Lucene search
+L

534 matches found

NVD
NVD
•added 2023/02/19 5:15 p.m.•49 views

CVE-2014-125087

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

9.8CVSS7.5AI score0.01241EPSS
SaveExploits1References6
CVE
CVE
•added 2023/02/19 4:31 p.m.•98 views

CVE-2014-125087

CVE-2014-125087 affects java-xmlbuilder up to 1.1. The issue is an XML External Entity (XXE) reference in the XML parser handling, allowing potentially disclosure of sensitive files. A fix is available in version 1.2, with patch name e6fddca201790abab4f2c274341c0bb8835c3e73. Upgrading the affecte...

9.8CVSS7.4AI score0.01241EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2023/02/19 4:31 p.m.•58 views

CVE-2014-125087 java-xmlbuilder xml external entity reference

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

5.5CVSS9.5AI score0.01241EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/19 12:00 a.m.•2 views

CVE-2014-125087: Improper Restriction of XML External Entity Reference

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. The name of the patch is...

9.8CVSS5.2AI score0.01241EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/16 12:00 a.m.•3 views

CVE-2022-39954: Improper Restriction of XML External Entity Reference

An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.7, FortiNAC version 9.1.0 through 9.1.8, FortiNAC version 8.8.0 through 8.8.11, FortiNAC version 8.7.0 through 8.7.6, FortiNAC version 8.6.0 through 8.6.5,...

9.1CVSS5.9AI score0.00548EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/02/14 12:00 a.m.•38 views

JVN#00712821: Improper restriction of XML external entity reference (XXE) vulnerability in tsClinical Define.xml Generator and tsClinical Metadata Desktop Tools

tsClinical Define.xml Generator and tsClinical Metadata Desktop Tools provided by FUJITSU LIMITED contain an improper restriction of XML external entity reference XXE vulnerability CWE-611. Impact By reading a specially crafted XML file, arbitrary files which meet a certain condition may be...

7.4CVSS7.4AI score0.00677EPSS
SaveExploits0
NVD
NVD
•added 2023/01/30 7:15 a.m.•32 views

CVE-2023-22322

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

5.5CVSS5.4AI score0.00211EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/01/30 12:00 a.m.•37 views

CVE-2023-22322

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

5.7AI score0.00211EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/24 12:00 a.m.•3 views

CVE-2023-24429: Improper Restriction of XML External Entity Reference

Jenkins Semantic Versioning Plugin 1.14 and earlier does not restrict execution of an controller/agent message to agents, and implements no limitations about the file path that can be parsed, allowing attackers able to control agent processes to have Jenkins parse a crafted file that uses externa...

9.8CVSS5.8AI score0.01314EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/17 12:00 a.m.•7 views

CVE-2023-21862: Improper Restriction of XML External Entity Reference

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: XML Security component. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web...

8.1CVSS5.8AI score0.00573EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/17 12:00 a.m.•3 views

CVE-2023-22624: Improper Restriction of XML External Entity Reference

Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks...

7.5CVSS5.8AI score0.03184EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/15 12:00 a.m.•5 views

CVE-2023-23595: Improper Restriction of XML External Entity Reference

BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might contain credentials, such as "machine example.com login daniel password qwerty" in the documentation example for the .netrc file format. NOTE: 2.x versions are no longer supported...

7.5CVSS5.7AI score0.00954EPSS
SaveExploits1References3
NVD
NVD
•added 2023/01/09 12:15 p.m.•32 views

CVE-2021-4311

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended ...

9.8CVSS6.7AI score0.00669EPSS
SaveExploits0References4
Prion
Prion
•added 2023/01/09 12:15 p.m.•29 views

Xxe

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended ...

7.5CVSS9.4AI score0.00669EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2023/01/09 11:20 a.m.•42 views

CVE-2021-4311 Talend Open Studio for MDM XML xml external entity reference

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended ...

5.5CVSS9.8AI score0.00669EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/09 12:00 a.m.•6 views

CVE-2021-4311: Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended ...

9.8CVSS5.3AI score0.00669EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2023/01/07 9:30 p.m.•33 views

kelvinmo simplexrd vulnerable to Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The name of...

9.8CVSS9.2AI score0.00811EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2023/01/07 9:30 p.m.•40 views

GHSA-RH3M-PR36-XH2F kelvinmo simplexrd vulnerable to Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The name of...

9.8CVSS7.6AI score0.00811EPSS
SaveExploits0References6
NVD
NVD
•added 2023/01/07 8:15 p.m.•30 views

CVE-2015-10029

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is...

9.8CVSS6.7AI score0.00811EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/01/07 7:36 p.m.•37 views

CVE-2015-10029 kelvinmo simplexrd simplexrd.class.php xml external entity reference

A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd.class.php. The manipulation leads to xml external entity reference. Upgrading to version 3.1.1 is able to address this issue. The patch is...

5.5CVSS9.7AI score0.00811EPSS
SaveExploits0References4
Rows per page
Query Builder