Lucene search
K

8 matches found

OSV
OSV
added 2015/05/12 7:59 p.m.1 views

DEBIAN-CVE-2015-3451

The clone function in XML::LibXML before 2.0119 does not properly set the expandentities option, which allows remote attackers to conduct XML external entity XXE attacks via crafted XML data to the 1 new or 2 loadxml function...

5CVSS7.2AI score0.03365EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2015/05/12 7:0 p.m.19 views

CVE-2015-3451

The clone function in XML::LibXML before 2.0119 does not properly set the expandentities option, which allows remote attackers to conduct XML external entity XXE attacks via crafted XML data to the 1 new or 2 loadxml function...

5CVSS9.4AI score0.03365EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2015/05/05 12:0 a.m.22 views

Ubuntu 14.04 LTS : XML::LibXML vulnerability (USN-2592-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2592-1 advisory. Tilmann Haak discovered that XML::LibXML incorrectly handled the expandentities parameter in certain situations. A remote attacker could possibly use this issue t...

5CVSS8.3AI score0.03365EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2015/05/04 4:34 p.m.69 views

USN-2592-1: XML::LibXML vulnerability

Tilmann Haak discovered that XML::LibXML incorrectly handled the expandentities parameter in certain situations. A remote attacker could possibly use this issue to access sensitive information...

5CVSS8.3AI score0.03365EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2015/05/04 12:0 a.m.21 views

Debian DSA-3243-1 : libxml-libxml-perl - security update

Tilmann Haak from xing.com discovered that XML::LibXML, a Perl interface to the libxml2 library, did not respect the expandentities parameter to disable processing of external entities in some circumstances. This may allow attackers to gain read access to otherwise protected resources, depending ...

5CVSS8.2AI score0.03365EPSS
Exploits0References5
securityvulns
securityvulns
added 2015/05/04 12:0 a.m.27 views

XML::LibXML information leakage

Information disclosure on expandentities...

5CVSS0.3AI score0.03365EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2015/05/01 12:0 a.m.31 views

Debian Security Advisory DSA 3243-1 (libxml-libxml-perl - security update)

Tilmann Haak from xing.com discovered that XML::LibXML, a Perl interface to the libxml2 library, did not respect the expandentities parameter to disable processing of external entities in some circumstances. This may allow attackers to gain read access to otherwise protected resources, depending ...

5CVSS9.3AI score0.03365EPSS
Exploits0References1
OSV
OSV
added 2015/05/01 12:0 a.m.20 views

DSA-3243-1 libxml-libxml-perl - security update

Bulletin has no description...

5CVSS9.3AI score0.03365EPSS
Exploits0
Rows per page
Query Builder