Lucene search
+L

11408 matches found

OSV
OSV
•added 2022/03/30 10:15 p.m.•14 views

CVE-2021-43142

An XML External Entity XXE vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput...

9.8CVSS5.8AI score0.01465EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/30 10:15 p.m.•9 views

CVE-2021-33208

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file...

7.2CVSS7AI score0.01151EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/03/30 10:15 p.m.•10 views

CVE-2021-43142

An XML External Entity XXE vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput...

9.8CVSS7.3AI score0.01465EPSS
SaveExploits1References2
OSV
OSV
•added 2022/03/30 10:15 p.m.•14 views

CVE-2021-33208

The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file...

7.2CVSS7.1AI score0.01151EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/30 10:15 p.m.•20 views

CVE-2021-43142

An XML External Entity XXE vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput...

9.8CVSS0.01465EPSS
SaveExploits1References1
Prion
Prion
•added 2022/03/30 10:15 p.m.•21 views

Xxe

An XML External Entity XXE vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput...

7.5CVSS9.4AI score0.01465EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/03/30 9:05 p.m.•33 views

CVE-2021-43142

An XML External Entity XXE vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput...

9.7AI score0.01465EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2022/03/30 12:00 a.m.•44 views

XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the input files for the readXml or writeXml build step to have Jenkins parse a crafted file that uses external entities for...

8.1CVSS3.4AI score0.008EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/03/30 12:00 a.m.•87 views

GHSA-RWG2-W82X-V57J XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the input files for the readXml or writeXml build step to have Jenkins parse a crafted file that uses external entities for...

7.1CVSS8AI score0.008EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/03/30 12:00 a.m.•34 views

enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the input files for the 'Public Coverage / Complexity Scatter Plot' post-build step to have Jenkins parse a crafted...

8.1CVSS7.7AI score0.01012EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/03/30 12:00 a.m.•25 views

GHSA-8RX6-V5Q4-XW3J enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to control the input files for the 'Public Coverage / Complexity Scatter Plot' post-build step to have Jenkins parse a crafted...

7.1CVSS7.9AI score0.01012EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/03/30 12:00 a.m.•20 views

Software AG MashZone NextGen 代码问题漏洞

Software AG MashZone NextGen is a software from Software AG, Germany. It is used to visualize data interactively. A security vulnerability exists in Software AG MashZone NextGen version 10.7 and earlier versions, which stems from the "Register an Ehcache Configuration File" administrative feature...

7.2CVSS7.1AI score0.01151EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/30 12:00 a.m.•5 views

CVE-2021-43142: Improper Restriction of XML External Entity Reference

An XML External Entity XXE vulnerability exists in wuta jox 1.16 in the readObject method in JOXSAXBeanInput...

9.8CVSS8.2AI score0.01465EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/03/30 12:00 a.m.•16 views

JOX 代码问题漏洞

JOX is a set of Java libraries. You can easily transfer data between XML documents and Java beans. JOX 1.16 version of the JOXSAXBeanInput module has a security vulnerability , the vulnerability stems from the JOXSAXBeanInput module's readObject method of the XML External Entity XXE: XML External...

9.8CVSS8.3AI score0.01465EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2022/03/29 1:16 p.m.•15 views

jdom: XXE allows attackers to cause a DoS via a crafted HTTP request

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request...

7.5CVSS6.9AI score0.19442EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2022/03/29 1:15 p.m.•10 views

CVE-2022-28155

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.1CVSS5.9AI score0.008EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/03/29 1:15 p.m.•10 views

CVE-2022-28154

Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.1CVSS5.9AI score0.01012EPSS
SaveExploits0References3
OSV
OSV
•added 2022/03/29 1:15 p.m.•14 views

CVE-2022-28155

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.1CVSS7.8AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2022/03/29 1:15 p.m.•5 views

CVE-2022-28140

Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.1CVSS5.9AI score0.01012EPSS
SaveExploits0References3
NVD
NVD
•added 2022/03/29 1:15 p.m.•20 views

CVE-2022-28140

Jenkins Flaky Test Handler Plugin 1.2.1 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

8.1CVSS0.01012EPSS
SaveExploits0References2
Rows per page
Query Builder