Lucene search
+L

11403 matches found

OSV
OSV
•added 2023/01/06 10:15 a.m.•27 views

CVE-2016-15011

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS9.6AI score
SaveExploits0References4
Prion
Prion
•added 2023/01/06 10:15 a.m.•24 views

Xxe

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

7.5CVSS7.1AI score0.00737EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2023/01/06 9:46 a.m.•3 views

CVE-2016-15011

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS0.00737EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2023/01/06 9:46 a.m.•29 views

CVE-2016-15011 e-Contract dssp SignResponseVerifier.java checkSignResponse xml external entity reference

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

5.5CVSS9.6AI score0.00737EPSS
SaveExploits0References4
CVE
CVE
•added 2023/01/06 9:46 a.m.•82 views

CVE-2016-15011

The CVE-2016-15011 issue affects e-Contract dssp up to 1.3.1, specifically the function checkSignResponse in dssp-client/src/main/java/be/e_contract/dssp/client/SignResponseVerifier.java. The root cause is a vulnerability leading to XML External Entity (XXE) reference. A fix is available in dssp ...

9.8CVSS7.5AI score0.00737EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2023/01/06 12:00 a.m.•17 views

Digital Signature Service Protocol 代码问题漏洞

Digital Signature Service Protocol is an e-Contract.be open source library . Digital Signature Service Protocol provides a specification and Java reference implementation for the Digital Signature Service Protocol. Digital Signature Service Protocol versions prior to 1.3.2 there is a code problem...

9.8CVSS6.4AI score0.00737EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2023/01/06 12:00 a.m.•24 views

EulerOS 2.0 SP9 : expat (EulerOS-SA-2023-1098)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XMLExternalEntityParserCreate in...

7.5CVSS7.2AI score0.02457EPSS
SaveExploits1References2
GitLab Advisory Database
GitLab Advisory Database
•added 2023/01/06 12:00 a.m.•31 views

Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS3.2AI score0.00737EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/06 12:00 a.m.•3 views

CVE-2016-15011: Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in e-Contract dssp up to 1.3.1. Affected by this vulnerability is the function checkSignResponse of the file dssp-client/src/main/java/be/econtract/dssp/client/SignResponseVerifier.java. The manipulation leads to xml external entity reference...

9.8CVSS5.2AI score0.00737EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2023/01/05 12:30 p.m.•36 views

aXMLRPC XML External Entity vulnerability

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.12.1 is able...

9.8CVSS9AI score0.00845EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2023/01/05 12:30 p.m.•69 views

GHSA-G4R8-28FP-F255 aXMLRPC XML External Entity vulnerability

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.12.1 is able...

9.8CVSS5.1AI score0.00845EPSS
SaveExploits0References8
OSV
OSV
•added 2023/01/05 12:15 p.m.•26 views

CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS9.6AI score
SaveExploits0References4
NVD
NVD
•added 2023/01/05 12:15 p.m.•41 views

CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS7.5AI score0.00845EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/01/05 12:15 p.m.•31 views

CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS5.8AI score0.00845EPSS
SaveExploits0References3
Prion
Prion
•added 2023/01/05 12:15 p.m.•27 views

Xxe

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

7.5CVSS9.5AI score0.00845EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/01/05 12:15 p.m.•13 views

UBUNTU-CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS5.3AI score0.00845EPSS
SaveExploits0References4
Mend
Mend
•added 2023/01/05 11:29 a.m.•5 views

CVE-2020-36641

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the function ResponseParser of the file src/main/java/de/timroes/axmlrpc/ResponseParser.java. The manipulation leads to xml external entity reference. Upgrading to version 1.14.0 is able...

9.8CVSS0.00845EPSS
SaveExploits0References8
OSV
OSV
•added 2023/01/05 10:15 a.m.•28 views

CVE-2020-36640

A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...

9.8CVSS9.6AI score
SaveExploits0References5
Mend
Mend
•added 2023/01/05 9:09 a.m.•4 views

CVE-2020-36640

A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...

9.8CVSS0.0077EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2023/01/05 9:09 a.m.•15 views

CVE-2020-36640 bonitasoft bonita-connector-webservice SecureWSConnector.java TransformerConfigurationException xml external entity reference

A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. This affects the function TransformerConfigurationException of the file src/main/java/org/bonitasoft/connectors/ws/SecureWSConnector.java. The manipulation leads to xml external...

5.5CVSS6.8AI score0.0077EPSS
SaveExploits0References5
Rows per page
Query Builder