18563 matches found
SUSE CVE-2025-68463
Bio.Entrez in Biopython through 186 allows doctype XXE...
PT-2025-53396
CVE-2023-5092 - Apache HTTP Server XML Entity Injection CVE ID : CVE-2023-5092 Published : Dec. 23, 2025, 2:16 p.m. | 42 minutes ago Description : Rejected reason: This CVE id was assigned to an issue which was later deemed not security relevant. Severity: 0.0 | NA Visit the link for more details...
Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector
Summary Multiple vulnerabilities were addressed in IBM StreamSets Data Collector version 7.0.0 Vulnerability Details CVEID:CVE-2019-10202 DESCRIPTION: A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485,...
Malicious code in tiny-model-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a69a5156f95b3b1ddd3a9c0ddd7e1fad0cdd92841e56dc6ea7b950a35a5eb34 The package tiny-model-update was found to contain malicious code. Source: ghsa-malware...
Security Bulletin: User Entity Behavior Analytics app for IBM QRadar SIEM includes components with known vulnerabilities
Summary Components with known vulnerabilities were addressed in a IBM User Entity Behavior Analytics app release Vulnerability Details CVEID:CVE-2025-55182 DESCRIPTION: A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and...
MAL-2025-192661 Malicious code in adel-xnetgpt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85b321aa51079c32d9640eb5619d6350f409dc14f26141a99a5744932ddee14 The package adel-xnetgpt was found to contain malicious code. Source: ghsa-malware 0ebdfb3056af9b8e58d8ce4bc938a77b985744ece2a3de14f4b691d2b97ca3ad A...
Malicious code in baidu-tester (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421c0014ea5fca29effc2b5cc0a04d984b9c2d557496c3ae31a5724ab6337417 The package baidu-tester was found to contain malicious code. Source: ghsa-malware e3d13abe3b7037aa5d2906857e05ea0f19837a22cf3563951cf23717228d15b2 A...
XXE (XML External Entity Injection) in Crowd Data Center and Server
This High severity XXE XML External Entity Injection vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. This XXE XML External Entity Injection vulnerability, with a CVSS Score of 7.9, allows an authenticated attacker to access local and remote content which has high...
Malicious code in viktorparserctf3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c2840e0c17dd93d7212fbf45f44cc176dab955745be97cc722dbf28f642cbd The package viktorparserctf3 was found to contain malicious code. Source: ghsa-malware 70fd554f1378b0035e48dd211debb57d92eb88e7548b4e441993571ffd7b89...
Malicious code in hubstyletokens (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270a762e8fe2aca75314b8b673b01068f64424cb56d5442954e0c44119475dff The package hubstyletokens was found to contain malicious code. Source: ghsa-malware b315d930157f2b1fd1b14cddfbd3f09759c6b275da5b51570eadff87cadf27b8...
MAL-2025-192627 Malicious code in elf-stats-sugarplum-fir-770 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba9b8e626ecf42f5770535353dad46da3dbae1b468a54040b1024c069ead0f72 The package elf-stats-sugarplum-fir-770 was found to contain malicious code. Source: ghsa-malware...
Malicious code in chai-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74105dd25d6c4527e469282746ab5847ca41c5f21873099aa73bcf848f99432 The package chai-async was found to contain malicious code. Source: ghsa-malware 5eadd1bc38807a3c5bcec1c37a5d1a1de8bf81bfed4a5a7ba235a1e6f8ec34aa Any...
Malicious code in ctfparsertna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52cd5612214cb1fd0ed34899c5e686c4fdbecb4a820e170a3589987c20b9b3da The package ctfparsertna was found to contain malicious code. Source: ghsa-malware 90b9a48b58422c5d9853769c983bd04388558c312be191e3bfd8a82158214d38 A...
Exploit for Improper Restriction of XML External Entity Reference in Apache Tika
CVE-2025-66516: Minimized Verification Environment This proje...
XXE (XML External Entity Injection) org.apache.tika:tika-core Dependency in Confluence Data Center and Server
This High severity XXE XML External Entity Injection vulnerability was introduced in versions 7.7.0 of Confluence Data Center and Server. This XXE XML External Entity Injection vulnerability, with a CVSS Score of 8.4 and a CVSS Vector of CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H allows an...
CVE-2025-68463
A flaw was found in python-biopython. The Bio.Entrez module is vulnerable to an XML External Entity XXE attack when processing untrusted XML data. A remote attacker could exploit this vulnerability to disclose sensitive information from the system or potentially cause a denial of service DoS by...
XXE (XML External Entity Injection) in Confluence Data Center and Server
This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity XXE XML External Entity Injection vulnerability was introduced in versions 9.2.8 and 10.2.0 of Confluence Data Center a...
XML External Entity (XXE) Injection
Overview biopython is a Freely available tools for computational molecular biology. Affected versions of this package are vulnerable to XML External Entity XXE Injection via the Bio.Entrez class. An attacker can access sensitive information or cause limited denial of service by submitting crafted...
