0 before SR10 has unknown impact and attack vectors, related to the "updated version of XML4J 4.4.17."...

CVE-2006-0272

Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln DB29. NOTE: based on mutual credits by the relevant sources, it is highly likely that this issue is a buffer overflow in t...