10133 matches found
Xxe
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...
Xxe
py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...
PYSEC-2023-97
easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...
PYSEC-2023-96
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...
PYSEC-2023-95
py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...
PYSEC-2023-97
easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...
PYSEC-2023-96
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...
py-xml 代码问题漏洞
py-xml is a Python XML binding library open source by China Pinae. A security vulnerability exists in py-xml v1.0, which stems from the inclusion of an XML External Entity Injection XXE vulnerability that allows an attacker to execute arbitrary code through a crafted XML file...
PT-2023-11755 · Pypi · Requests-Xml
Name of the Vulnerable Software and Affected Versions: requests-xml version 0.2.3 Description: The issue allows attackers to execute arbitrary code via a crafted XML file, exploiting an XML External Entity Injection XXE vulnerability. Recommendations: For version 0.2.3, update to a version that...
CVE-2020-26709
CVE-2020-26709 affects py-xml v1.0 and is caused by an XML External Entity (XXE) vulnerability in the XML parsing path, allowing an attacker to execute arbitrary code via a crafted XML file. The issue is documented across multiple sources (NVD entry, Red Hat advisory, GHSA, OSV, CNNVD, CVE list, ...
PT-2023-11756 · Pyxml · Pyxml
Name of the Vulnerable Software and Affected Versions: py-xml version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted XML file, exploiting an XML External Entity Injection XXE vulnerability. Recommendations: For py-xml version 1.0, consider disabling the XML...
CVE-2020-26708
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...
Requests-XML 代码问题漏洞
Requests-XML is a library for parsing XML from the individual developers at erinxocon. A security vulnerability exists in requests-xml version v0.2.3, which stems from the inclusion of an XML External Entity Injection XXE vulnerability that allows an attacker to execute arbitrary code via a craft...
easy-parse 代码问题漏洞
easy-parse is a PyPI project for xml and json parsing by the individual developer Colton Willig. A security vulnerability exists in easy-parse v0.1.1, which stems from the inclusion of an XML External Entity Injection XXE vulnerability that could allow an attacker to execute arbitrary code via a...
CVE-2020-26708
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...
CVE-2020-26709
py-xml v1.0 was discovered to contain an XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...
PT-2023-11757 · Unknown · Easy-Parse
Name of the Vulnerable Software and Affected Versions: easy-parse version 0.1.1 Description: The issue allows attackers to execute arbitrary code via a crafted XML file, exploiting a XML External Entity Injection XXE vulnerability. Recommendations: For easy-parse version 0.1.1, update to a versio...
codehaus-plexus: XML External Entity (XXE) Injection
A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtilwriteComment fails to sanitize comments for a -- sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection...
Important: Red Hat Security Advisory: Red Hat Integration Camel K 1.10.1 release security update
Red Hat Integration Camel K 1.10.1 release and security update is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Red Hat Product Security has rated this update as having an impact of Important. A security update for Camel K 1.10.1 is now...
