1813 matches found
RHLW-2026-48331BCB39D8AC49 Lightwell Security Advisory: yamlbeans 1.13.0.rhlw-00005
Red Hat Lightwell has released com.esotericsoftware.yamlbeans:yamlbeans 1.13.0.rhlw-00005 with backported fixes for CVE-2023-24620 and CVE-2023-24621. CVE-2023-24620: An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack...
CVE-2019-12401
CVE-2019-12401: XML Bomb in Apache Solr Solr versions prior to 5.0.0 are vulnerable to an XML resource consumption attack a.k.a. Lol Bomb via its update handler. By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML...
XXE-Payloads
XXE-Payloads Quick access to XXE Payloads XXE: %sp;...
CVE-2026-124038
An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running Android 10, 11 or 12, by returning a came...
CVE-2026-124038 Uncontrolled XML entity expansion in the Flock Installer app for Android
An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running Android 10, 11 or 12, by returning a came...
CVE-2026-124038 Uncontrolled XML entity expansion in the Flock Installer app for Android
An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running Android 10, 11 or 12, by returning a came...
CVE-2026-124038
The Flock Installer app for Android (versions before 2.35.0 ) is vulnerable to an uncontrolled XML entity expansion (CWE-776). An attacker with a valid technician account who can control or impersonate the camera being set up can crash the application by returning a camera configuration response ...
EUVD-2026-121268
An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running Android 10, 11 or 12, by returning a came...
CVE-2026-124038: Flock Flock Installer app: An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows…
An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running Android 10, 11 or 12, by returning a came...
PT-2026-141779
An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running Android 10, 11 or 12, by returning a came...
CVE-2026-115506
A flaw was found in expat. The parser's protection mechanism against recursive entity expansion detects amplification thresholds too late during document processing. A remote attacker can exploit this vulnerability by supplying a crafted XML document with nested entity definitions, causing...
CVE-2026-119724
UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...
CVE-2026-119724 Apache JClouds: XML External Entity (XXE) in provider-response parsing
UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...
EUVD-2026-115730
UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...
CVE-2026-119724
A flaw in Apache JClouds (all versions) allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML document. The root cause is the improper restriction of recursive entity references within Document Type Definitions (DTDs), which can lead to excessive consum...
CVE-2026-119724: Apache Software Foundation Apache JClouds: ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion')…
UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...
PT-2026-136064
UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache JClouds. This issue affects Apache JClouds: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommend...
Apache Commons Digester 3.2 XML Injection
Apache Commons Digester version 3.2 contains an XML external entity vulnerability that may lead to local file disclosure, server-side request forgery, or entity-expansion denial of service when untrusted XML is parsed. Apache Commons Digester 3.2 XXE Vulnerability Vendor: The Apache Software...
Apache Commons Digester 3.2 XXE Vulnerability
Summary Apache Commons Digester is a Java library from the Apache Commons project that converts XML documents into trees of Java objects. Description Apache Commons Digester creates its SAX parser factory with no protections against document type definitions or external entities, and the default...