Lucene search
+L

18880 matches found

CNNVD
CNNVD
added 2023/01/07 12:00 a.m.14 views

simplexrd 代码问题漏洞

simplexrd is a very simple XRD document parser by Kelvin Mo, a personal developer. A code issue vulnerability exists in versions of simplexrd prior to 3.1.1, which stems from a problem with unknown code in the file simplexrd/simplexrd.class.php, which can lead to xml external entity references...

9.8CVSS6.5AI score0.00811EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/01/07 12:00 a.m.7 views

robitailletheknot 安全漏洞

robitailletheknot is a site. A security vulnerability exists in robitailletheknot that stems from comparing two entities in context, but the comparison is incorrect...

9.8CVSS5.6AI score0.00805EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/01/07 12:00 a.m.16 views

PT-2023-10208 · Kelvinmo · Simplexrd

Name of the Vulnerable Software and Affected Versions: kelvinmo simplexrd versions up to 3.1.0 Description: A vulnerability was found in the file simplexrd/simplexrd.class.php, which leads to xml external entity reference. This issue affects unknown code and can be addressed by upgrading to versi...

9.8CVSS5.8AI score0.00811EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2023/01/06 12:31 p.m.26 views

dssp vulnerable to Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS3AI score0.00737EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2023/01/06 12:31 p.m.22 views

GHSA-77CC-W3WM-6WHP dssp vulnerable to Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS9.6AI score0.00737EPSS
SaveExploits0References6
OSV
OSV
added 2023/01/06 10:15 a.m.25 views

CVE-2016-15011

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS9.6AI score
SaveExploits0References4
Prion
Prion
added 2023/01/06 10:15 a.m.20 views

Xxe

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

7.5CVSS7.1AI score0.00737EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2023/01/06 9:46 a.m.25 views

CVE-2016-15011 e-Contract dssp SignResponseVerifier.java checkSignResponse xml external entity reference

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

5.5CVSS9.6AI score0.00737EPSS
SaveExploits0References4
CVE
CVE
added 2023/01/06 9:46 a.m.75 views

CVE-2016-15011

The CVE-2016-15011 issue affects e-Contract dssp up to 1.3.1, specifically the function checkSignResponse in dssp-client/src/main/java/be/e_contract/dssp/client/SignResponseVerifier.java. The root cause is a vulnerability leading to XML External Entity (XXE) reference. A fix is available in dssp ...

9.8CVSS7.5AI score0.00737EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2023/01/06 12:00 a.m.10 views

Digital Signature Service Protocol 代码问题漏洞

Digital Signature Service Protocol is an e-Contract.be open source library . Digital Signature Service Protocol provides a specification and Java reference implementation for the Digital Signature Service Protocol. Digital Signature Service Protocol versions prior to 1.3.2 there is a code problem...

9.8CVSS6.4AI score0.00737EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/01/06 12:00 a.m.29 views

EulerOS 2.0 SP9 : libxml2 (EulerOS-SA-2023-1106)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, sever...

7.8CVSS6.9AI score0.22791EPSS
SaveExploits2References3
GitLab Advisory Database
GitLab Advisory Database
added 2023/01/06 12:00 a.m.27 views

Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS3.2AI score0.00737EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/01/06 12:00 a.m.22 views

EulerOS 2.0 SP9 : expat (EulerOS-SA-2023-1098)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in...

7.5CVSS7.2AI score0.02445EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2023/01/06 12:00 a.m.26 views

EulerOS 2.0 SP9 : libxml2 (EulerOS-SA-2023-1130)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, sever...

7.8CVSS6.9AI score0.22791EPSS
SaveExploits2References3
Github Security Blog
Github Security Blog
added 2023/01/05 12:30 p.m.30 views

aXMLRPC XML External Entity vulnerability

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.12.1 is able...

9.8CVSS9AI score0.00845EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2023/01/05 12:30 p.m.64 views

GHSA-G4R8-28FP-F255 aXMLRPC XML External Entity vulnerability

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.12.1 is able...

9.8CVSS5.1AI score0.00845EPSS
SaveExploits0References8
OSV
OSV
added 2023/01/05 12:15 p.m.22 views

CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS9.6AI score
SaveExploits0References4
NVD
NVD
added 2023/01/05 12:15 p.m.35 views

CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS7.5AI score0.00845EPSS
SaveExploits0References4
Prion
Prion
added 2023/01/05 12:15 p.m.22 views

Xxe

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

7.5CVSS9.5AI score0.00845EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/01/05 12:15 p.m.9 views

UBUNTU-CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS5.3AI score0.00845EPSS
SaveExploits0References4
Rows per page
Query Builder