Lucene search
+L

11061 matches found

GitLab Advisory Database
GitLab Advisory Database
•added 2024/11/05 12:00 a.m.•39 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.01904EPSS
SaveExploits1References5
GitLab Advisory Database
GitLab Advisory Database
•added 2024/11/05 12:00 a.m.•52 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.01904EPSS
SaveExploits1References5
CVE
CVE
•added 2024/11/05 12:00 a.m.•132 views

CVE-2024-51132

HAPI FHIR versions before v6.4.0 are vulnerable to an XML External Entity (XXE) injection. This flaw exists across multiple modules, including org.hl7.fhir.convertors, org.hl7.fhir.dstu2, org.hl7.fhir.dstu3, org.hl7.fhir.r4, org.hl7.fhir.r4b, org.hl7.fhir.r5, org.hl7.fhir.utilities, and org.hl7.f...

9.8CVSS7.4AI score0.01904EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/11/05 12:00 a.m.•43 views

CVE-2024-51132

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

0.01904EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/11/05 12:00 a.m.•17 views

HAPI FHIR 安全漏洞

HAPI FHIR is a Java-written HL7 FHIR API for the HAPI FHIR open source. A security vulnerability exists in HAPI FHIR versions prior to v6.4.0 that stems from the presence of an external entity reference that allows an attacker to access sensitive information or execute arbitrary code by providing...

9.8CVSS9AI score0.01904EPSS
SaveExploits1References2
GitLab Advisory Database
GitLab Advisory Database
•added 2024/11/05 12:00 a.m.•72 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.01904EPSS
SaveExploits1References5
GitLab Advisory Database
GitLab Advisory Database
•added 2024/11/05 12:00 a.m.•27 views

HAPI FHIR XML External Entity (XXE) vulnerability

An XML External Entity XXE vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities...

9.8CVSS6.7AI score0.01904EPSS
SaveExploits1References5
OSV
OSV
•added 2024/11/04 8:15 p.m.•5 views

CVE-2024-45086

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

5.5CVSS5.8AI score0.00437EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/04 7:29 p.m.•19 views

CVE-2024-45086 IBM WebSphere Application Server XML external entity injection

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

5.5CVSS6.6AI score0.00437EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/04 5:15 p.m.•33 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

9.8CVSS0.01199EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
•added 2024/11/04 12:36 p.m.•36 views

Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application and IBM HTTP Server which is included as part of IBM Tivoli Monitoring ITM portal server. have been remediated Vulnerability Details CVEID:CVE-2024-45071 DESCRIPTION: IBM WebSphere Application Server is vulnerable to stored cross-site...

7.5CVSS7.5AI score0.00565EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2024/11/04 12:00 a.m.•33 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

0.01199EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•12 views

OpenIMAJ 安全漏洞

OpenIMAJ Open Intelligent Multimedia Analysis for Java is an OpenIMAJ open source collection of multimedia image, text, video, audio, etc. content analysis and content generation libraries and tools. A security vulnerability exists in OpenIMAJ version v1.3.10, which stems from an XML external...

9.8CVSS6.8AI score0.01199EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/04 12:00 a.m.•0 views

CVE-2024-45086: Improper Restriction of XML External Entity Reference

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

5.5CVSS5.9AI score0.00437EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/04 12:00 a.m.•20 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

7.6AI score0.01199EPSS
SaveExploits1References3
OSV
OSV
•added 2024/11/04 12:00 a.m.•17 views

CVE-2024-51136

An XML External Entity XXE vulnerability in Dmoz2CSV in openimaj v1.3.10 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted XML file...

9.8CVSS7.3AI score
SaveExploits0References5
OSV
OSV
•added 2024/10/28 12:15 p.m.•9 views

CVE-2024-50442

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through 1.3.980...

7.2CVSS5.8AI score0.00549EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/28 11:14 a.m.•40 views

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

6.5CVSS0.00549EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/28 11:14 a.m.•25 views

CVE-2024-50442 WordPress Royal Elementor Addons and Templates plugin <= 1.3.980 - XML External Entity (XXE) vulnerability

Improper Restriction of XML External Entity Reference vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows XML Injection.This issue affects Royal Elementor Addons: from n/a through = 1.3.980...

6.5CVSS5.9AI score0.00549EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/28 12:00 a.m.•14 views

PT-2024-34218 · WordPress · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: WP Royal Royal Elementor Addons versions 1.3.980 and earlier Description: The issue is related to an Improper Restriction of XML External Entity Reference vulnerability, which allows XML Injection. This vulnerability affects WP Royal Royal...

7.2CVSS6.5AI score0.00549EPSS
SaveExploits0References5
Rows per page
Query Builder