11416 matches found
Multiple improper restriction of XML external entity reference (XXE) vulnerabilities in Office Server Document Converter
Overview Office Server Document Converter provided by Antenna House, Inc. contains multiple improper restriction of XML external entity reference XXE vulnerabilities listed below. Improper restriction of XML external entity reference XXE CWE-611 - CVE-2021-20838 Resource exhaustion in the PDF...
CVE-2021-3869
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
Xxe
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
CVE-2021-3869
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
CVE-2021-3869
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
CVE-2021-3869
The CVE-2021-3869 entry concerns Stanford CoreNLP (corenlp) and is caused by improper restriction of XML External Entity (XXE) references. Public sources in the connected documents confirm this XXE vulnerability affecting CoreNLP, with references indicating potential exposure/read access issues v...
CVE-2021-3869: Improper Restriction of XML External Entity Reference
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
Stanford CoreNlp 代码问题漏洞
Stanford CoreNlp is a set of open source, natural language analysis tools written in Java by the Stanford Nlp Group team. A security vulnerability exists in Stanford CoreNlp that stems from an improperly restricted XML external entity reference...
PT-2021-22259
Name of the Vulnerable Software and Affected Versions corenlp affected versions not specified Description The issue is related to Improper Restriction of XML External Entity Reference. No information is provided about the estimated number of potentially affected devices or real-world incidents...
in appendium/flatpack
Description The flatpack vulnerable to XML External Entity XXE. An attacker that is able to provide a crafted XML file as input to the parse function in the MapParser.java file may allow an attacker to execute XML External Entities XXE. Proof of Concept import java.io.File; import...
CVE-2021-3878
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
CVE-2021-3878
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
CVE-2021-3878
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
CVE-2021-3878
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
CVE-2021-3878
CVE-2021-3878 affects Stanford CoreNLP: XML External Entity (XXE) processing vulnerability in readDocument() via DomReader.java. An unauthenticated, network-based attacker could exploit this to read arbitrary files, cause DoS, SSRF, port scanning, or other system impacts as indicated by the descr...
S-CMS XML External Entity Injection Vulnerability
S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. S-CMS 3.0 version of the /api/notify.php exists XML external entity injection vulnerability. An attacker can use this vulnerability to read arbitrary files...
Stanford CoreNlp 代码问题漏洞
Stanford CoreNlp is a set of open source, natural language analysis tools written in Java by the Stanford Nlp Group team in the U.S. A security vulnerability exists in Stanford Nlp Group, which stems from improper XML external entity reference restrictions. No details of the vulnerability are...
PT-2021-22289
Name of the Vulnerable Software and Affected Versions: corenlp affected versions not specified Description: The issue is related to Improper Restriction of XML External Entity Reference. No information is provided about the estimated number of potentially affected devices or real-world incidents...
